Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
File: 8sunLIc142KREckiq36BRTTV_F0.mft (raw, json)
Hash identifier: dxVXZG4DZ9Vp8Eg9V1SNzEVGkCIeCAlxNIpbT+FDqEo=
Subject key identifier: CC:39:73:0F:6E:C4:2F:54:5D:E5:40:BE:1F:90:FB:BA:7E:50:C0:7B
Authority key identifier: F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
Certificate issuer: /CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Certificate serial: 01A0404E3B496ACC463C59863A2734A96CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:03 +0000
Manifest this update: Wed 26 Aug 2026 23:01:03 +0000
Manifest next update: Thu 27 Aug 2026 23:01:03 +0000
Files and hashes: 1: 8sunLIc142KREckiq36BRTTV_F0.crl (hash: OoMCREdcVoFjZNmUUrfi96lMdxirg/+i1IiaOk0Dyhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:3b:49:6a:cc:46:3c:59:86:3a:27:34:a9:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Validity
Not Before: Aug 26 23:01:03 2026 GMT
Not After : Aug 27 23:01:03 2026 GMT
Subject: CN=cc39730f6ec42f545de540be1f90fbba7e50c07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:96:63:53:68:45:f0:3f:8a:81:86:2a:9f:
65:8e:23:1a:0c:93:18:ec:06:36:05:83:96:3b:b0:
aa:58:89:2e:ae:d1:16:97:61:a7:04:5b:05:37:2e:
3d:93:77:7a:32:0c:aa:c4:b6:4f:37:6a:82:f0:e1:
88:a0:54:bc:46:c3:2f:c9:fa:29:76:9c:00:ce:20:
69:b1:be:c2:fe:57:e5:d3:2d:a8:69:32:ce:28:ef:
c4:0b:1d:57:8d:ef:61:df:91:8f:df:83:cb:82:fd:
ae:66:3e:b2:75:81:55:19:e2:43:eb:8e:a9:34:2b:
46:cf:af:39:04:55:79:32:81:86:e3:5b:8b:bf:9e:
82:b0:7d:c7:90:ca:df:1d:eb:71:cf:7f:be:cc:11:
e4:e4:e5:4b:36:2c:77:f4:ab:99:c3:08:27:40:99:
65:b1:c2:c5:ca:a2:48:ab:c8:15:6c:de:ea:29:e1:
23:19:c1:54:f0:a2:b2:e9:7f:9b:9a:8c:4a:dd:b7:
fd:7e:8a:75:e3:74:35:d8:70:72:2d:bc:17:3b:cc:
d4:ea:68:40:72:c0:d4:7e:21:b2:a5:12:5e:fd:7c:
e7:e1:aa:21:e1:8d:0f:79:50:0a:32:11:23:5a:f1:
39:d8:41:3c:ca:05:7a:f4:6f:a9:f4:72:c3:40:40:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:73:0F:6E:C4:2F:54:5D:E5:40:BE:1F:90:FB:BA:7E:50:C0:7B
X509v3 Authority Key Identifier:
keyid:F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:12:30:f9:f8:66:2e:7f:8c:83:82:5a:9b:a3:a3:75:3a:
c7:3b:34:0e:4d:87:64:c6:f1:8b:14:8c:26:d8:30:42:b9:a9:
c2:3a:cb:8f:b4:aa:6d:19:b2:20:b9:b8:4e:72:8a:ff:d2:a8:
a4:e4:4b:32:df:4e:c4:7c:94:f3:01:98:c3:c2:63:c1:73:4b:
38:ee:3d:eb:ec:a1:25:cf:47:da:2c:09:cd:f2:ec:77:f9:43:
e5:6c:bc:7f:fd:5d:b5:51:5a:4b:7e:19:96:4d:93:a8:b4:4a:
96:b3:f3:66:91:28:b1:2a:09:4e:89:11:49:59:65:a2:ed:c4:
90:75:77:e4:6b:05:e5:61:57:2a:94:35:86:2c:33:34:3c:47:
00:51:ea:4c:74:16:c6:43:67:fc:be:9e:c8:95:11:61:bc:21:
c6:b3:bd:e9:19:80:29:96:1f:c2:14:8d:11:b9:53:15:c4:78:
73:f4:d3:75:c7:13:a8:c0:5d:3a:e5:44:29:98:65:6e:68:78:
ef:10:33:36:7f:47:cf:bb:e0:af:d9:17:14:6a:32:e4:4b:8c:
be:eb:27:1d:70:a2:7c:82:3e:32:74:cb:ed:d1:84:cf:ce:8d:
40:55:7e:54:aa:ec:13:58:e8:aa:0d:9d:ee:2b:86:a4:71:65:
90:90:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:50:40 2026 by rpki-client