Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: enNgPlHh22nQa9K2gQhynAq+M51kD1ajRgh4EeNRj00=
Subject key identifier: B7:6F:81:96:F0:33:53:A5:59:2A:6F:8B:CA:94:7E:70:FB:7B:5E:38
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 01A0F07A3670CE8EF028B8B25B1DE049602E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 0EA0
Signing time: Wed 30 Sep 2026 04:02:16 +0000
Manifest this update: Wed 30 Sep 2026 04:02:16 +0000
Manifest next update: Thu 01 Oct 2026 04:02:16 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: pWVQS/mtUJp+SGnn+bZtYy4GWim/j6Qx1Ri1bTnLUFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:7a:36:70:ce:8e:f0:28:b8:b2:5b:1d:e0:49:60:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Sep 30 04:02:16 2026 GMT
Not After : Oct 1 04:02:16 2026 GMT
Subject: CN=b76f8196f03353a5592a6f8bca947e70fb7b5e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:28:5f:66:a8:c2:e2:0f:6c:3a:c2:3b:1a:
5f:9e:f1:c9:fb:f8:16:58:e9:0c:1c:49:a0:8f:72:
fd:98:9a:af:53:17:f0:34:ab:70:e0:cc:e9:93:72:
3a:16:f3:d3:83:57:bc:d5:d2:a7:5b:77:d4:76:ef:
00:ed:5a:03:7c:41:70:d3:34:be:15:d3:97:b8:95:
86:fc:ee:09:d9:5c:fa:29:4b:d0:de:27:79:47:4a:
3c:62:b3:cf:7b:91:9f:ae:d3:d1:a6:12:ab:13:45:
d2:82:49:1b:8b:f6:de:fd:bc:1d:35:aa:80:ff:00:
63:b2:29:d2:13:9b:84:b5:99:5e:44:bc:67:2d:3e:
11:30:25:9b:85:78:f9:e0:36:85:89:90:a9:e9:1b:
1a:8e:85:59:48:54:44:e3:98:53:bb:73:0a:89:8f:
dd:48:e4:13:09:de:d4:b2:f1:6f:c4:ff:35:ab:70:
2e:dd:94:00:0b:7e:7b:d6:42:fa:3c:f2:ab:d2:27:
da:b4:1b:04:ed:b5:14:f5:75:0c:8c:8f:a1:5e:e1:
87:6f:f7:ac:2f:4e:fe:32:18:60:c0:ab:1a:f9:13:
6b:a6:a4:a5:7a:15:de:b4:ba:b1:b8:d7:76:9d:cd:
c4:b5:a1:24:55:e6:d5:23:57:d3:79:37:6e:de:2d:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:81:96:F0:33:53:A5:59:2A:6F:8B:CA:94:7E:70:FB:7B:5E:38
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:11:59:41:86:7d:59:35:c7:95:a1:9b:78:31:9f:c7:ae:
19:30:ea:1d:30:0f:82:dd:33:9a:e7:09:87:9f:c4:75:b6:2c:
59:63:f1:b3:3d:62:41:a7:c5:45:c8:f3:e9:12:8a:33:4f:f2:
cc:a0:8a:28:e1:7d:1e:77:f9:05:9d:d7:40:17:f6:4a:ba:af:
fa:7b:d1:32:a4:fe:e3:0f:d9:f4:53:73:1b:6c:e2:30:86:7c:
a1:c1:e2:41:ff:26:f7:20:2c:07:cc:0d:fd:27:bb:9e:ef:5b:
23:bd:02:0c:aa:b0:60:e2:07:38:a9:8e:7b:54:d4:8e:80:75:
36:e8:00:ab:a5:a0:53:fc:5f:d7:58:ba:cf:5e:a5:2f:f5:1f:
cb:8a:4e:c2:05:fb:7c:1d:45:2d:cd:ae:f0:6e:ef:85:27:97:
3f:65:e4:3f:85:ec:24:81:d5:64:09:f9:de:b5:26:15:3d:1a:
c8:b6:a5:8c:a4:7d:7b:02:ed:72:70:5a:54:60:3a:99:2e:e0:
f9:c9:b9:91:04:36:11:56:20:26:af:53:4f:d6:1d:9b:2a:8c:
59:21:9e:75:e5:11:63:8f:21:0a:93:ef:df:d3:9e:f5:e1:49:
88:09:36:10:bb:93:7d:20:58:a9:61:85:a3:19:b4:ba:d2:f6:
20:9d:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:41:29 2026 by rpki-client