Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: r1rBQLwfmEYjzyLKD0tjf9pzdkvtgkR6vbydFcb4Yhc=
Subject key identifier: FC:4C:86:C5:CA:6C:CD:16:D3:30:04:C5:6C:AF:44:CE:12:62:D1:AB
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 01A15741BCAC84C40A4D2648BD6D15281C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1AAC
Signing time: Tue 20 Oct 2026 03:01:28 +0000
Manifest this update: Tue 20 Oct 2026 03:01:28 +0000
Manifest next update: Wed 21 Oct 2026 03:01:28 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: uox+4cA9eigLxhgM6sEAizgLxnovauIM4VEZrWHltJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:41:bc:ac:84:c4:0a:4d:26:48:bd:6d:15:28:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Oct 20 03:01:28 2026 GMT
Not After : Oct 21 03:01:28 2026 GMT
Subject: CN=fc4c86c5ca6ccd16d33004c56caf44ce1262d1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:dd:8c:8b:ec:52:80:1d:16:57:f8:74:64:
a9:27:a8:6e:e3:5d:f1:46:c3:30:d3:72:5c:47:8a:
b9:0e:16:a1:a4:35:5f:ea:9a:85:bc:62:1e:64:9f:
2c:33:33:41:34:cc:f8:7d:a8:6f:7a:b0:59:85:89:
3d:7f:b9:e5:42:3e:48:ed:1c:7f:0c:95:f3:12:86:
d4:7c:bb:48:4c:47:ce:f4:c2:1e:1d:32:dc:2a:3a:
92:dc:27:de:6a:17:95:0e:a7:84:c3:4e:1a:c5:f2:
6a:81:2c:79:ab:1d:a5:fd:73:6c:7d:d9:8c:15:e5:
20:2e:fc:22:90:d3:73:f7:20:7d:2d:01:37:da:88:
e2:0b:5c:9f:f1:86:00:5a:3e:56:e6:2b:9b:0a:a2:
a4:66:1f:4b:48:fa:2b:5b:2a:42:e7:e2:ba:58:03:
c3:b0:3c:0d:b4:65:6d:4b:55:56:b1:58:e3:32:f3:
03:99:02:59:ed:e5:be:bd:d6:ed:85:df:5a:10:2c:
8a:7d:af:43:41:e8:ec:c5:83:33:86:09:28:19:2d:
17:98:c5:78:c3:e8:50:f9:9c:a7:cd:ef:97:4f:d4:
64:44:0f:83:68:57:37:5b:c2:ca:3e:c6:34:3c:c5:
4e:d3:4c:99:3c:36:f1:ef:9f:3e:ce:0d:2e:ef:ea:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:86:C5:CA:6C:CD:16:D3:30:04:C5:6C:AF:44:CE:12:62:D1:AB
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b7:81:a4:0b:b0:5f:99:b8:04:27:17:ce:01:94:f7:66:6e:
dc:6d:79:3c:a9:cb:a4:fa:a8:13:41:8e:14:7b:d9:dc:f4:da:
03:8a:e4:4b:a0:23:10:4a:a8:9c:00:bd:ce:41:a0:1c:4a:ad:
b8:76:5b:17:32:a6:5f:48:96:16:a1:a1:0a:38:ad:bd:79:20:
75:b5:b4:c2:cb:48:95:67:41:55:c5:2a:9c:38:f7:bb:71:f3:
18:41:57:a5:f2:c8:a9:6b:ba:d5:ef:0d:ce:61:45:31:17:78:
77:5e:95:a7:25:ed:8e:6f:40:a3:0b:cc:c4:c3:01:a0:e5:a2:
a8:55:69:18:7d:9d:f8:1b:e9:d1:b6:d7:41:05:84:ae:63:ef:
7c:16:04:3f:95:c2:cd:78:e4:39:dd:b2:e3:86:d9:47:dd:24:
67:7d:4b:28:2d:32:c4:1c:ec:7a:38:6b:6e:8b:e0:d3:a3:ee:
ad:33:b9:9c:22:34:f6:57:a8:4b:f8:87:e9:7f:ba:fd:6e:d4:
55:9b:9d:8d:67:3d:9a:11:64:68:1e:2e:4b:11:70:f9:b2:7b:
07:90:a0:2b:00:83:af:cc:9b:ba:30:5c:79:d0:7a:8b:71:4f:
cf:58:0c:1b:81:ac:d6:a1:e3:cb:bb:0b:d0:39:ca:7e:48:f0:
30:32:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:01:52 2026 by rpki-client