Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: 6o0HmNdkX1XsT8oSn5drtRcAof7Mw/FzwwIrSZGaN9c=
Subject key identifier: F3:AD:EA:66:3B:D5:66:02:04:FE:74:0A:42:2E:F1:D6:62:F6:F2:92
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 01A17A717F7385E672B9B30461FBA0EB34B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 1ABF
Signing time: Mon 26 Oct 2026 23:00:20 +0000
Manifest this update: Mon 26 Oct 2026 23:00:20 +0000
Manifest next update: Tue 27 Oct 2026 23:00:20 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: XHaBp8Ss88blgFa2wX90GJdzkn81FsaIc3IVxe+a4ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:7f:73:85:e6:72:b9:b3:04:61:fb:a0:eb:34:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Oct 26 23:00:20 2026 GMT
Not After : Oct 27 23:00:20 2026 GMT
Subject: CN=f3adea663bd5660204fe740a422ef1d662f6f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:47:11:da:09:d6:0d:c2:14:ac:c4:5d:fb:
49:24:b2:8d:c4:50:0e:c1:7e:4c:ac:cb:93:b0:64:
3c:12:6e:b4:3c:33:8e:b2:6d:84:b3:99:b7:8e:23:
54:ee:25:17:fc:77:e8:1a:c3:1b:6a:38:9f:8c:71:
aa:22:3e:4e:d6:c9:5a:d1:c6:6b:74:cd:5e:6c:0f:
16:53:43:46:fa:37:da:42:ae:25:7d:90:9e:a9:3c:
9c:61:01:f3:d2:4e:9e:4f:df:35:4e:93:05:96:38:
00:f1:a6:17:02:d6:b1:c5:b1:ca:99:e9:a0:a8:ab:
f8:de:e7:87:38:1a:40:15:6f:6a:0b:28:9a:1a:eb:
4a:37:c4:ff:3b:29:52:e0:0a:16:4b:07:ee:32:da:
e3:61:2e:f4:62:be:e4:d7:67:2a:c9:e6:63:03:6d:
d0:b4:4c:14:68:86:ea:97:ae:2b:44:a0:e7:e1:d8:
f8:f4:43:1a:ac:48:57:ab:e5:41:0e:23:f1:c5:10:
2e:09:0b:e2:0e:53:55:71:75:90:8c:63:c3:e8:b2:
5f:a1:5a:5e:2e:c6:5b:22:0c:53:f9:cc:51:81:18:
a8:08:f3:d8:a6:8d:0d:56:3c:fe:5c:b7:c4:85:8d:
17:ff:66:cf:fd:9a:eb:46:e3:19:1a:44:7e:be:6c:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:EA:66:3B:D5:66:02:04:FE:74:0A:42:2E:F1:D6:62:F6:F2:92
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d1:95:38:6c:50:11:19:8b:7d:67:f9:bc:83:44:40:88:13:
04:5e:02:7d:c2:41:e8:1b:7b:19:ca:82:93:81:2b:e2:95:e3:
d5:79:f8:2f:d0:61:60:94:a2:05:1a:b5:21:3b:3f:27:db:7c:
f4:7c:7c:5e:21:82:3f:f3:3c:80:b1:ab:1a:7d:11:f3:10:31:
79:58:6f:36:9d:15:99:f7:de:ba:01:a0:60:17:fa:24:ce:f9:
6f:5e:f9:20:51:50:c9:fb:79:f4:7f:3d:aa:86:96:22:dd:76:
43:97:d8:9f:89:52:f0:dc:3b:0f:7d:52:7b:1f:73:69:da:05:
34:46:62:d5:c9:28:5d:bd:ad:b7:f9:da:a5:b3:0d:fb:0e:47:
dd:41:5f:4c:a0:91:ca:0c:45:ed:84:be:e6:cf:dd:62:28:35:
73:4b:a5:4c:21:0c:ac:c0:ff:2d:30:c6:54:0e:58:64:ae:8e:
fb:fc:af:81:65:b7:bd:68:5b:82:c5:9a:e7:ec:88:48:e4:79:
3b:90:39:d3:dd:3d:8d:ee:5f:f7:91:7a:9a:bf:23:44:fc:0c:
35:e8:2f:18:43:c9:81:dc:e4:3a:da:44:a0:da:e0:7b:dd:9d:
7c:dc:ad:5d:6e:38:6d:08:7a:71:4c:4e:77:40:da:c7:b8:58:
06:75:4e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:02 2026 by rpki-client