Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
File: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft (raw, json)
Hash identifier: +7ufDRet+8PJwKdvOGSgKKxXsaTKc5Y3lBw9UkqlkU0=
Subject key identifier: 9C:D9:40:D0:A3:56:CD:A3:F8:F1:1A:89:EB:EB:47:1C:2F:95:BB:10
Authority key identifier: F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
Certificate issuer: /CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Certificate serial: 01A04017E793E104C9A534BB065651F4C972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:43 +0000
Manifest this update: Wed 26 Aug 2026 22:01:43 +0000
Manifest next update: Thu 27 Aug 2026 22:01:43 +0000
Files and hashes: 1: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl (hash: mQB80skNUriSBg10EOg7/rNmu8vk5XcOmlVlLAdVLYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:e7:93:e1:04:c9:a5:34:bb:06:56:51:f4:c9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Validity
Not Before: Aug 26 22:01:43 2026 GMT
Not After : Aug 27 22:01:43 2026 GMT
Subject: CN=9cd940d0a356cda3f8f11a89ebeb471c2f95bb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:ce:7e:68:82:d5:60:9d:98:e2:14:a3:d4:
2a:b1:b2:4f:38:e2:a4:75:26:42:fb:e8:20:fb:34:
0d:34:62:76:2f:e8:3c:9f:bd:dc:c1:eb:4d:e8:35:
34:48:f8:f8:d9:d9:23:66:3a:a4:bd:a3:c2:01:f2:
cf:a9:d3:ad:7a:d0:a3:95:d1:89:36:26:d0:d9:ea:
8a:64:99:a5:83:03:5c:f7:3f:e7:be:40:c5:24:be:
66:6c:5d:a8:8f:6e:58:1d:89:26:e6:55:68:fa:7e:
19:40:0c:a0:6e:73:5b:51:3c:89:44:b1:bf:76:70:
49:fe:7b:3a:84:b0:af:e2:9f:d5:27:8c:e4:70:b6:
0d:d1:ab:94:a0:6b:7a:43:47:f1:f3:a7:75:65:cf:
4d:af:a5:3c:9b:20:f8:a1:fb:55:d7:2a:b6:ef:14:
02:cc:ba:24:a1:65:99:41:9f:ec:cf:fb:f0:af:69:
9b:14:74:89:4d:19:94:be:ff:60:86:65:e7:ff:1f:
ca:1a:7e:1c:59:12:65:ff:27:8f:be:df:30:54:16:
24:56:f3:fd:4b:b1:c2:00:6f:09:86:e3:24:28:ae:
aa:21:57:d1:d4:91:df:c6:b8:8b:12:55:cf:8e:81:
36:ef:b9:bb:c9:8a:7b:6c:53:4a:06:12:88:53:60:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D9:40:D0:A3:56:CD:A3:F8:F1:1A:89:EB:EB:47:1C:2F:95:BB:10
X509v3 Authority Key Identifier:
keyid:F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a9:a9:db:8b:1c:c3:bb:e4:16:c1:50:be:d4:8e:5e:85:4e:
5a:2b:ab:62:97:00:3d:6a:04:b1:a7:3c:d8:55:a2:09:b6:8f:
50:8c:a0:82:f5:54:46:2d:be:74:14:60:5f:65:c5:37:e1:78:
06:31:54:22:1a:8a:0b:c5:93:d2:bb:95:4c:4b:9b:e0:89:fd:
dc:3e:48:73:f1:d4:36:ea:0b:ce:00:38:3e:e4:9b:51:3b:56:
af:69:87:7c:b9:87:4c:ba:4f:9f:bc:96:5e:ba:d7:22:0c:44:
b6:9a:e8:d6:c3:2b:9b:65:5c:b0:64:86:97:58:3d:e6:7f:8f:
39:c8:10:aa:d6:16:48:46:74:a9:fd:28:1f:05:64:d7:ef:58:
c8:b1:4e:e5:36:38:f0:5e:66:32:35:03:8d:ab:6c:73:c9:18:
73:04:26:a7:05:f9:fb:6e:29:f6:2f:f8:60:1c:08:ea:7e:24:
58:8d:b3:eb:61:67:29:cd:fa:8e:d0:e2:35:60:af:98:62:06:
d6:4f:c1:44:84:67:91:0b:23:87:b0:8f:21:a8:22:af:8f:eb:
e8:94:d8:5e:60:30:5d:27:d1:99:04:ff:cd:ae:34:1f:1c:0e:
5a:06:73:63:79:03:06:85:0f:e5:2b:1d:44:02:26:75:dc:be:
ad:65:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:58:18 2026 by rpki-client