Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: CY7gxRwZ+PwYKqM2HmZ/pS7nIziL7oc4bkGFUn0+oN4=
Subject key identifier: 85:EF:AE:6F:B5:D7:5E:D6:4C:19:88:91:50:CA:DC:74:63:DE:B9:DE
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01A08C43CCDFB064A37C230DF1C727D528CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1933
Signing time: Thu 10 Sep 2026 17:00:48 +0000
Manifest this update: Thu 10 Sep 2026 17:00:48 +0000
Manifest next update: Fri 11 Sep 2026 17:00:48 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: l2xPucD430OVG0Bs9G3pdqN+MCkBT54nOeBKx3oquqs=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:cc:df:b0:64:a3:7c:23:0d:f1:c7:27:d5:28:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Sep 10 17:00:48 2026 GMT
Not After : Sep 11 17:00:48 2026 GMT
Subject: CN=85efae6fb5d75ed64c19889150cadc7463deb9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:12:83:f8:16:5a:76:e6:6d:72:c4:8a:68:
df:55:08:c2:8a:35:e2:35:8c:57:c6:3f:b9:32:ae:
57:ba:c1:1a:d0:ca:28:bc:73:d0:57:68:46:82:fc:
39:6d:6a:5d:31:85:f2:38:23:ce:d2:3c:42:f6:0a:
c3:e9:44:cf:80:cf:77:87:e7:3e:cd:01:b8:90:de:
11:f9:03:0c:1a:75:aa:80:28:16:98:9d:37:21:76:
e3:ce:f6:e3:05:bc:ab:0f:4c:ba:08:a2:26:81:88:
43:ab:c7:2d:02:f8:7e:42:81:0e:a2:65:48:d6:70:
52:ff:fa:ec:74:92:db:3a:ba:d6:64:5a:58:2e:57:
2c:11:07:89:9e:e4:2c:65:b2:2e:b9:99:03:8c:b1:
8d:71:bb:f6:0e:94:19:1f:6b:89:26:e6:22:20:f9:
5f:ec:82:0c:05:d8:cd:89:20:c2:81:55:17:42:88:
5f:5b:1d:df:8b:67:d0:16:07:8c:b2:69:47:70:44:
14:40:fb:f8:b7:70:5f:b7:b6:6d:56:c1:d6:23:50:
32:b1:ce:35:97:5e:16:44:5f:03:57:ba:43:ef:d0:
c7:48:ef:fa:52:1b:24:c3:29:a2:6c:a8:c6:92:76:
df:44:78:3c:c6:de:d5:8d:28:fc:a6:ef:d3:28:62:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EF:AE:6F:B5:D7:5E:D6:4C:19:88:91:50:CA:DC:74:63:DE:B9:DE
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e6:83:fb:85:75:ca:c0:0e:57:d1:42:9b:69:42:be:70:ae:
f0:19:d4:6f:6a:d5:f5:a8:4c:9c:e4:db:97:b4:7f:fc:3b:6e:
41:53:19:3c:48:bb:f4:4b:fa:ea:5a:c4:ef:b3:c2:bd:c6:cb:
55:0e:47:de:af:dc:4f:6d:b4:06:2b:19:21:71:1e:15:e1:72:
9f:d9:98:5c:e2:e0:b7:5f:f9:7f:6c:f9:14:80:cf:d6:46:3a:
87:e7:1d:53:85:91:da:0e:ca:ca:b8:4f:2d:aa:0c:09:46:a9:
8f:b1:b7:5b:ad:42:89:78:44:92:0f:aa:71:24:f3:81:eb:7f:
15:ad:62:6e:8c:1d:ea:44:1c:43:a4:fd:2f:3e:95:f9:1b:c6:
32:e8:c6:2b:68:bb:be:dd:f3:31:5d:41:80:39:9d:9b:26:3b:
53:0d:2e:de:37:83:45:eb:06:4e:f6:a0:35:09:de:b9:3f:1e:
b9:b4:57:6f:33:b6:16:05:e1:1e:e4:71:d0:c1:e1:79:f1:7f:
a5:c7:b7:89:da:38:c8:e5:4e:95:47:3c:34:9c:eb:14:eb:57:
f5:c5:0a:84:77:f7:94:3f:b6:18:67:9f:e6:44:17:bb:e4:a5:
d1:90:41:31:3a:49:00:c3:65:7d:8a:a3:0f:58:02:e3:51:a6:
c5:c2:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:41 2026 by rpki-client