Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
File: 91anOU_9JyHWClrS6Saj0OHIu3k.mft (raw, json)
Hash identifier: N72VzWAulqTkq3uEluNY6TzendRWYBKofUZjwS/+Xf0=
Subject key identifier: C3:3A:ED:02:2F:87:E9:BB:73:8D:54:1D:A5:23:C3:C7:1D:44:20:74
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Certificate issuer: /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial: 01A0B6F7153F579D033EF1B4DE989F35DA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:00:41 +0000
Manifest this update: Sat 19 Sep 2026 00:00:41 +0000
Manifest next update: Sun 20 Sep 2026 00:00:41 +0000
Files and hashes: 1: 91anOU_9JyHWClrS6Saj0OHIu3k.crl (hash: i00jUMC6jMEi/C1zwHfMsksoRVKAbKmO69OVNdYzN9w=)
2: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (hash: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:15:3f:57:9d:03:3e:f1:b4:de:98:9f:35:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Validity
Not Before: Sep 19 00:00:41 2026 GMT
Not After : Sep 20 00:00:41 2026 GMT
Subject: CN=c33aed022f87e9bb738d541da523c3c71d442074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:90:bc:68:79:12:5d:9f:45:80:45:d2:52:
e5:51:51:21:bc:b2:20:40:51:22:26:e7:47:31:4a:
5b:c3:7c:f9:b9:ec:f7:80:3c:ad:bd:d6:4b:65:a8:
f9:3b:dd:e4:a8:f7:8d:cc:b6:37:37:d0:36:26:43:
a3:6c:18:f4:7e:0c:3f:18:9d:84:42:fc:90:3e:23:
4b:80:10:d3:18:03:3e:62:75:15:05:95:5c:e8:04:
45:88:08:ed:80:fa:18:08:66:c7:ba:de:2b:31:f4:
8b:5a:4b:77:9c:11:b8:42:0d:fe:b1:15:84:b9:7a:
45:66:7c:74:aa:d3:2e:62:52:3c:be:ae:15:6f:0d:
fe:36:0e:5e:ff:15:b8:88:84:f3:8d:75:c3:57:ee:
50:33:ff:da:4d:6c:5d:6f:80:59:67:11:00:38:95:
d3:9b:23:c6:26:82:21:0a:8d:77:95:2c:23:35:d0:
36:bb:2e:e9:a8:e4:fc:34:99:92:59:8d:fa:e3:0a:
75:d4:b5:a3:14:27:bd:dd:51:db:fa:e9:01:da:fc:
e0:6d:74:f1:9a:8c:98:41:19:d6:0e:5c:5a:5b:c9:
c1:ed:1e:70:e3:6f:fd:4c:80:85:aa:6d:f1:48:b9:
0f:fc:c7:c4:19:aa:8c:6b:70:49:f4:e1:e8:ff:a9:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:ED:02:2F:87:E9:BB:73:8D:54:1D:A5:23:C3:C7:1D:44:20:74
X509v3 Authority Key Identifier:
keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e8:cd:fc:b2:22:79:5b:d2:76:86:ac:26:fa:88:0d:72:c9:
ad:22:c1:ce:a7:96:80:43:bd:23:9e:52:af:f6:26:58:bc:2e:
ee:51:90:b4:a6:ab:25:4e:36:89:60:a2:84:45:33:9e:39:26:
67:eb:b9:45:75:88:4e:9f:06:03:7e:ed:40:26:1d:ed:c8:64:
70:3c:3e:a3:5f:cd:d4:de:28:d4:fb:b3:b1:cf:5a:6c:6b:33:
56:37:ed:56:1e:04:13:c9:d3:7a:19:41:2c:6f:90:17:52:1a:
ad:5f:47:0f:f8:4f:85:61:48:9e:59:3f:c7:6c:1a:7f:fa:12:
3b:74:17:d0:0a:21:ba:19:57:7e:6d:f7:81:fd:09:c1:10:83:
cf:74:47:dd:a2:f2:16:f2:bb:d9:ec:79:51:ee:d0:a6:18:02:
e0:76:8b:1e:21:8c:a5:6f:38:33:c1:6d:11:b5:58:aa:eb:d9:
48:4d:06:a6:5b:17:57:64:c5:78:76:46:be:92:e2:0e:d3:82:
35:b9:43:b9:d8:5f:81:73:82:26:88:1d:96:fc:0b:72:a9:e0:
a0:f1:94:97:db:35:f9:67:fe:eb:47:48:17:aa:6f:28:bf:48:
fa:1a:7b:bb:a6:f8:17:0e:10:5f:ed:16:55:a7:6d:67:52:ac:
4a:c3:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:34:18 2026 by rpki-client