Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: 10whB7WBfPlqZfZJGKEBPQwSzXelSI7Hf1vvleTenJI=
Subject key identifier: 17:29:0E:68:EF:30:B5:89:5B:67:48:AD:A8:B2:72:3C:40:21:E5:DB
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 01A06E39872CD1E8844C4BDFDA35020019FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0B27
Signing time: Fri 04 Sep 2026 21:00:58 +0000
Manifest this update: Fri 04 Sep 2026 21:00:58 +0000
Manifest next update: Sat 05 Sep 2026 21:00:58 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: uSqNAO0DWj3DxPIc6TYmZqZjBd49E3ti9OhbpvOzz1E=)
2: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
3: fAQLxjp4vtSZh4uj9roh8XYdPDE.roa (hash: JSKOeRnz2GoRIlKbGY9sgq3PzwzGUmqjrAtrjisWg74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:87:2c:d1:e8:84:4c:4b:df:da:35:02:00:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Sep 4 21:00:58 2026 GMT
Not After : Sep 5 21:00:58 2026 GMT
Subject: CN=17290e68ef30b5895b6748ada8b2723c4021e5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cd:5e:94:9e:d2:58:db:f7:c3:8d:ab:43:aa:
6a:71:63:16:1c:26:c3:b9:ef:f0:b4:11:54:08:70:
9c:20:b1:1d:eb:7d:28:ef:fc:45:6e:f4:ce:73:b9:
43:a9:74:82:96:d2:c1:5f:c0:03:72:3d:21:d0:6d:
0e:43:5e:98:71:0a:c8:56:8b:e3:3b:83:41:05:28:
42:34:8b:5e:68:00:58:b2:74:92:03:9e:ad:9a:60:
23:57:d1:43:38:bf:0d:34:b0:3c:26:66:83:1f:43:
65:cc:62:56:5f:7d:5b:87:dd:0a:07:3e:26:08:17:
fd:ad:33:77:2c:a7:94:2f:f0:45:d0:3b:34:9d:74:
d4:1d:32:02:b4:8a:c4:b4:dc:5e:bf:6c:a9:63:8f:
e9:a1:7c:a5:e0:d0:32:c6:e0:11:61:99:cc:40:a8:
8a:df:bc:79:80:1a:12:b0:ab:32:c0:17:65:56:d9:
4b:e0:82:93:ae:a1:68:80:6b:6a:af:5b:ac:4c:dd:
be:f8:ab:5b:79:f0:01:6e:05:28:e9:95:e6:c8:7d:
77:cf:57:62:cc:26:3c:fd:20:85:4f:f8:00:e3:54:
4e:26:5f:19:7f:a5:c2:2f:72:62:c8:0d:e2:ff:ef:
72:1f:c3:f9:98:dd:b7:aa:71:61:dc:e9:0e:d2:4f:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:0E:68:EF:30:B5:89:5B:67:48:AD:A8:B2:72:3C:40:21:E5:DB
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8b:46:31:01:d7:89:eb:bd:38:b6:bd:f4:86:2a:96:3b:16:
7d:a8:88:df:c0:9a:60:51:99:64:cf:a2:d6:bf:d2:36:fd:e7:
22:3b:7c:85:b6:03:13:c5:d3:ad:a3:da:0a:fc:07:cc:67:72:
6d:4b:ee:0b:32:f4:82:83:63:e1:54:20:d0:33:18:e7:5f:93:
cf:66:41:ac:1c:5f:f4:b0:4b:f1:45:50:6c:1c:43:42:2d:e8:
b3:38:64:f7:dc:fe:f1:5d:8d:e2:85:85:31:dc:47:5b:99:57:
8f:7c:02:2e:0a:31:41:da:80:f7:8c:88:23:f5:bc:6e:44:3b:
82:3c:3c:4d:df:6e:44:8f:4d:c5:5a:cc:3a:67:ea:10:4c:66:
75:f2:e8:0a:29:ed:c3:45:aa:58:d5:04:c2:44:65:2c:0b:bd:
70:8b:c4:69:83:17:9f:7b:71:f4:73:2c:81:1c:3d:00:5a:d3:
d1:ca:5a:9a:9e:be:16:97:90:cd:ff:29:2d:a4:13:e4:61:14:
ee:84:22:3c:83:ac:11:7b:22:8c:63:e8:5c:58:59:79:c8:4e:
e7:bd:0f:7f:12:e2:dc:f6:26:82:e8:b3:6b:fe:01:2d:28:e9:
1c:74:94:0b:c2:28:a1:f5:f9:79:dd:82:05:72:75:0d:e1:c2:
cf:50:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:15:48 2026 by rpki-client