
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: Nf0G6NqJ52GXqTQm7FUzrVrfiPyZEpHpTzoHq1eFEhM=
Subject key identifier: 69:E0:21:D9:A4:69:A3:6B:C8:4E:D9:4F:B7:61:C3:0C:B9:EF:9C:A1
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 01A0C9D962FD9EA1632D81163E41D4AE5FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 16:01:02 +0000
Manifest this update: Tue 22 Sep 2026 16:01:02 +0000
Manifest next update: Wed 23 Sep 2026 16:01:02 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: BlYu8eMzVwB42QU4kb0D6IyNBe2Y7hM6yuEeSvC+DCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:62:fd:9e:a1:63:2d:81:16:3e:41:d4:ae:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Sep 22 16:01:02 2026 GMT
Not After : Sep 23 16:01:02 2026 GMT
Subject: CN=69e021d9a469a36bc84ed94fb761c30cb9ef9ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:97:0a:69:01:5b:44:dc:9c:ed:5e:54:d5:
e0:87:b8:34:b8:63:ab:46:61:62:64:dd:d3:0e:38:
00:ea:30:ae:bf:45:08:16:cc:77:40:4e:a6:7a:ee:
a4:42:1d:6e:cb:8a:c5:7c:94:8e:74:e9:10:f8:25:
f4:95:ae:83:8c:31:66:5d:e1:5b:8f:56:49:e7:bf:
31:5d:ae:8a:7f:1f:c7:52:0d:4d:3a:48:d2:21:20:
4f:e7:fd:4b:2a:93:d0:c9:0a:6f:17:5b:96:6e:3b:
99:b5:35:59:9a:09:7b:20:ac:ba:2c:09:78:69:6e:
ba:02:d7:66:37:1d:83:92:ed:b9:a9:98:ed:05:86:
df:a9:39:29:20:78:68:1f:3e:e3:91:d7:f1:4f:d0:
d9:76:57:05:3a:3e:00:73:0e:24:e9:7b:53:85:31:
b0:08:79:33:95:61:16:2c:45:99:20:a5:60:93:d8:
85:0e:76:0d:99:45:1f:39:58:7a:1c:7d:29:2f:bf:
4b:d8:12:e9:d8:0b:7f:d5:48:2a:12:a9:de:7f:ab:
75:6e:bb:b8:5e:bd:9d:98:18:43:90:00:99:22:29:
24:d0:d6:ed:87:34:34:af:7a:ea:8a:71:29:26:2f:
36:be:f7:c6:96:c6:58:ce:11:03:fa:6c:42:0f:91:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:21:D9:A4:69:A3:6B:C8:4E:D9:4F:B7:61:C3:0C:B9:EF:9C:A1
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:7a:f5:84:23:f8:19:7d:3a:d1:da:44:0e:42:99:88:15:
86:40:4e:f3:b5:96:5c:0d:9e:fa:00:ff:8a:8d:a5:6d:06:bf:
13:91:09:0b:64:aa:33:59:2a:9e:39:df:2f:b1:75:30:01:05:
10:56:fa:7c:55:6d:b6:1f:02:6f:97:b4:cf:bc:15:00:89:a3:
e8:4a:47:cb:f0:f2:b2:98:d2:96:80:36:dd:a8:a2:e2:95:47:
4f:20:ce:1b:35:7c:ad:1d:8b:12:d8:2d:06:ac:e3:36:b3:97:
3b:66:29:b4:9c:3c:05:45:13:67:eb:7c:92:23:65:8e:fd:af:
ad:12:e8:67:6f:16:74:08:6b:14:47:cc:72:54:32:17:91:23:
cf:d4:ec:f4:b2:fa:55:47:38:2a:91:90:50:05:62:b4:c5:a6:
d6:73:eb:e7:ce:07:52:00:ea:92:88:35:f1:79:7e:c5:0b:cb:
27:a3:57:da:a7:8a:d0:96:d4:e3:c9:22:e1:6e:28:85:bd:33:
5e:2b:ff:97:ac:0b:38:e4:b5:38:f6:d9:b1:2c:69:35:01:6e:
8e:bf:50:a9:8e:54:41:55:bd:1a:a0:3a:32:3b:ee:45:11:b9:
c7:4a:b0:9e:27:ee:de:85:55:bb:9e:03:c8:20:b7:28:1e:50:
ab:33:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:41:57 2026 by rpki-client