Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: UEtD18wSMOF1jwiYvKEPwZBVABATQ84VLvew/nlSn8k=
Subject key identifier: 2E:AA:D4:FB:D6:92:4C:8F:41:38:4B:18:81:88:CF:97:47:E5:D9:53
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 01A13C6E36FFA561921D8C8291ECA1029D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 098D
Signing time: Wed 14 Oct 2026 22:00:18 +0000
Manifest this update: Wed 14 Oct 2026 22:00:18 +0000
Manifest next update: Thu 15 Oct 2026 22:00:18 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: bV+02sL3Qpyi6H0duzdVKeupK8cn01F6LgUeuyo2hYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:36:ff:a5:61:92:1d:8c:82:91:ec:a1:02:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Oct 14 22:00:18 2026 GMT
Not After : Oct 15 22:00:18 2026 GMT
Subject: CN=2eaad4fbd6924c8f41384b188188cf9747e5d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:61:e0:d8:c8:da:d0:b1:0f:9f:77:93:fb:
75:ba:71:38:26:64:60:4b:6e:c0:87:44:81:d0:99:
59:18:53:13:46:2d:43:47:45:e0:1d:38:dc:ee:79:
ea:a5:c3:65:e2:c3:97:6c:d4:fa:02:35:ce:cc:aa:
44:41:2c:41:8d:a2:96:b1:ec:59:34:92:3e:e5:e7:
00:70:fc:3b:32:4d:db:8c:0f:69:43:f1:8f:90:6a:
fb:07:fe:c1:f1:d3:8e:f4:4a:3d:93:c8:c0:78:54:
87:ce:31:42:74:30:62:9c:3d:24:c5:ba:0f:e9:41:
bd:95:93:cb:80:9a:ce:ce:c3:68:0d:2a:87:f8:f0:
89:b0:4e:61:b7:7b:d1:34:9b:d9:3c:bf:00:cf:5d:
3d:c2:c6:15:da:56:78:3d:35:d2:8e:7b:2a:94:2f:
95:e5:95:97:e3:54:db:12:31:b0:68:22:60:91:d5:
cf:02:16:fb:ee:cb:f9:0c:a6:fd:6f:cd:6c:27:2c:
e3:9f:29:3b:4d:a5:89:33:0b:0f:67:7e:af:bb:15:
cb:af:3f:b7:2d:b2:a7:dd:20:b3:b5:36:d7:d4:ff:
1b:0d:7f:b3:01:3f:2b:a5:ef:45:db:19:10:86:19:
a2:c6:fd:9c:06:22:b3:9c:a8:67:19:52:22:4b:06:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:D4:FB:D6:92:4C:8F:41:38:4B:18:81:88:CF:97:47:E5:D9:53
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:96:1c:e9:c8:b7:49:e6:fa:e5:09:82:b1:f1:9d:68:ce:
f4:be:74:c5:01:7a:be:37:b3:21:21:79:5e:72:61:63:6f:44:
bd:94:b9:f6:22:63:52:2a:7f:e3:da:b8:c9:7d:5f:fe:16:49:
13:56:e3:9e:66:6a:2a:02:99:51:88:bc:5a:d7:a2:92:e7:4e:
b8:ab:b8:64:00:54:aa:70:e0:27:76:36:f0:89:61:b2:0b:18:
2c:6c:af:89:15:43:84:94:0e:54:f3:e0:d1:ed:97:28:4a:91:
6d:b5:18:35:41:e2:b8:a4:80:45:78:78:1b:02:59:39:4d:62:
05:59:8a:5e:55:86:aa:28:78:ae:b2:90:87:46:c6:50:b2:c2:
c9:fe:2f:68:38:cb:f6:cb:8f:f2:2e:58:be:93:56:5c:14:cd:
e0:89:6d:62:5c:d9:cc:7c:56:f2:05:b3:9e:ba:2e:9d:15:ba:
9a:d3:71:d4:c1:6b:64:c7:ac:83:38:39:e0:95:a4:f4:cf:15:
7d:f5:c1:55:06:a4:1f:79:3c:67:16:06:ee:e3:0b:a8:f9:7b:
aa:0b:79:d7:ec:60:f4:82:da:b2:01:f7:2d:7d:90:7f:ef:b0:
4a:69:4b:91:26:00:55:67:c1:f4:94:ef:56:a5:4b:62:5e:aa:
2d:5f:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:49 2026 by rpki-client