Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
File: 8ZJhuvRuQzbW8EWjgwKAehURTyg.mft (raw, json)
Hash identifier: j/eH8SG995/rboc2ndHkRaRtq3CsgilosDWrO8gA8I4=
Subject key identifier: 35:03:E2:E4:CE:80:2C:35:E3:78:F0:76:50:13:01:B5:DD:CC:04:3C
Authority key identifier: F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
Certificate issuer: /CN=f19261baf46e4336d6f045a38302807a15114f28
Certificate serial: 01A134EBE90857FB318BDDFB4C124EA7CD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
Manifest number: 011A
Signing time: Tue 13 Oct 2026 11:00:38 +0000
Manifest this update: Tue 13 Oct 2026 11:00:38 +0000
Manifest next update: Wed 14 Oct 2026 11:00:38 +0000
Files and hashes: 1: 8ZJhuvRuQzbW8EWjgwKAehURTyg.crl (hash: DzGnzjMeMOiYbp3fGVAW9e6M+mhxuxQabvstB/jBz+0=)
2: AwjHZOUDzV2do1pKjQJTigNmWvY.asa (hash: AVjOvrWcyb3LLZ1yPyNBczaWWyURv9WbV2eyywQTRm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:e9:08:57:fb:31:8b:dd:fb:4c:12:4e:a7:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19261baf46e4336d6f045a38302807a15114f28
Validity
Not Before: Oct 13 11:00:38 2026 GMT
Not After : Oct 14 11:00:38 2026 GMT
Subject: CN=3503e2e4ce802c35e378f076501301b5ddcc043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:17:7b:29:cd:6c:66:b4:0d:e7:3b:af:93:
e9:3e:46:df:23:b5:f6:16:89:ee:e2:2e:ef:ea:74:
9c:f1:c2:36:38:c6:b1:3f:ec:b8:36:37:7b:22:ba:
38:02:1c:86:86:bc:f2:1c:3c:3d:af:37:36:14:cb:
f4:c1:de:02:85:d9:90:29:6a:d1:7a:ce:65:4b:f6:
17:b9:a1:72:89:ec:74:e6:f9:30:47:f5:3a:74:cd:
5b:e7:81:f6:e2:81:ae:a9:79:b1:6f:7c:25:b1:14:
a1:79:7e:ce:6f:89:8b:ec:75:02:30:d6:dc:57:88:
72:c2:bf:c4:3b:b4:15:18:15:e1:78:ea:b5:c0:b1:
86:9f:50:84:43:f7:ad:f2:76:be:8a:d7:f8:85:ac:
2b:22:20:d9:d5:1d:25:04:a1:e4:2c:ed:d6:be:c1:
a7:58:b0:5a:9f:02:a9:07:6b:eb:4d:ce:31:4e:c7:
9f:4f:ff:15:0e:13:b7:fe:9d:b0:e5:0e:85:ec:95:
8f:80:20:4b:1e:a8:a3:63:5d:46:36:8d:a5:18:c9:
2f:49:b8:19:94:12:fa:81:3d:e9:8b:2e:1e:b7:f8:
db:54:73:9a:70:07:ba:92:96:b8:3c:61:06:d5:d1:
88:f6:96:42:e8:32:d6:c3:d6:b7:2d:83:74:e7:7b:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:E2:E4:CE:80:2C:35:E3:78:F0:76:50:13:01:B5:DD:CC:04:3C
X509v3 Authority Key Identifier:
keyid:F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:76:22:8e:c0:8f:3e:f8:cc:66:fd:29:cb:b3:7f:be:f6:
64:8b:ae:b3:3a:b9:3f:fb:23:91:32:ef:70:94:18:ad:bb:34:
e9:5f:1e:a9:bd:c9:90:1e:cd:3d:b3:9d:83:84:43:df:0d:5b:
99:94:9e:7e:92:d6:63:bb:7c:cb:19:94:a3:53:5c:44:39:0c:
ce:31:3c:c5:53:cd:63:86:2e:6a:96:d4:c4:36:dc:eb:b6:bf:
d8:01:b2:49:45:0b:52:ff:cc:94:ea:eb:82:85:29:8b:bc:ff:
79:e5:57:67:8f:bb:b5:2f:37:ae:64:a4:7c:99:33:c6:4f:62:
c9:26:54:07:fc:8a:10:82:1a:ca:4b:57:a8:38:bf:13:af:9c:
7f:ae:51:b4:9f:b9:be:f8:f1:a4:da:7d:c2:e1:40:d1:d4:04:
5d:3e:ef:54:4d:82:2d:5f:48:de:8f:4a:a4:e1:aa:24:1f:81:
af:95:02:ba:9e:59:ec:b0:08:01:60:62:d5:b1:79:71:67:41:
fa:5a:c0:b9:1c:22:ce:81:44:f5:83:30:67:d6:f8:9e:3d:67:
08:c2:06:00:a3:f4:55:9e:c0:1d:0b:57:ee:ae:f7:db:8e:32:
a6:29:73:ef:13:e1:f1:2b:1b:47:ef:1d:0a:a4:8c:77:d1:93:
5d:b4:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:51:21 2026 by rpki-client