Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
File: 8JizF8q5AsLuBnXu7al95Yx0rMA.mft (raw, json)
Hash identifier: RsrUpmQMMTZTUy58USgh/iUJ2SwDbRxwrRmWkjtASLA=
Subject key identifier: 23:98:DE:51:6B:9F:A6:A2:2D:3B:CC:88:55:6A:D9:0D:89:B0:3B:BC
Authority key identifier: F0:98:B3:17:CA:B9:02:C2:EE:06:75:EE:ED:A9:7D:E5:8C:74:AC:C0
Certificate issuer: /CN=f098b317cab902c2ee0675eeeda97de58c74acc0
Certificate serial: 01A0404E6CD412E53989CC279957453250AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
Manifest number: 010B
Signing time: Wed 26 Aug 2026 23:01:16 +0000
Manifest this update: Wed 26 Aug 2026 23:01:16 +0000
Manifest next update: Thu 27 Aug 2026 23:01:16 +0000
Files and hashes: 1: 8JizF8q5AsLuBnXu7al95Yx0rMA.crl (hash: Op1Qy+z/adVnMcB/8mfNqIlQHjFgLila+Q5/juDgg2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:6c:d4:12:e5:39:89:cc:27:99:57:45:32:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f098b317cab902c2ee0675eeeda97de58c74acc0
Validity
Not Before: Aug 26 23:01:16 2026 GMT
Not After : Aug 27 23:01:16 2026 GMT
Subject: CN=2398de516b9fa6a22d3bcc88556ad90d89b03bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:4a:1a:88:e0:15:16:e5:d2:1a:15:19:a6:
93:fe:7a:69:48:93:01:8b:8b:2c:32:0b:5a:b7:b2:
e9:ee:8c:ba:4a:71:d7:74:95:91:77:c2:d8:d5:7d:
03:31:a4:5c:40:53:7e:95:57:02:c5:20:55:0e:60:
e7:5c:15:8e:47:6b:07:96:2e:54:6c:2e:96:49:09:
9b:49:21:0a:d7:aa:60:eb:16:d5:98:71:0c:f8:85:
14:b6:62:a0:94:97:84:20:34:52:0c:9e:05:5f:76:
11:1d:e3:3d:24:0e:cd:23:28:6f:88:09:6c:3e:ca:
26:cd:2b:2f:0f:da:03:7b:6c:18:71:b3:6e:2d:ec:
a1:57:42:fd:81:5b:1a:07:cd:72:af:48:e6:4a:ce:
09:d9:d9:b9:12:14:80:29:17:22:2c:e1:5d:59:e3:
c0:cd:85:91:bc:3a:1f:c1:84:e0:7d:cb:3c:ec:84:
a4:87:4e:9a:fb:98:89:ad:ca:7c:46:25:e0:fb:83:
8f:17:b1:7b:08:cd:89:dc:27:53:03:60:bd:bb:a3:
54:2d:90:ff:d8:fb:de:3e:86:1e:3e:29:37:34:f5:
fa:92:c1:d4:56:80:7a:74:47:97:d9:fb:e6:db:0f:
63:d9:b2:c4:bb:b1:51:58:3c:a4:65:b3:4e:f7:e6:
e1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:98:DE:51:6B:9F:A6:A2:2D:3B:CC:88:55:6A:D9:0D:89:B0:3B:BC
X509v3 Authority Key Identifier:
keyid:F0:98:B3:17:CA:B9:02:C2:EE:06:75:EE:ED:A9:7D:E5:8C:74:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JizF8q5AsLuBnXu7al95Yx0rMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/aa3603-8160-420a-a82c-e38e6fef10a5/1/8JizF8q5AsLuBnXu7al95Yx0rMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:fa:e1:96:29:01:fd:e0:47:5f:f9:04:ea:0a:7f:bc:aa:
f7:a3:d1:fd:dc:e3:9c:5c:d1:78:09:fe:8e:cb:00:ca:9d:6f:
ee:11:c4:d8:c3:a0:a9:c9:86:02:fe:a2:8a:ee:05:ce:6d:90:
c9:27:d4:69:f4:7b:11:5e:72:0e:99:f3:26:ab:a2:69:36:b5:
fc:93:89:2c:34:d0:16:37:ce:2b:81:63:6b:0f:f7:b3:62:4b:
f0:47:a1:69:fb:fd:8e:45:36:1f:ef:bc:b8:bd:93:95:b4:20:
fa:f1:4a:aa:7f:06:b8:61:a6:4f:26:bf:15:3c:56:f1:4a:93:
0e:ec:e5:4e:d7:b5:9a:9b:4e:c3:18:52:8c:40:e8:04:bb:d7:
9d:1b:e2:99:7d:9a:7c:13:5f:39:b8:41:ac:f7:e6:35:81:3d:
ab:94:43:1f:13:ea:f2:7c:a0:b9:b4:aa:75:7f:e8:3b:e4:f4:
a6:8c:5c:36:d3:39:3d:87:4a:d3:07:a6:30:85:0f:59:0b:96:
f4:8d:70:53:94:39:76:8f:2b:58:81:46:1c:cf:81:7c:ac:22:
6f:6a:4a:a5:50:8e:79:ab:8a:be:26:97:ed:2e:a8:b3:99:13:
44:41:ca:08:19:bd:ae:82:ea:4d:e0:e1:f4:a7:0d:6c:a4:dc:
2f:db:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:05 2026 by rpki-client