Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: dh3Mwt6oGvSO6PlHJs9cbtEyGNWepJHHtY5gVI51zFQ=
Subject key identifier: 82:F1:57:65:24:59:4D:C1:FA:FF:B4:79:22:0D:9A:7F:43:80:66:B0
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01A0C821B9AA1E3488B8145851B1F4CE19D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 08:00:48 +0000
Manifest this update: Tue 22 Sep 2026 08:00:48 +0000
Manifest next update: Wed 23 Sep 2026 08:00:48 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: l5gmVon7m+tcsqdE63UVzCU8Rk4XTmVroZUvhorf4uQ=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:b9:aa:1e:34:88:b8:14:58:51:b1:f4:ce:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Sep 22 08:00:48 2026 GMT
Not After : Sep 23 08:00:48 2026 GMT
Subject: CN=82f1576524594dc1faffb479220d9a7f438066b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:cb:95:7a:cc:36:72:55:ce:50:a3:86:35:
9b:4d:26:11:cb:56:a7:ff:7e:24:78:af:88:d6:f8:
ba:aa:1a:27:82:08:30:92:5b:1e:69:2e:e9:ee:a7:
56:f7:33:a1:8f:78:5e:3c:86:1b:b5:61:a3:04:65:
8e:4f:aa:97:d9:f7:f8:7a:62:79:24:22:35:09:4d:
ee:b8:78:3e:e5:db:55:2c:d0:bd:6d:f7:2d:d4:6e:
1c:04:5b:db:4a:53:59:ae:eb:0d:50:e9:c6:ac:88:
1b:ca:cb:01:28:15:cd:f2:c1:74:c7:ff:60:aa:a8:
4a:bc:ba:8e:9e:99:ec:f5:2b:b9:18:f1:e3:62:31:
78:42:8d:19:31:75:e2:43:fb:0d:ff:f7:19:3b:fa:
2a:46:c8:8a:73:ba:02:98:1f:08:68:58:ce:79:f5:
b3:14:1b:5f:78:47:97:88:7f:64:8c:88:a1:2a:58:
fe:c3:a9:01:06:1d:f6:ba:b8:ad:fa:4f:2a:51:74:
74:5c:b6:5c:28:5a:1b:33:0e:01:93:f2:91:79:32:
55:ff:76:45:cd:53:00:26:69:6d:3c:f7:18:03:e0:
73:e6:10:b8:d4:14:ac:af:e9:60:ce:e1:da:74:7c:
80:2c:0d:b0:b7:2b:4c:6d:9f:a8:11:c2:82:bf:1a:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:57:65:24:59:4D:C1:FA:FF:B4:79:22:0D:9A:7F:43:80:66:B0
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:54:54:0e:98:b0:31:bf:50:73:8a:22:94:39:37:09:d7:e8:
a1:d9:85:3b:2e:37:be:16:0b:f9:44:6c:87:5a:b7:e7:43:6e:
7c:12:29:cd:a9:1b:07:5c:3f:24:58:2c:8b:fe:79:15:9c:c8:
c7:d8:df:47:c8:4f:fe:08:11:fa:df:3e:76:66:86:ce:1a:fa:
d2:de:56:5a:99:72:9e:2c:71:72:09:fd:4d:a3:43:ab:2d:0c:
00:d1:56:13:9a:39:82:e5:68:48:6e:81:e1:2c:62:59:fd:7c:
8b:5a:bf:8b:0e:2a:df:60:ae:66:d6:03:17:7a:d2:26:37:f4:
ed:6b:45:a7:1e:0c:05:a4:8a:02:aa:02:1e:4a:5e:f7:5e:d3:
bd:c0:cd:b0:be:60:ce:5e:75:8d:5a:c5:8a:b9:8d:07:eb:9e:
50:c5:c7:a7:a8:75:28:f6:8b:22:80:2a:13:da:ad:23:41:32:
de:4c:b6:b2:5b:d0:b6:0f:8a:03:8e:67:f1:17:c3:cf:bb:72:
71:1c:e6:82:31:5d:46:6a:a5:56:c5:24:7d:0e:73:20:21:40:
4e:7c:6a:a9:79:71:34:7c:0b:db:87:df:b5:33:73:6b:9c:34:
c6:26:3e:b8:5d:b1:a1:d9:d6:56:07:03:39:5b:e0:cc:7a:fd:
d0:2c:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:51:36 2026 by rpki-client