Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
File: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft (raw, json)
Hash identifier: 8XNjPV8b2/i8XeM/A7AQXMQz7C8NyNkyyfQgagV1duU=
Subject key identifier: FA:9C:F3:4D:2F:E2:85:77:9C:CC:9E:57:97:4F:DE:2B:53:66:E9:62
Authority key identifier: F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
Certificate issuer: /CN=f077386169b880c8cb4b36370d370b5e3decad8c
Certificate serial: 01A0404DE9EBEF1BAA1FFC0FE9AAC1A89481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:00:43 +0000
Manifest this update: Wed 26 Aug 2026 23:00:43 +0000
Manifest next update: Thu 27 Aug 2026 23:00:43 +0000
Files and hashes: 1: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl (hash: sFJzz2qXpJm3m4qtzlKz45xaQb1L5iSaO9iB72ytXy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:e9:eb:ef:1b:aa:1f:fc:0f:e9:aa:c1:a8:94:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f077386169b880c8cb4b36370d370b5e3decad8c
Validity
Not Before: Aug 26 23:00:43 2026 GMT
Not After : Aug 27 23:00:43 2026 GMT
Subject: CN=fa9cf34d2fe285779ccc9e57974fde2b5366e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:15:34:6b:56:ad:50:4e:53:3c:1a:3a:a4:
37:74:39:b3:d7:69:6f:12:dc:86:c0:70:6b:c7:51:
a4:19:7b:bb:17:e1:98:38:a9:b7:fd:ad:58:08:70:
25:8a:79:83:13:0c:9c:91:67:69:66:6e:dd:32:7e:
d0:20:05:9d:d7:78:30:c3:0b:4b:38:52:32:5c:c2:
91:dd:60:dc:43:1b:f8:bc:a8:d8:9c:f8:ce:ee:b1:
60:17:9e:94:92:89:b5:26:e5:9e:36:43:05:4e:48:
61:c4:6b:92:34:56:57:bb:0a:25:46:73:68:46:91:
03:95:2b:b6:da:2d:c9:9c:0e:1c:1d:2c:0c:e1:75:
d0:1a:7e:4e:28:2d:fe:49:ea:01:96:25:12:42:84:
df:56:5b:b9:b4:7c:48:b2:33:0a:42:ad:c3:90:54:
90:f0:a8:76:d9:cd:0e:58:eb:6e:b4:0a:ff:1e:c4:
68:87:4b:29:5a:f3:82:25:3e:27:8f:49:8b:2a:8a:
6a:bc:c6:ad:66:0c:ed:1e:56:58:de:99:ee:1f:45:
67:68:d0:35:a4:a9:e7:c9:c1:2d:b5:ae:cd:0c:d1:
fb:80:06:3c:13:a6:cb:d9:0f:6f:71:c8:1e:36:6d:
76:2c:fc:32:b0:52:43:af:74:be:e2:38:ac:c9:70:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:F3:4D:2F:E2:85:77:9C:CC:9E:57:97:4F:DE:2B:53:66:E9:62
X509v3 Authority Key Identifier:
keyid:F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:e4:04:3b:8c:6f:a7:94:53:f1:c7:e5:3a:53:0c:05:b4:
69:a0:6d:83:9c:85:89:27:c0:83:69:bb:7a:59:3f:72:35:e3:
36:89:f6:f5:7c:57:9d:f4:8c:4b:4f:20:85:42:0b:b4:cc:14:
e3:8a:ee:06:d1:64:53:97:7c:23:ee:09:31:2a:52:b5:ea:2c:
fa:6b:f6:f5:c7:8b:d3:f5:e9:e6:a7:f8:fa:74:bd:78:c3:ab:
0d:5e:1a:8b:e6:8e:f3:2d:45:99:ba:a4:db:61:71:e0:ab:58:
a1:38:b6:90:87:63:90:e3:b2:21:91:f2:eb:b9:93:ef:3f:f2:
13:0c:56:62:2f:a4:b7:79:91:bd:3d:46:fe:66:ee:72:35:4b:
08:8e:da:3a:2c:89:73:80:b7:63:8d:ec:3b:ad:e6:6d:17:72:
de:04:7e:de:05:95:7b:aa:b4:0c:fe:84:7a:21:f0:90:72:c4:
d3:4d:06:29:7e:70:20:ab:6e:07:90:38:4d:45:88:d6:f7:51:
b6:ee:76:d0:47:b2:9f:7a:2b:70:36:a3:7e:c5:e0:27:e1:0e:
dd:72:8a:69:6e:c7:0e:da:74:b1:37:fb:0f:cb:0a:04:b3:9e:
44:45:cd:88:ae:12:53:e0:d7:4e:6c:b7:ca:88:3e:2a:1f:7b:
1e:42:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:46 2026 by rpki-client