Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
File: 8zk0PMbVHduONjgpmhu0lfRYCSE.mft (raw, json)
Hash identifier: Juf7gEHgJVFAObZMEs5GKJP2etgEBbGli82Jxkta9dg=
Subject key identifier: 1C:DB:02:29:00:EC:A8:C1:EE:D7:53:2B:56:F1:DF:CE:F7:21:D3:00
Authority key identifier: F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
Certificate issuer: /CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Certificate serial: 01A08D1FE9B197E7D22F6ABB3132C4B49B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 21:01:13 +0000
Manifest this update: Thu 10 Sep 2026 21:01:13 +0000
Manifest next update: Fri 11 Sep 2026 21:01:13 +0000
Files and hashes: 1: 3ZbP8D4oyhCe4u5mlugxkhUP_G4.roa (hash: mYQ4ggMgVLrFbz01ZBuOhgHTwYfwTmz0/Kv0k+37TBo=)
2: 8zk0PMbVHduONjgpmhu0lfRYCSE.crl (hash: NMH8wK32e1yl399cd9tS03TnDEFRGlZVUq0ltO13C+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:e9:b1:97:e7:d2:2f:6a:bb:31:32:c4:b4:9b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f339343cc6d51ddb8e3638299a1bb495f4580921
Validity
Not Before: Sep 10 21:01:13 2026 GMT
Not After : Sep 11 21:01:13 2026 GMT
Subject: CN=1cdb022900eca8c1eed7532b56f1dfcef721d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:2b:81:1b:3b:78:5e:99:df:63:34:8f:bc:
41:b1:82:8f:77:62:83:c5:c2:56:6a:a7:c4:4c:51:
19:00:70:d6:d7:0b:f2:09:d9:e9:9a:19:9d:2f:d5:
b3:c8:59:c1:23:b2:3f:d6:50:18:05:b2:b5:b5:7a:
64:03:1d:5b:a5:cb:6e:b9:97:c5:2f:9f:75:92:80:
46:c9:b1:1b:df:25:d1:99:33:c8:d2:c7:b9:4a:cb:
e6:77:aa:7c:ac:cf:f7:b3:05:60:56:80:39:bd:e1:
29:6f:51:53:d0:c1:6b:e1:a2:67:3e:c8:6e:7a:16:
62:56:60:b6:24:b7:17:ea:f6:42:a4:14:c3:1e:f8:
b6:2e:94:0d:c2:99:f4:de:8a:26:bd:00:eb:4f:d5:
46:7c:59:d0:16:01:d8:85:ff:83:d4:ac:d0:19:ee:
7f:0f:f2:13:2c:b5:7e:30:ca:d9:06:8a:cf:d6:fe:
a1:b8:24:f1:87:33:89:06:7f:16:e1:17:85:aa:08:
73:ad:63:6f:c7:00:39:a7:67:9c:c1:37:00:b6:7c:
90:31:bf:24:05:ca:43:8f:f6:42:68:99:89:53:63:
b9:05:b1:22:b0:ea:76:3a:5d:02:96:30:b3:5c:d0:
92:9d:89:c8:ae:7e:31:f8:c7:b0:b4:1b:e9:b1:c0:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:02:29:00:EC:A8:C1:EE:D7:53:2B:56:F1:DF:CE:F7:21:D3:00
X509v3 Authority Key Identifier:
keyid:F3:39:34:3C:C6:D5:1D:DB:8E:36:38:29:9A:1B:B4:95:F4:58:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zk0PMbVHduONjgpmhu0lfRYCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5de6df-ce4f-4b09-82d2-377d25be594d/1/8zk0PMbVHduONjgpmhu0lfRYCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:41:bf:76:a9:40:3a:e0:df:58:1c:da:32:fd:1e:09:c7:
31:06:f8:69:ff:e8:23:e9:2b:76:f4:42:bc:e2:97:79:c3:0d:
6b:8c:6c:9c:84:c1:c4:6a:1e:cc:21:f2:56:25:45:6f:2f:b7:
32:61:ad:da:13:8f:7d:2f:3f:07:08:b2:90:42:ad:56:31:39:
c8:28:7f:fd:8f:c3:e3:cd:eb:c6:9c:bc:31:fa:a2:85:a8:3e:
8a:5c:b1:ad:19:d8:91:86:33:8d:fe:2c:37:df:28:fc:93:ef:
87:49:4b:ff:8e:fa:f5:82:b4:62:38:02:a7:19:fc:9c:c1:bf:
de:95:61:97:1c:d4:2a:1d:70:eb:bc:c2:12:0f:6d:dd:0f:9e:
69:66:72:8a:c6:84:2a:48:12:4a:6f:c9:f0:84:50:08:ab:30:
65:ea:f8:03:c6:5d:bc:47:09:f7:e5:8f:a4:fe:00:47:4c:21:
47:0c:6a:47:c6:c2:c6:8e:89:06:28:b7:3b:65:d7:03:6d:0e:
66:cf:95:83:49:01:98:03:01:2c:f5:7d:d6:17:89:c0:e7:1a:
bf:49:18:b1:1d:fa:a9:7f:6e:78:bb:37:22:f0:db:e1:e4:31:
02:aa:5a:7b:b6:29:18:79:d2:06:97:71:ca:2f:54:c0:fa:ce:
55:8e:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:30 2026 by rpki-client