Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: ql2960XJ4qBmqsNY1gD0TpSlAIAXjsSNL3KO6Oqja8g=
Subject key identifier: B3:FE:EE:1A:47:6F:92:CB:C4:95:FD:79:93:9C:FA:7D:9F:15:CC:E7
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 01A123C180502CAD111E28E75231C637F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 199C
Signing time: Sat 10 Oct 2026 03:00:46 +0000
Manifest this update: Sat 10 Oct 2026 03:00:46 +0000
Manifest next update: Sun 11 Oct 2026 03:00:46 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: LRWIdqDVCRvZCKD67o7u0iNCiHobSUCxusck4eVytyQ=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:80:50:2c:ad:11:1e:28:e7:52:31:c6:37:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Oct 10 03:00:46 2026 GMT
Not After : Oct 11 03:00:46 2026 GMT
Subject: CN=b3feee1a476f92cbc495fd79939cfa7d9f15cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:12:5d:19:d5:88:22:c4:92:f4:17:8b:91:
6f:97:e7:fd:63:f0:92:dd:18:53:cc:e4:0a:1e:c4:
42:8d:cf:be:10:b0:23:e3:8d:5c:a0:fc:09:0e:e0:
ac:c0:99:3b:67:10:20:3c:72:c9:e2:b6:7d:81:d8:
56:85:90:85:0c:e1:44:a7:99:02:15:ea:e3:ef:c7:
92:6d:7a:18:e1:77:be:1e:34:bd:5d:5b:a0:99:d5:
65:71:e2:85:97:41:d8:da:97:fd:65:85:70:0f:98:
68:f0:d3:3b:af:4b:61:b6:80:8e:41:f1:f2:69:c6:
64:73:2e:c2:37:05:cf:58:45:79:54:0c:67:41:9a:
2d:a6:e2:b4:b0:7b:3e:dd:ce:4a:30:96:e0:6c:be:
da:79:23:49:ad:da:b0:7e:3e:cb:de:4e:84:df:72:
12:10:c2:5d:30:57:48:3f:14:c3:34:ee:37:07:af:
a4:b3:e2:34:40:3f:d8:f7:6c:c3:d3:41:98:e1:46:
45:46:bb:f6:1e:dd:07:2a:e2:ef:c9:2d:ba:07:8b:
9b:30:03:40:7e:80:7e:2f:fc:fd:3b:b8:d2:e4:00:
95:3b:cf:4d:09:16:08:e9:8e:9a:56:29:bb:e2:17:
ba:ba:80:29:14:43:c5:9d:41:22:9e:16:e7:b2:ed:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FE:EE:1A:47:6F:92:CB:C4:95:FD:79:93:9C:FA:7D:9F:15:CC:E7
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:28:9c:bc:c0:15:eb:4a:a2:1d:c2:45:f4:b3:c7:93:f5:
b1:6a:89:4e:c2:44:db:b7:60:0f:94:78:f9:04:16:00:cf:19:
fa:96:0f:0d:39:8d:5e:60:e1:7b:fa:e0:21:0b:60:96:b3:64:
6b:b3:1a:d1:50:07:92:1c:7d:d8:78:23:a0:02:a3:7a:1a:b4:
f2:ec:97:15:81:ba:3f:5b:38:b5:4e:f8:b8:bc:dc:da:92:63:
73:e6:ff:0a:64:8d:f0:ff:dc:e9:7c:65:87:48:2d:b8:cb:ea:
06:c3:f9:9e:ed:25:42:4e:8f:1d:a4:cf:1b:a8:55:03:d0:20:
28:74:4e:78:40:7f:d9:f7:49:44:f3:23:1d:e4:3c:a7:46:7b:
40:6c:70:d0:96:a6:c0:ba:89:2d:7f:fc:84:ae:7e:01:5a:42:
61:2d:78:36:40:28:30:0f:15:ec:a0:48:4b:10:64:5c:4f:51:
ee:0c:96:c8:78:a9:13:91:f1:c6:37:b2:6e:9c:47:36:a6:cb:
be:1e:65:69:a4:96:39:a5:0b:a8:cf:5d:f7:5c:be:84:bc:0b:
a6:01:a8:77:a5:86:8b:06:96:70:3a:ed:ce:c8:6a:45:90:55:
e5:96:1e:ec:e5:71:56:7e:09:e4:6e:30:66:4a:3a:d7:11:af:
15:5a:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:34:45 2026 by rpki-client