Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: EMyya0K96TuV/H4A5RvPHY6HUmQleVmYLq4F7G8RNQA=
Subject key identifier: 2C:69:EA:12:80:3E:7F:BC:AC:FF:DE:21:47:A2:4E:D2:AA:99:DD:E1
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 01A13C6E4AF1EB2855379273C6DE66CBCBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 0B7F
Signing time: Wed 14 Oct 2026 22:00:23 +0000
Manifest this update: Wed 14 Oct 2026 22:00:23 +0000
Manifest next update: Thu 15 Oct 2026 22:00:23 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: MPzZC8hyvY+x3C2R7V0Go4eVMj8z1fHUvvr0ObSvSlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:4a:f1:eb:28:55:37:92:73:c6:de:66:cb:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Oct 14 22:00:23 2026 GMT
Not After : Oct 15 22:00:23 2026 GMT
Subject: CN=2c69ea12803e7fbcacffde2147a24ed2aa99dde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1f:2d:51:e6:a4:97:7d:31:cc:1f:4f:4c:f8:
6e:9f:9f:3d:b3:a5:15:68:03:92:a2:d7:3b:c9:6b:
d1:4a:e6:6f:92:df:81:06:d3:1c:29:67:64:19:0d:
15:5e:2d:e1:be:4a:85:fb:64:13:1c:01:83:16:92:
f1:de:7f:fc:7b:3d:7b:11:e3:5d:97:26:d3:03:78:
65:95:e2:8c:2d:3a:29:ae:af:24:2d:6c:b6:b6:6f:
dd:c9:fd:c7:b7:8b:f2:86:a2:91:82:9d:92:3a:41:
60:93:62:42:fe:67:73:1d:1e:1a:97:e0:1e:33:34:
d4:24:7b:50:59:cb:e9:c6:dd:6e:0d:88:a1:5a:42:
f4:af:47:ba:d1:93:17:94:30:a5:2c:2c:97:c0:06:
9a:e8:3c:26:36:20:d2:fc:75:26:e7:39:8a:21:27:
92:6c:85:de:86:20:3d:f7:27:1e:c0:a7:da:55:4c:
8b:3c:75:95:6a:7c:2b:06:0c:a0:fc:74:da:f3:de:
2b:c9:ee:47:1c:7f:cc:04:58:fe:67:1a:3d:28:24:
d4:ee:07:f9:d6:07:bc:ce:1f:43:2e:6a:35:1a:8f:
d7:24:da:c6:e4:0a:ec:ae:1d:4a:9f:cd:6e:61:20:
46:ed:ad:5a:5b:99:6b:af:3b:49:48:eb:e8:bb:41:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:EA:12:80:3E:7F:BC:AC:FF:DE:21:47:A2:4E:D2:AA:99:DD:E1
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0b:a1:01:55:09:5c:c7:36:2a:c5:e1:cc:0a:d0:7b:0c:98:
9d:f9:81:d3:00:95:ef:a5:e1:a1:96:b7:97:fc:f8:98:2c:a0:
b7:96:5d:f0:d2:36:cd:69:8e:9e:f0:87:9b:fc:9c:a6:39:f0:
53:0e:2e:25:1e:72:a5:11:d2:9c:aa:fb:d3:20:6c:8f:62:54:
c0:0c:c7:7c:fa:19:46:ff:38:0c:04:76:21:cb:41:f2:18:bf:
be:bc:a3:ad:72:1c:28:2d:80:fa:6e:1f:9d:fd:f6:aa:10:f9:
ef:a1:16:c6:bc:2e:8b:5b:d3:91:2b:0d:e0:e4:92:b4:fa:36:
5d:bd:0a:2a:9b:c6:b4:23:0f:35:15:de:48:75:61:32:30:2d:
96:79:b3:09:3b:e0:35:21:01:8d:b4:ad:a9:12:f5:cc:aa:ce:
f1:fb:fe:7f:7b:c2:7b:d2:ea:97:5d:6f:64:33:30:57:e6:82:
3b:c9:47:94:1b:1c:a7:47:06:3b:b9:26:71:76:ea:14:7e:18:
5e:45:de:df:5e:9c:8e:17:f5:1a:51:70:2c:01:d3:d4:77:65:
ac:b4:0a:0e:a2:1b:14:db:55:07:82:af:0c:90:4e:db:8d:ab:
00:32:e2:3d:6a:d2:8b:5c:20:e3:ce:1b:ce:69:16:12:9f:99:
ce:03:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:31 2026 by rpki-client