Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: LOvnfzvqJKZke3s3BheKyv1J0rqM/8zGtD0PniBdTa8=
Subject key identifier: B6:55:B9:A8:15:F2:C4:12:C4:1B:BA:6F:56:68:AF:F7:BB:04:67:02
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 01A13D1377EBE48445CF5C7604ECF2058C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 01:00:48 +0000
Manifest this update: Thu 15 Oct 2026 01:00:48 +0000
Manifest next update: Fri 16 Oct 2026 01:00:48 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: mbcjDaJYWrScP8BAZjym5tElVKfRu4/0MXOUa6PL67g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:77:eb:e4:84:45:cf:5c:76:04:ec:f2:05:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Oct 15 01:00:48 2026 GMT
Not After : Oct 16 01:00:48 2026 GMT
Subject: CN=b655b9a815f2c412c41bba6f5668aff7bb046702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:10:34:66:c6:e2:3d:f6:c1:64:24:33:87:
98:6a:b0:05:ab:2b:85:28:0d:8c:5d:b1:ab:0c:06:
8f:50:44:9f:ec:53:70:bf:f7:5f:20:f9:18:29:e9:
cd:a9:23:e7:45:77:c3:5d:60:11:e5:5a:7f:5e:e1:
50:a0:9b:e7:07:01:27:84:88:1f:0c:dc:7d:ab:4b:
8c:e8:89:d9:f8:06:e0:5c:95:6c:10:3f:37:f8:35:
e0:3d:c7:c6:d5:af:91:06:38:16:6d:b7:2a:20:24:
90:68:a7:52:ff:5e:a5:fa:64:f8:18:14:f1:f2:d3:
cf:8e:84:e6:f2:76:f8:27:d8:e3:f5:50:8e:56:3d:
ad:cd:fc:0d:0d:20:bd:af:70:63:cb:1b:93:30:38:
62:7a:fe:57:10:44:d0:8f:62:8f:54:fd:72:93:db:
31:5b:5f:2c:78:c0:9d:b8:b6:26:51:e3:d9:3d:b8:
db:fb:b1:1f:25:75:55:5f:41:b6:81:e8:8a:5a:9a:
b2:ea:24:ea:e8:3c:6b:96:21:b6:3a:6a:27:5e:e0:
fc:a3:a8:10:a0:d8:6e:b0:18:8d:e6:69:c9:dd:08:
a5:08:bd:07:67:eb:c0:1d:c3:f9:57:51:75:b7:24:
f9:2f:7c:44:f0:c7:eb:43:cc:e5:96:10:af:5f:d3:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:B9:A8:15:F2:C4:12:C4:1B:BA:6F:56:68:AF:F7:BB:04:67:02
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:c8:4d:cc:c7:b5:c8:df:13:ee:7b:be:7f:96:80:89:18:
ff:b4:86:84:ea:3f:03:e0:94:81:a2:10:c3:47:67:ca:14:a7:
cd:ae:4c:80:0f:43:bd:03:ff:b6:d0:5e:da:e0:8e:f0:36:00:
a1:ac:02:08:c8:3b:09:71:30:0f:28:87:09:cf:c9:69:9b:c4:
dd:23:e2:cf:9c:fc:83:69:48:f9:5c:da:2f:06:66:27:32:06:
d0:36:bf:17:b3:63:41:db:34:6a:b5:41:d8:08:36:d9:36:d9:
e4:ef:ff:51:bd:9f:9b:24:e1:e4:9a:8e:bf:b3:dc:53:ef:ba:
cf:f2:f9:c1:be:d3:72:ba:a7:ff:47:1d:1d:f5:21:7d:e1:a2:
c9:32:91:d3:83:f3:37:41:7b:7f:ae:ec:ca:bb:38:a3:1a:83:
f6:da:d9:76:3f:e6:dc:7b:2c:bd:2b:56:f2:53:eb:e5:82:48:
4f:c8:1a:3b:6a:cc:b7:d0:e7:52:a1:32:56:5b:d5:7a:54:34:
c3:6f:b6:72:aa:f8:f7:82:9e:64:f4:e7:b1:29:01:08:7c:00:
df:0a:26:62:81:9e:40:1c:29:3f:71:3a:35:47:7c:d7:31:5e:
51:2c:1d:0f:f5:7a:db:61:0b:c7:5a:a2:e6:82:49:aa:14:97:
7c:7a:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:51 2026 by rpki-client