Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File: uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier: 8CGKSUkYToXK3ZojW3rbX0wxEdKeiu1kofDabuI4E0s=
Subject key identifier: 22:4A:FB:88:07:93:4D:1E:ED:2E:57:0C:A2:94:6C:9F:72:CC:5C:F5
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer: /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial: 01A08BD686762D9E6CA507B4A4FEBB065A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number: 08F9
Signing time: Thu 10 Sep 2026 15:01:26 +0000
Manifest this update: Thu 10 Sep 2026 15:01:26 +0000
Manifest next update: Fri 11 Sep 2026 15:01:26 +0000
Files and hashes: 1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: Q67oJYVb3e8oc/QQLCHRbJDrXbnB2vhVB9Hkso6lz00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:86:76:2d:9e:6c:a5:07:b4:a4:fe:bb:06:5a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Validity
Not Before: Sep 10 15:01:26 2026 GMT
Not After : Sep 11 15:01:26 2026 GMT
Subject: CN=224afb8807934d1eed2e570ca2946c9f72cc5cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:99:cc:99:9e:0b:ce:d1:5c:8e:9f:e1:41:
98:a4:4c:79:8c:94:94:15:4f:76:28:c5:74:67:6c:
cd:91:83:ba:81:92:7f:26:b8:8d:d4:65:22:95:15:
b2:3e:35:54:31:bd:05:5a:a0:82:58:47:9f:05:7e:
45:df:d4:fb:90:99:76:46:67:7d:08:b2:50:83:30:
7b:7b:85:1d:0d:61:aa:b3:46:72:1b:88:64:00:d9:
11:91:89:f7:8d:f6:aa:a1:8a:0c:94:19:20:c2:ca:
89:af:1d:1d:7f:3a:c7:a6:dc:33:e7:36:7e:2b:d2:
46:c8:74:7a:5d:9a:56:0d:14:cf:e5:c4:ef:56:04:
a8:13:4b:16:b1:b7:23:7c:0f:8a:c3:92:25:52:a2:
df:91:9a:09:dc:0e:34:b0:a8:0a:08:ae:fa:eb:fc:
bb:95:c0:62:81:78:1b:a1:c8:f4:bf:21:d7:e2:fc:
b5:8c:67:9d:14:41:f7:3c:cf:26:f3:e1:77:1e:41:
87:d8:bc:7c:c0:1c:c4:69:cd:e4:dd:16:48:02:5a:
5e:70:0d:79:83:0e:b2:0e:bb:75:e1:b6:0b:ac:46:
60:e9:da:86:e9:9f:a8:d1:c4:87:b3:b9:20:8b:6a:
e8:56:9d:ce:98:b7:36:b4:a4:94:fb:1d:66:cc:49:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:FB:88:07:93:4D:1E:ED:2E:57:0C:A2:94:6C:9F:72:CC:5C:F5
X509v3 Authority Key Identifier:
keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:fe:37:32:12:f1:46:30:26:74:ca:95:e3:b8:ed:2c:b0:
f4:9e:3f:8c:7b:9e:0c:a5:34:39:b2:47:89:bc:49:74:db:20:
c0:72:90:3e:92:06:27:a3:a5:74:15:89:94:9b:14:b6:22:d2:
4e:8a:1f:12:9e:7c:78:51:a0:f9:04:9d:08:f5:fb:32:83:cf:
17:52:97:ce:c0:e3:db:88:15:1b:dc:d8:19:93:b2:c8:88:50:
c9:46:36:73:33:da:c6:ad:d1:2d:23:c9:f6:19:82:3e:c9:09:
1b:6c:63:43:f4:9a:03:34:2c:88:93:34:93:4d:7f:8f:c3:1a:
25:84:52:dd:0b:c1:35:96:fc:2f:e5:34:2d:55:3a:ab:10:97:
6e:70:2e:85:3d:aa:17:cc:41:23:49:76:63:d7:32:dc:e3:6d:
44:75:12:f1:3f:9f:cb:88:fa:2c:0a:09:a8:cb:3e:d3:19:8f:
71:6b:89:a2:ef:bc:af:72:72:ed:76:22:f3:a1:e9:65:3b:4c:
eb:4d:b6:74:94:ed:e8:a1:06:b6:32:f8:1a:e3:6d:d0:cb:95:
e0:99:90:20:d2:21:a3:fe:a9:f6:92:d5:c8:a7:53:5c:14:56:
44:02:e5:d6:19:32:9b:d4:1b:ae:9d:a9:6b:0f:2a:cb:b5:63:
8d:f1:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:10:49 2026 by rpki-client