
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: vRGU8IiFKqIXgbIUDSv2vuREgxF3jSdchCGyLo7CKHs=
Subject key identifier: 51:E9:C3:E8:A7:0F:13:CE:9A:B5:4A:34:A4:3D:D8:84:47:32:27:D1
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 01A13E95218679B364D42C2E348A9B3F88B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 1249
Signing time: Thu 15 Oct 2026 08:02:03 +0000
Manifest this update: Thu 15 Oct 2026 08:02:03 +0000
Manifest next update: Fri 16 Oct 2026 08:02:03 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: Kk34LgwnWXFdpZI+17MiEWkh2KejQypNaa4tBqfZYaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:21:86:79:b3:64:d4:2c:2e:34:8a:9b:3f:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Oct 15 08:02:03 2026 GMT
Not After : Oct 16 08:02:03 2026 GMT
Subject: CN=51e9c3e8a70f13ce9ab54a34a43dd884473227d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:55:03:15:06:3a:56:b1:5b:41:54:f6:56:
3f:05:03:7f:d5:20:9f:c5:85:4a:0e:4a:86:42:0b:
15:f2:2e:e7:75:e4:90:3e:15:79:17:39:fe:1a:fd:
5a:e6:1f:a7:21:bc:e6:82:29:59:9a:d0:1f:14:3f:
5d:2e:74:17:98:a3:bb:b5:62:f1:c5:86:21:7d:46:
b7:68:40:f9:02:ee:fa:83:0a:42:6c:0f:71:1b:52:
c6:3e:14:ba:24:04:64:79:cb:db:4e:1a:f3:6b:9f:
8f:f9:fd:a6:7e:97:69:44:b2:a0:68:cb:6e:58:6b:
90:56:3e:e1:19:f1:f7:2f:8c:ad:b8:a7:11:95:a9:
7e:56:e9:00:c3:1f:db:31:d3:15:10:85:3e:29:39:
d1:6a:6b:71:80:4b:21:5e:0d:62:8c:a1:b2:db:2b:
df:9d:cb:d0:5c:f5:75:3f:95:9a:02:b9:34:a7:cf:
d9:b9:6a:cc:5f:4d:d7:a9:15:9e:9a:41:0e:b2:61:
31:12:bf:2a:98:8e:97:96:ec:f6:a6:e1:a2:0b:13:
a1:59:00:61:4d:b4:25:22:a2:f1:94:26:92:66:98:
76:8e:08:3b:c6:01:fe:a1:51:24:5f:da:79:b8:55:
85:f4:f7:20:18:79:04:a3:f1:cd:a5:68:7d:27:5c:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:C3:E8:A7:0F:13:CE:9A:B5:4A:34:A4:3D:D8:84:47:32:27:D1
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:4a:ac:4e:89:72:b1:e1:86:32:1f:ee:be:39:77:25:77:
4a:56:e2:f2:9b:6f:75:5d:67:89:ea:42:d0:ed:28:0a:b7:1c:
b0:61:0b:d9:0c:90:e9:44:6e:d9:c6:48:18:3a:e6:8a:cb:c8:
3c:29:c5:c6:ed:79:3f:2c:53:bf:ab:55:d4:be:6c:79:70:bd:
c8:1a:5d:e8:af:3b:31:76:b0:cf:b1:ac:7f:da:ef:4f:fb:38:
36:53:ac:cd:28:ac:a4:ca:9c:7a:82:0d:9b:b6:95:b9:0a:6f:
ef:7d:46:ac:80:17:ca:13:87:8d:b8:dc:a9:8c:74:ec:ed:58:
ed:83:76:b9:e9:b3:f4:47:f8:ba:c0:21:2b:8e:e2:a6:b4:92:
17:68:e0:91:f5:f4:f9:85:31:65:04:d4:62:63:b9:93:d0:7c:
a3:e3:b4:55:84:c0:3a:00:09:c6:ab:8a:74:5d:64:49:4b:5c:
f7:c7:eb:96:b0:32:24:41:85:d2:44:61:4f:ab:72:3c:02:b0:
d4:c2:fc:d4:db:2c:40:ba:01:e7:cc:ea:ad:09:61:e6:45:08:
b0:00:1d:11:5a:a9:e0:ac:c8:e3:fb:d6:8f:3a:f9:6c:0d:76:
2e:12:a8:4c:e0:76:51:7e:b6:80:22:e0:57:2d:27:0b:2f:70:
d3:ed:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:11 2026 by rpki-client