Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: RYkZKDB9mHDK3Ft3lrK3ZrYgt4i4MPTRoJHpuNXGIqo=
Subject key identifier: F3:2D:C8:C4:31:C9:34:64:AE:35:D2:44:37:D3:0E:27:5D:DA:0F:EA
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01A0C6D79B7FC5ED19FF960272E2FB21DA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0EA6
Signing time: Tue 22 Sep 2026 02:00:13 +0000
Manifest this update: Tue 22 Sep 2026 02:00:13 +0000
Manifest next update: Wed 23 Sep 2026 02:00:13 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 3mzZtXHaemIpY46LnG2mIjyiNYKqQhIhjFDhgM7rnig=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:9b:7f:c5:ed:19:ff:96:02:72:e2:fb:21:da:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Sep 22 02:00:13 2026 GMT
Not After : Sep 23 02:00:13 2026 GMT
Subject: CN=f32dc8c431c93464ae35d24437d30e275dda0fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:e4:a3:c9:4b:77:4d:4f:db:cd:d8:04:1a:
0b:ea:b6:84:f6:5c:91:f0:8c:e7:13:21:e7:93:fb:
a6:73:58:59:8b:61:6c:a9:f5:ab:a3:9e:14:8d:e5:
47:c1:fc:55:a5:e3:8d:f5:be:db:c3:89:ff:88:74:
9c:48:14:7a:ce:b7:3c:88:25:ca:5d:66:61:62:54:
7b:09:f3:35:aa:65:96:82:f9:fb:74:f6:df:76:6b:
e9:f8:e9:68:42:e9:a2:2b:05:cd:2e:ab:86:75:1e:
30:6a:dd:c1:23:2c:b0:20:6d:f3:83:1c:41:83:ea:
81:2f:ff:49:64:af:59:f9:34:7e:03:ee:d2:e1:60:
e5:6c:54:e2:9a:f8:7b:a9:a6:4e:a4:1a:7a:74:0a:
ff:e9:00:42:45:a2:f3:50:f9:e3:3a:b6:de:be:00:
d7:53:14:ee:e0:6f:06:e8:8a:cd:0d:e7:76:11:ae:
a3:e4:32:0b:7b:27:c6:3c:be:1c:cb:45:2b:6d:7e:
1a:51:3c:37:cd:ee:f8:85:bb:b9:17:33:0e:3b:af:
7d:f4:71:57:6d:1a:5d:5d:0d:bf:85:ac:6c:50:f1:
e6:37:b3:41:37:27:8b:7d:ad:16:3d:a9:43:23:c6:
81:57:fe:4b:82:98:85:13:9e:cd:e8:f9:39:35:94:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2D:C8:C4:31:C9:34:64:AE:35:D2:44:37:D3:0E:27:5D:DA:0F:EA
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:31:bb:60:1d:e6:0c:db:88:0c:a6:31:10:de:4d:c0:86:85:
85:32:9b:ed:54:99:13:9c:89:a5:3c:89:bb:fa:27:bb:ac:e9:
1a:72:3c:b2:b1:25:c7:be:92:5e:00:b5:c7:f6:28:4b:df:2c:
08:e1:74:67:00:c3:29:b1:d7:7d:34:36:9b:94:cb:88:3f:30:
82:60:d5:0c:9c:d8:3d:a1:c9:1b:50:7a:b5:d1:c2:8c:29:32:
81:8c:0c:7b:df:47:c0:02:b5:51:9c:a8:f1:f5:46:43:51:53:
fa:c9:b1:e6:ce:8f:29:53:d5:3a:53:96:e1:a3:85:45:16:9a:
d1:9e:e6:3b:58:7f:1d:b8:49:a1:ec:fe:df:d2:33:b2:bc:51:
80:3a:5b:0f:1b:74:19:24:72:36:25:2f:39:5b:99:e5:a3:e7:
db:c7:64:cc:fd:6d:c2:ef:32:71:6d:ae:17:34:7b:30:9b:22:
7e:f5:86:66:ef:ee:0a:f0:04:c3:2b:57:d2:ae:56:7b:d3:b1:
62:87:6e:92:7e:0a:c7:05:6b:fa:06:7f:9d:56:28:46:ee:82:
42:c3:69:ba:41:7b:8a:36:54:c0:f1:77:c6:9f:85:ae:fe:d6:
17:10:c3:2a:71:cc:9a:c9:40:53:b5:99:24:b7:23:44:3a:a8:
d1:42:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:54:31 2026 by rpki-client