Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: ouH6VNtlp+LsTFENjiCXdV8c+5r7bCBbM/ivfe0LwU8=
Subject key identifier: A4:9F:DF:17:26:B2:D7:D3:A5:E2:3F:EA:BD:98:66:3A:76:5B:7D:97
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 01A0C44513FB2CC5CD000395B61D40706950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0E32
Signing time: Mon 21 Sep 2026 14:00:56 +0000
Manifest this update: Mon 21 Sep 2026 14:00:56 +0000
Manifest next update: Tue 22 Sep 2026 14:00:56 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: WL9IkH5ZwA5EJF02joL/gvKuyJmm6t1mo5uZwChItto=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:13:fb:2c:c5:cd:00:03:95:b6:1d:40:70:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Sep 21 14:00:56 2026 GMT
Not After : Sep 22 14:00:56 2026 GMT
Subject: CN=a49fdf1726b2d7d3a5e23feabd98663a765b7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:d8:8c:bc:fb:36:c7:29:ac:a1:4c:ce:2b:
fa:87:69:93:b7:cb:2e:6b:d0:5b:02:fe:c1:23:a6:
40:67:d7:50:53:3f:87:57:bf:40:fd:10:ea:fd:51:
32:63:56:3c:fa:55:e3:c4:4b:00:c9:1c:b3:0a:75:
55:b6:50:cc:47:d0:5d:6f:4a:e4:40:c2:d2:ac:6a:
b5:28:d6:5b:e8:a6:6a:53:ec:58:86:20:89:d0:93:
9c:5e:95:61:0a:54:fb:d0:49:8a:21:64:5d:56:1f:
07:56:b3:f3:fc:b5:44:9c:4f:70:8b:67:a0:b0:f5:
57:e1:3e:36:45:e5:8f:ea:6d:bb:03:a1:f8:28:16:
f3:3f:4b:47:e0:91:1d:97:40:76:2d:39:53:f5:6d:
7f:46:35:b5:65:8e:41:12:d9:5c:25:21:87:a3:b4:
55:10:f7:7f:52:b1:f0:76:3a:e9:95:09:54:30:57:
35:66:32:22:99:75:24:08:79:19:95:82:7a:19:1d:
f1:62:2d:cc:d7:7b:19:76:63:66:89:f2:21:ad:34:
1f:e0:c5:ac:d1:ba:d4:6c:b3:3c:60:68:e8:e3:02:
e4:e6:b1:d2:12:57:43:27:d1:09:62:aa:b1:42:c0:
d3:32:ec:d1:15:42:8a:d9:b6:81:3e:f6:2e:5c:3a:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9F:DF:17:26:B2:D7:D3:A5:E2:3F:EA:BD:98:66:3A:76:5B:7D:97
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:a0:13:7c:5e:61:8c:ea:ed:29:25:53:5c:15:39:1d:8d:
2e:d4:a2:de:30:79:d6:5b:35:a7:ee:34:12:6e:da:f7:ff:04:
23:bc:8b:f9:c8:46:21:dd:1a:46:49:4e:e3:62:34:5a:f3:67:
4c:b5:f4:76:ba:c1:50:9e:1a:b9:60:a2:ab:10:c8:d8:75:a7:
e7:ac:d5:d3:dd:ad:fb:f1:94:80:9b:5b:20:5a:c0:46:6d:92:
ba:32:25:ed:4f:d9:d5:5f:69:f8:b3:d2:37:30:30:55:fb:55:
43:06:3d:2e:a9:b2:f5:cb:29:e2:5c:d5:1e:61:0c:8a:82:8b:
16:d4:e9:a8:78:a9:29:f9:63:a8:28:6c:d7:ce:59:7a:b9:a4:
33:00:cd:46:21:53:db:6d:45:01:dc:3d:f7:57:a7:48:51:02:
a0:e0:a2:ee:d0:9e:67:97:40:a3:68:50:a8:15:5b:ee:dc:88:
c3:dd:08:4b:a3:76:40:e2:69:d5:73:64:2e:00:84:96:29:ae:
64:16:e8:a2:33:3c:9b:3f:7f:20:55:43:47:66:87:27:24:84:
a3:18:97:87:5d:38:f0:9e:fa:b0:49:6f:e2:3d:df:d3:0f:4b:
1d:82:5b:44:05:8e:aa:88:19:a2:5f:c0:55:d0:5f:fc:96:9b:
1b:65:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:15:37 2026 by rpki-client