Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: zojHn2t509p74Soyjl6Y0C/ddKBY3N/JqaONCwq2CC0=
Subject key identifier: 2F:AD:14:98:8B:02:03:45:B2:40:BC:6F:E6:39:F0:43:7F:E2:5C:6F
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 01A0D383768A084480CF3AAF7F918AD139B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 170D
Signing time: Thu 24 Sep 2026 13:03:23 +0000
Manifest this update: Thu 24 Sep 2026 13:03:23 +0000
Manifest next update: Fri 25 Sep 2026 13:03:23 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: DMu/3JF/VoyO7lQ/oTRPZvIb9iVjF3pD52MCIB6wHWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:76:8a:08:44:80:cf:3a:af:7f:91:8a:d1:39:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Sep 24 13:03:23 2026 GMT
Not After : Sep 25 13:03:23 2026 GMT
Subject: CN=2fad14988b020345b240bc6fe639f0437fe25c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4e:55:5f:aa:3b:73:a4:47:aa:a0:f9:ab:90:
6b:53:7d:1c:c3:90:97:6b:18:32:41:48:fd:c4:6f:
33:5e:99:71:19:20:e5:fc:73:fc:83:de:bd:1d:9d:
e4:5f:97:e7:2c:e1:85:48:66:3a:55:84:81:bd:3a:
1c:14:2e:59:d0:f4:26:1e:88:c4:f4:79:bd:4c:6e:
15:40:ab:49:5c:56:84:ae:5e:7e:54:a7:c9:fc:06:
d2:81:f3:72:b0:20:d1:64:40:f6:87:a9:6d:73:46:
38:27:31:14:e4:0f:db:79:ce:00:07:17:e6:a6:66:
1b:e2:f3:0f:71:81:5f:0c:db:de:59:27:d6:47:80:
9b:54:d1:b6:a3:91:7e:ae:52:78:f4:e0:81:c6:c9:
f7:c5:c1:40:2d:be:0c:6d:25:68:e3:6d:83:6a:40:
3f:aa:f5:72:89:da:3c:31:d2:d6:d9:88:86:eb:1d:
e9:5f:56:26:2f:d2:d0:4f:05:0f:bc:8b:39:5e:3b:
39:f6:f6:bf:7c:91:f8:fb:c7:87:f7:ea:08:13:b6:
f6:4a:38:a0:53:a5:a0:0d:76:1a:1a:47:ea:06:ef:
ff:0d:4a:3d:14:b1:59:e2:88:79:f4:3d:80:e9:d9:
6f:ba:3c:1d:0c:9f:b6:65:04:90:41:99:1d:5f:10:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:14:98:8B:02:03:45:B2:40:BC:6F:E6:39:F0:43:7F:E2:5C:6F
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e8:4b:16:2e:fc:84:78:97:1e:ff:f6:6f:ac:1b:58:cd:96:
d4:df:b8:c4:7e:db:3f:62:19:ac:dc:b0:b2:ec:50:8d:cc:e9:
56:f9:99:99:c9:43:a2:00:1e:13:69:95:84:11:24:02:b3:4f:
91:f0:c0:f3:e4:c4:25:17:26:82:28:9f:7b:47:ec:c0:a6:f0:
f7:23:d1:bf:59:a8:c3:97:9d:1b:7e:db:86:09:40:54:34:3a:
e2:52:3a:0f:41:5f:3a:43:04:5c:a7:73:2c:e5:b8:59:43:5f:
4c:c4:4c:0e:60:4c:cb:ef:32:d5:29:ea:1b:40:e8:e6:fb:4b:
2f:95:fa:18:fb:61:41:e6:2f:d7:06:45:7d:57:71:83:d4:2d:
55:ce:e8:b5:2a:27:8b:7c:df:fe:5f:ac:1b:db:96:ea:28:b5:
3d:71:7c:e7:4c:1b:7c:21:df:72:3a:a3:19:c1:6c:f9:ef:89:
21:39:d8:a0:ba:43:ae:3d:80:3d:58:35:33:35:6a:10:2f:f3:
4e:db:66:f6:ec:0f:6c:49:5a:c8:3d:be:fa:a4:68:6b:d2:3e:
7f:9d:cc:11:d2:5f:7e:64:09:ad:4f:7e:74:17:e6:88:2a:cf:
18:b9:ad:9d:cd:eb:6d:ad:ec:d4:43:67:bb:cf:c2:56:fa:05:
21:41:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:17 2026 by rpki-client