Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
File: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft (raw, json)
Hash identifier: 5An3a45lA/1+iaPi7+wBrhI3h9vwwSboWjrsqOob4QI=
Subject key identifier: C0:E9:B8:B4:91:D2:71:60:A4:30:76:F4:71:13:96:54:F8:82:8E:A3
Authority key identifier: F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
Certificate issuer: /CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Certificate serial: 01A0404E48EA0DB688C48861011BD8C4418F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:07 +0000
Manifest this update: Wed 26 Aug 2026 23:01:07 +0000
Manifest next update: Thu 27 Aug 2026 23:01:07 +0000
Files and hashes: 1: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl (hash: kjYmfVn9LBp7kUtsuJwRqc/wg4PwAaYXfEXCO/HrO2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:48:ea:0d:b6:88:c4:88:61:01:1b:d8:c4:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Validity
Not Before: Aug 26 23:01:07 2026 GMT
Not After : Aug 27 23:01:07 2026 GMT
Subject: CN=c0e9b8b491d27160a43076f471139654f8828ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:54:bf:d4:ef:00:6e:2b:1a:a1:43:5a:2a:
c7:6d:22:89:30:f4:f7:54:55:7a:56:bd:91:9c:78:
d6:0b:b5:04:6d:98:74:63:b9:b6:af:a2:a5:99:84:
17:c0:6c:6e:24:2d:ca:6e:02:11:f1:e1:d3:9b:2d:
d3:60:6c:ea:9d:2a:00:e1:ad:ab:3e:b8:d5:5a:b8:
6e:73:c3:1b:25:d4:ef:d8:31:47:5d:f4:f1:e9:82:
23:ec:33:5e:10:0c:2b:b4:e6:15:92:bf:c7:5e:10:
0d:5a:9a:94:9f:23:cf:09:82:78:7d:15:fe:f5:80:
b6:2d:28:7f:51:95:7f:f5:81:25:cf:09:5c:3b:2b:
8f:34:f5:b1:62:eb:94:bd:4d:b1:0f:7e:b5:3b:30:
f8:0f:f7:65:ef:82:57:e4:c6:1b:df:9d:1f:5a:a4:
02:6b:24:61:3a:6d:8a:99:18:de:60:7b:9f:3c:19:
d5:f1:07:1a:eb:f8:12:68:23:4f:85:72:f7:1f:a5:
46:bb:fd:1a:8f:53:bf:a9:f8:ee:23:bb:34:94:de:
ef:0c:80:4f:65:31:93:0c:48:53:a1:13:5f:b9:25:
a8:00:52:ca:9e:43:47:67:f0:e6:8f:0f:41:25:96:
a1:08:b5:76:1c:06:65:c0:94:bc:2a:fb:23:70:d9:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E9:B8:B4:91:D2:71:60:A4:30:76:F4:71:13:96:54:F8:82:8E:A3
X509v3 Authority Key Identifier:
keyid:F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:79:a1:79:37:93:66:58:1d:34:2a:f5:1d:74:9e:5b:d9:ea:
e4:f3:41:9f:9d:00:57:5d:95:53:73:d2:04:b6:7c:2d:7e:b4:
13:db:df:42:65:58:7f:9f:94:fb:c6:60:69:9f:09:60:e0:6d:
9a:71:54:0f:bb:da:35:46:86:5c:8a:fa:5b:07:28:9c:4a:81:
82:97:24:45:79:9a:ff:66:98:ee:53:fb:db:13:a3:e8:59:a4:
0a:6c:ad:11:f5:ad:b9:cd:df:dd:e8:db:0d:92:88:02:95:37:
fb:fb:49:4d:a8:b9:80:a7:95:30:60:4f:18:bd:e8:98:13:6d:
14:80:54:cd:7f:b9:59:73:95:b1:86:50:5b:2f:fe:15:b7:39:
da:25:e2:50:4b:6a:2c:a6:a7:5b:29:8b:60:0c:83:b5:ef:9e:
41:71:58:8f:92:af:57:3b:ed:f1:13:ce:47:63:91:c8:9b:7a:
a2:ff:17:2a:2e:65:1b:3d:1b:da:8e:25:46:76:c0:7b:cb:f3:
82:9f:94:45:41:5a:a6:6f:b6:63:88:45:9c:d0:b8:a2:4a:ea:
1b:2b:d4:19:33:55:a8:2e:e3:6b:a8:55:19:28:2c:43:b9:3f:
26:da:d6:c0:08:c0:83:1c:af:50:8d:93:48:e2:79:98:cc:92:
8c:19:7d:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATkjqDbaIxIhhARvYxEGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzdlNmY2MWJmMTkzYzlmNmI3YjhjZWQyMGUxODUwYTkw
ZDgzZGIwHhcNMjYwODI2MjMwMTA3WhcNMjYwODI3MjMwMTA3WjAzMTEwLwYDVQQD
EyhjMGU5YjhiNDkxZDI3MTYwYTQzMDc2ZjQ3MTEzOTY1NGY4ODI4ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJZUv9TvAG4rGqFDWirHbSKJMPT3
VFV6Vr2RnHjWC7UEbZh0Y7m2r6KlmYQXwGxuJC3KbgIR8eHTmy3TYGzqnSoA4a2r
PrjVWrhuc8MbJdTv2DFHXfTx6YIj7DNeEAwrtOYVkr/HXhANWpqUnyPPCYJ4fRX+
9YC2LSh/UZV/9YElzwlcOyuPNPWxYuuUvU2xD361OzD4D/dl74JX5MYb350fWqQC
ayRhOm2KmRjeYHufPBnV8Qca6/gSaCNPhXL3H6VGu/0aj1O/qfjuI7s0lN7vDIBP
ZTGTDEhToRNfuSWoAFLKnkNHZ/Dmjw9BJZahCLV2HAZlwJS8KvsjcNmNSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDpuLSR0nFgpDB29HETllT4go6jMB8GA1UdIwQY
MBaAFPHH5vYb8ZPJ9re4ztIOGFCpDYPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNmbTlodnhrOG4ydDdqTzBnNFlVS2tOZzlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hZjY0MjEtMjk5Yy00ZmQ1LThhY2It
MjcxYTkyM2M5ZWNlLzEvOGNmbTlodnhrOG4ydDdqTzBnNFlVS2tOZzlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hZjY0MjEtMjk5Yy00ZmQ1LThhY2ItMjcxYTkyM2M5ZWNl
LzEvOGNmbTlodnhrOG4ydDdqTzBnNFlVS2tOZzlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXmheTeT
ZlgdNCr1HXSeW9nq5PNBn50AV12VU3PSBLZ8LX60E9vfQmVYf5+U+8ZgaZ8JYOBt
mnFUD7vaNUaGXIr6WwconEqBgpckRXma/2aY7lP72xOj6FmkCmytEfWtuc3f3ejb
DZKIApU3+/tJTai5gKeVMGBPGL3omBNtFIBUzX+5WXOVsYZQWy/+Fbc52iXiUEtq
LKanWymLYAyDte+eQXFYj5KvVzvt8RPOR2ORyJt6ov8XKi5lGz0b2o4lRnbAe8vz
gp+URUFapm+2Y4hFnNC4okrqGyvUGTNVqC7ja6hVGSgsQ7k/JtrWwAjAgxyvUI2T
SOJ5mMySjBl9vA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:37 2026 by rpki-client