Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: 66P632UHVJEo86/xkNn8DY0clQnuG3hsl421K1VKoGQ=
Subject key identifier: 08:6E:79:1A:33:CE:C2:75:E9:5D:4D:E7:50:89:D8:59:A2:55:69:B7
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 01A1291EC5798D1916E9402E02EDF0FAC948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1A2B
Signing time: Sun 11 Oct 2026 04:00:44 +0000
Manifest this update: Sun 11 Oct 2026 04:00:44 +0000
Manifest next update: Mon 12 Oct 2026 04:00:44 +0000
Files and hashes: 1: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: hEfs6Vr5bDfDwQS106b+FlFAcybirUggzxZdTjQLeSQ=)
2: GYXVPChjE0NPSEdDhucM44Q05y0.roa (hash: Aj116UIxTV5UX+R+IJJ14L/FveXnD0nSIlVBqSjnPM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:c5:79:8d:19:16:e9:40:2e:02:ed:f0:fa:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Oct 11 04:00:44 2026 GMT
Not After : Oct 12 04:00:44 2026 GMT
Subject: CN=086e791a33cec275e95d4de75089d859a25569b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:cd:26:4d:44:3b:b1:8d:d4:eb:ae:0b:e2:
71:fe:4e:56:63:87:37:52:5a:5e:bf:42:5b:dd:f3:
31:5c:d3:f9:3e:83:0b:85:96:d7:85:cb:8e:00:e1:
23:30:97:97:50:43:e4:48:85:c6:3c:3e:08:f7:a6:
62:05:f4:0e:65:5d:e2:4f:ee:01:e0:d1:84:cb:ce:
18:2b:a3:75:0b:55:79:8f:c9:43:e3:dc:43:68:eb:
66:df:c5:44:78:c6:ff:07:e6:b3:54:7b:33:2f:c3:
35:ef:9f:83:be:36:03:96:b2:3e:79:35:0f:b9:64:
52:de:c2:c3:61:cc:27:2d:9a:6e:1b:75:fd:a9:41:
07:03:ad:55:ef:90:be:47:ac:05:d0:f9:bf:22:89:
26:82:8a:d0:1c:56:4e:f2:90:92:27:d5:0e:32:8b:
f6:ec:ac:b0:f8:18:58:be:42:b7:30:39:d4:0b:8f:
28:b6:ea:da:67:93:e6:bd:77:cd:38:76:1c:de:73:
8b:a2:25:31:ed:77:aa:90:3e:91:de:92:83:62:5b:
2e:32:72:e0:5e:dc:53:a2:1f:35:35:9f:15:2c:9b:
c0:7d:91:50:5d:24:32:88:12:ce:06:fc:71:7e:db:
1d:53:ac:c8:78:ee:9b:e9:04:1e:0d:e4:1a:9d:9f:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:79:1A:33:CE:C2:75:E9:5D:4D:E7:50:89:D8:59:A2:55:69:B7
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:c0:50:c6:55:aa:fc:a8:74:e4:2a:29:38:10:36:2e:d2:
aa:c3:95:c6:ad:b2:f6:01:cf:62:66:7f:77:e1:df:16:dd:14:
02:36:a8:6a:91:e9:f7:f0:d7:e6:ef:01:de:55:cc:38:7b:a2:
3a:de:82:35:16:a5:af:28:bb:36:26:8b:ad:26:7b:b3:30:5d:
dd:43:aa:be:dc:13:75:e3:36:99:56:87:c9:c2:6f:c2:c4:91:
77:13:6f:fb:34:dd:83:51:78:72:57:77:8c:de:a7:2d:1c:dc:
55:3d:40:ab:ab:38:18:49:b7:ce:40:c5:fc:fb:c5:d0:66:53:
7f:84:ca:61:fe:b7:57:11:8a:6d:3c:b1:6c:a5:e9:dc:36:79:
63:19:1e:de:42:9f:1c:e3:d8:27:cb:24:af:70:ea:bf:7e:91:
1c:1b:c7:8a:aa:03:d5:11:19:2d:ab:3d:a5:91:1a:59:9f:b4:
7a:de:f5:57:95:42:32:b1:90:6a:24:fe:04:2d:68:00:64:e9:
c7:f2:90:25:1f:a9:c4:36:e3:34:a4:c1:b3:20:10:ec:58:a1:
1d:08:af:ee:eb:cb:29:61:97:49:5e:80:49:91:51:b0:d9:09:
6a:13:5a:16:1f:b6:7c:ca:34:f7:3f:9a:3b:12:27:e9:db:df:
f7:bd:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:16:25 2026 by rpki-client