Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: gzwZtO+cjOrowzM0ap1kgZvGirm8q+zGL4aH5lCnbQ4=
Subject key identifier: C1:47:47:03:0C:A9:0D:0E:A9:19:E2:2E:41:0D:5A:54:82:15:FA:91
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 01A094D969C4A8DDE3AAD926855AE80BFFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 09CC
Signing time: Sat 12 Sep 2026 09:01:11 +0000
Manifest this update: Sat 12 Sep 2026 09:01:11 +0000
Manifest next update: Sun 13 Sep 2026 09:01:11 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: 9d+lRpBKU7Dv8Z0mciOeI0YHA2RG24N0mi57WHli0DI=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:d9:69:c4:a8:dd:e3:aa:d9:26:85:5a:e8:0b:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Sep 12 09:01:11 2026 GMT
Not After : Sep 13 09:01:11 2026 GMT
Subject: CN=c14747030ca90d0ea919e22e410d5a548215fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:5e:ab:e7:fa:cc:5e:65:ff:bf:d3:ac:5d:
d4:5c:51:aa:c0:38:99:f5:29:9f:ad:90:e2:a2:cd:
51:cc:c8:dc:86:e2:89:75:b3:b8:8d:6a:b8:f8:bc:
af:41:ad:7d:0c:0b:29:6a:ec:c7:43:38:73:48:89:
3f:20:29:55:2a:57:2e:0d:c7:92:81:9d:f6:d6:69:
c2:93:6b:a7:61:ba:e2:63:cc:a4:79:ba:32:b6:75:
c0:54:d6:c6:0b:70:7b:55:be:d1:ca:f2:d7:01:3d:
61:56:99:ae:f9:02:73:98:f9:68:16:32:c2:b9:06:
1f:60:d4:65:e9:9e:29:e5:3d:78:39:68:32:c7:a4:
4d:13:65:96:48:19:56:ae:37:af:f0:95:6e:a9:0c:
db:27:9a:33:f4:15:5b:21:a5:2a:90:e5:35:6d:b5:
25:5a:d2:8d:53:1b:39:da:eb:32:23:d8:31:cd:10:
72:91:94:c2:a9:69:91:eb:29:1c:72:d9:0a:e8:04:
49:ee:98:74:9a:56:d5:61:a9:a6:71:2d:f2:c9:28:
ca:96:8e:f4:b7:77:8d:d0:21:91:ba:b3:02:e7:dc:
a6:4f:c5:a4:bf:e2:98:61:d4:09:9b:8a:33:17:c2:
3e:7b:f5:5a:7d:2f:f4:c8:71:24:bf:57:1e:f5:a2:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:47:03:0C:A9:0D:0E:A9:19:E2:2E:41:0D:5A:54:82:15:FA:91
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9b:37:b6:95:19:41:dc:88:4e:e0:7e:c2:0b:9c:2a:f1:16:
11:56:6c:37:7a:dc:85:de:35:c6:9d:d5:a2:36:14:33:cf:f8:
dc:62:00:e1:5b:03:3c:39:37:d2:8e:d3:87:0b:a0:f1:55:2f:
55:96:c0:ae:0b:14:3a:bc:42:4d:c4:77:3a:bc:8f:87:28:6e:
42:41:6e:4a:fa:7f:b3:78:1d:3f:81:59:b9:60:82:9c:5f:de:
74:82:10:35:57:2d:1e:bd:04:94:2b:c2:8a:97:3d:84:89:59:
62:38:d2:55:ca:cb:50:20:16:d1:2e:62:f4:6c:dd:d8:6b:28:
68:91:c6:d8:eb:ea:dc:da:86:2a:55:a1:18:ad:6b:bb:99:d7:
8b:a0:72:0b:17:86:96:c8:16:ad:ee:22:1a:0a:d8:16:4b:6c:
49:9f:83:1a:92:da:cc:e1:88:e8:a5:2d:db:87:c0:70:73:79:
8f:5d:9e:26:28:99:ad:24:e0:db:76:50:87:91:a9:d7:97:da:
9f:b7:7e:d0:b7:16:ad:8a:27:6c:fe:3b:6c:11:7e:1d:94:9c:
b7:cd:7e:ee:b3:b7:ea:df:eb:31:13:ab:8a:53:42:14:0f:91:
67:dd:1c:6f:29:d3:19:55:c4:4b:50:8f:63:9f:ec:7c:5e:86:
56:93:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:38:16 2026 by rpki-client