Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: DQ2Y1p0P8yi1nKsMnpWWiw9E24uRTsGMRys+zrPjR+0=
Subject key identifier: B0:51:40:B8:FF:3A:6D:B6:1E:28:31:A9:26:6C:5B:EA:73:89:E5:9B
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01A0C3D6A2474DACF9267771677CA35C116D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 12:00:18 +0000
Manifest this update: Mon 21 Sep 2026 12:00:18 +0000
Manifest next update: Tue 22 Sep 2026 12:00:18 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: AoVkxruWFRzYytLHXwufbcAJxtCZ2ermXFTdAvsp9Ok=)
2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:a2:47:4d:ac:f9:26:77:71:67:7c:a3:5c:11:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Sep 21 12:00:18 2026 GMT
Not After : Sep 22 12:00:18 2026 GMT
Subject: CN=b05140b8ff3a6db61e2831a9266c5bea7389e59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:54:30:0b:09:37:34:2e:a7:58:51:62:0a:
50:29:49:43:3c:c3:85:52:17:9d:8a:7d:01:98:74:
33:d2:5d:68:2e:4c:04:3d:77:61:86:23:1b:59:d9:
0e:01:84:2b:04:8a:a5:d3:49:fb:92:51:8b:b9:eb:
0f:75:c5:91:5d:8c:e6:2f:f9:45:eb:54:e5:4a:d7:
29:c7:74:3e:e0:97:b8:50:66:f6:2c:96:38:6a:65:
7c:d0:ba:9d:13:3a:79:14:ef:db:f7:9f:23:2b:52:
04:ce:5f:7b:be:fd:e7:26:c7:26:ca:ec:7a:a3:ca:
5a:c6:5f:be:f8:79:02:fd:3d:5d:62:df:f7:e9:ac:
97:44:35:fb:47:73:7d:7d:ed:84:c2:f7:ca:1f:f9:
f5:ff:10:a8:51:d9:7f:69:1a:cc:9d:37:e5:6c:3c:
d1:6b:b4:6d:d7:83:98:50:c3:71:3c:94:b6:e2:43:
05:2c:61:28:29:eb:9a:0e:3e:44:db:a3:83:93:60:
5c:25:be:48:22:83:02:4f:3e:42:52:17:de:9b:76:
e3:2b:16:94:d1:61:e1:ed:5f:33:42:5a:cf:5a:de:
b3:56:7f:40:f2:c8:70:73:aa:83:5f:11:3c:67:30:
ad:09:39:f6:de:d4:28:fb:a7:95:fc:f7:49:8c:16:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:40:B8:FF:3A:6D:B6:1E:28:31:A9:26:6C:5B:EA:73:89:E5:9B
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:3d:7e:fa:d6:b0:be:e3:41:36:5d:88:bb:ae:90:b2:94:
66:bb:61:bf:76:3d:69:3d:8c:c6:b9:65:45:25:3c:30:99:67:
05:7d:fa:83:9b:fc:58:a1:ce:1c:72:48:24:a5:89:ff:dd:e6:
af:31:58:61:81:19:a6:20:48:94:f9:d2:36:ef:3c:1b:4d:be:
75:8a:a8:ab:13:3e:3b:d0:95:9c:0b:7c:2b:29:7e:87:e1:9e:
47:d5:9c:c4:c3:62:66:bc:9e:b3:51:d9:e3:50:05:c1:ce:38:
40:8d:2f:78:6a:31:45:8f:f6:14:5d:db:bf:4e:82:dd:6a:78:
34:bd:27:b4:14:4b:7a:09:fe:b4:6b:1b:9a:67:66:f0:a9:6a:
f4:da:c1:e8:e1:cd:05:27:cd:64:c1:e3:f6:3e:a4:fd:fa:07:
55:01:2f:38:00:5f:e5:dd:14:9f:f2:20:80:a1:c3:e4:8a:2b:
02:4f:54:17:ef:3d:f5:8d:a6:56:c8:d7:d8:2b:78:df:e9:6a:
86:2e:dc:a8:23:a4:9a:c0:0a:a2:0d:cc:4a:e6:56:50:0f:4e:
76:d2:ec:5f:9f:bb:35:af:59:df:8b:75:05:a2:22:ee:69:c3:
9b:c2:69:f7:c9:16:d4:17:31:e7:d4:df:65:04:40:71:bc:ff:
c5:80:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:29 2026 by rpki-client