Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
File: 9E8rYv2EXJFI4OImQldIw8bpdTk.mft (raw, json)
Hash identifier: 427T39+97PmdrrBMhm+WZHloBx15ROpufvcdtqdmwbg=
Subject key identifier: 97:DB:CE:B1:69:F5:F0:4D:D7:DD:79:11:71:0D:AC:CD:48:01:CB:D3
Authority key identifier: F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
Certificate issuer: /CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Certificate serial: 01A000257B03E96259AD8DC74ADF087E0AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
Manifest number: 0981
Signing time: Fri 14 Aug 2026 12:00:51 +0000
Manifest this update: Fri 14 Aug 2026 12:00:51 +0000
Manifest next update: Sat 15 Aug 2026 12:00:51 +0000
Files and hashes: 1: 9E8rYv2EXJFI4OImQldIw8bpdTk.crl (hash: S3BeaE1JS1W7yJ2cIZ0njsws8yED0E9H8xxfa4gie1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:7b:03:e9:62:59:ad:8d:c7:4a:df:08:7e:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44f2b62fd845c9148e0e226425748c3c6e97539
Validity
Not Before: Aug 14 12:00:51 2026 GMT
Not After : Aug 15 12:00:51 2026 GMT
Subject: CN=97dbceb169f5f04dd7dd7911710daccd4801cbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:d8:f3:4f:3c:4b:59:22:79:c8:45:25:3d:
94:27:ee:c7:a8:64:be:18:50:18:94:9d:75:d2:52:
6b:93:12:6a:e4:aa:3d:71:08:90:9e:50:6d:ea:64:
f5:11:42:1f:b0:ec:9f:4b:a2:c8:61:c7:95:e5:e8:
4e:b8:46:af:10:8b:90:1b:6f:b9:20:a0:4e:7f:7f:
ab:e1:c4:33:98:a9:4a:8c:98:2e:82:c5:99:05:a3:
4a:2e:08:66:6a:96:e1:9e:8c:ec:d1:fe:53:62:eb:
98:76:ef:fd:7d:17:83:78:3c:bd:8a:1f:a3:1c:c7:
00:21:3f:98:e8:87:58:8a:07:18:89:24:34:b4:29:
2d:f3:ef:c7:ee:fc:6f:7a:4b:ec:ef:64:e5:39:78:
b5:f6:dd:58:14:15:e9:af:33:06:f5:f1:5e:43:d4:
96:5e:d2:65:a3:c5:75:63:7c:b6:d2:89:36:54:eb:
99:37:06:20:ec:07:32:5b:40:fb:59:2f:6a:d7:a4:
1a:dd:19:fd:68:3d:2e:76:af:9e:3b:b1:20:95:c4:
4a:ed:9f:fd:0a:3e:19:47:7c:a6:b7:3e:9d:fa:6b:
63:c4:f8:93:10:65:20:5c:70:57:7c:58:52:bd:89:
b7:30:5c:23:ac:59:3f:48:6c:6b:e4:05:42:b6:2d:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:CE:B1:69:F5:F0:4D:D7:DD:79:11:71:0D:AC:CD:48:01:CB:D3
X509v3 Authority Key Identifier:
keyid:F4:4F:2B:62:FD:84:5C:91:48:E0:E2:26:42:57:48:C3:C6:E9:75:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E8rYv2EXJFI4OImQldIw8bpdTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/149ad4-e4a6-4bdc-a4d0-77a5477fbabf/1/9E8rYv2EXJFI4OImQldIw8bpdTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:58:2f:77:ab:eb:45:21:1a:a8:f8:8b:e9:0d:9b:a3:73:bb:
84:83:e4:40:3c:90:00:66:fc:7a:38:45:92:5b:df:6c:94:d9:
5b:13:27:a7:ba:25:ee:e0:55:6c:ed:39:24:e7:47:2c:5f:e8:
63:f4:86:05:f6:76:42:bb:08:7f:dc:3b:59:2b:4f:f3:cb:f3:
ec:c3:21:c9:9b:2a:97:08:be:ed:63:90:05:af:b9:d3:ce:37:
d3:43:ab:42:d7:d6:20:85:02:a6:56:0e:8d:2e:23:29:24:a6:
f0:63:c1:ed:82:f0:31:49:e5:df:2b:6d:63:b6:95:ab:49:99:
6e:dd:7a:bb:15:a8:df:43:d7:2c:e8:7a:e3:7e:51:85:8f:90:
d0:db:ca:f3:40:06:83:02:02:fb:ac:71:04:7f:05:40:a7:00:
fb:ef:10:99:6c:a7:d0:73:01:d4:8c:f5:7b:f0:8e:b1:b5:57:
c9:3c:ea:00:ba:f7:d7:25:9a:85:5b:0d:90:08:14:97:61:50:
49:25:56:9b:ec:bc:7a:ab:9c:09:42:1f:2f:82:3d:61:35:0e:
62:7b:30:64:23:70:1c:8d:c2:bf:7a:c0:aa:5d:94:be:1c:95:
25:ae:b5:08:1a:05:36:57:06:fe:3e:80:76:c5:63:56:16:24:
62:56:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:29 2026 by rpki-client