Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: qYehw6ztCtybuX39sbwTtxYTaUl2e/DEPR72jjJyNq4=
Subject key identifier: CD:63:38:4D:98:AB:18:1A:93:D2:EF:DB:64:6E:9C:18:3C:90:85:B3
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01A08BD5DC7279770AE10EABBF019A632A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 11B6
Signing time: Thu 10 Sep 2026 15:00:43 +0000
Manifest this update: Thu 10 Sep 2026 15:00:43 +0000
Manifest next update: Fri 11 Sep 2026 15:00:43 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: YDruGycPnUwtgcafKQDZOMdF5QXpFt6W0FR52UD+icA=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:dc:72:79:77:0a:e1:0e:ab:bf:01:9a:63:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Sep 10 15:00:43 2026 GMT
Not After : Sep 11 15:00:43 2026 GMT
Subject: CN=cd63384d98ab181a93d2efdb646e9c183c9085b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:92:93:3a:87:e0:d4:f2:3f:00:5a:be:3c:
c6:cb:75:c7:5f:7f:0a:56:87:fd:68:d0:65:61:b7:
47:d7:c9:99:0d:9d:3a:d0:1b:62:d2:11:70:56:4f:
ad:09:28:6f:5e:01:1c:c8:1a:0c:54:6b:58:8d:61:
bd:e8:37:c2:09:66:fa:dc:05:67:2b:25:9b:ef:ee:
c3:3b:11:16:c4:c2:c0:3a:6a:f5:72:54:ac:15:0a:
e5:de:e9:b8:94:1c:ef:8a:60:d2:8b:7c:1d:fb:bf:
17:9c:67:60:97:62:c6:65:a8:9a:8c:a0:ff:7f:04:
e4:33:d3:b0:cf:73:c6:9a:a4:39:72:8b:bf:e8:2a:
54:8d:a2:b4:0a:9f:b8:c5:45:09:cd:73:26:5d:0b:
5c:bc:9a:3f:4a:fa:d9:ce:68:db:59:a7:f2:0f:14:
e8:1b:64:93:fd:93:c8:a0:76:b7:01:fe:28:04:cc:
42:5c:41:5e:09:ab:20:e0:e5:27:01:8d:3d:22:00:
d5:91:c0:01:5d:a1:3c:7b:29:b6:3a:32:15:17:25:
40:47:3c:e0:9e:8a:a2:b9:72:7f:eb:9a:0d:7b:ae:
1f:47:e5:52:f1:2b:d5:a8:61:b0:96:40:03:ad:cf:
40:32:d2:6b:32:ca:71:93:ba:03:96:76:f1:a8:60:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:38:4D:98:AB:18:1A:93:D2:EF:DB:64:6E:9C:18:3C:90:85:B3
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:fd:a5:ee:4d:8f:13:49:ee:1c:02:e6:ef:33:5f:62:0e:
77:bd:65:e3:86:60:66:ed:34:2e:ca:cc:a2:27:f1:56:7f:6a:
5c:ec:da:26:e1:9d:22:2a:c8:46:e5:e0:f5:4e:94:20:9d:2e:
35:19:c0:b4:c2:49:00:f6:73:aa:30:34:09:85:af:0b:c6:cf:
44:d7:6a:92:b2:bc:90:64:d9:7f:a6:53:6f:37:c7:3b:8f:48:
58:dc:1a:19:50:29:4f:33:d1:6f:06:68:a6:a2:83:42:ba:37:
62:a3:2b:8a:13:3c:8b:f3:28:3f:a0:b7:3e:c7:72:b0:d0:86:
2e:32:c3:c9:e1:26:24:e0:46:75:a8:ec:5e:c1:fa:f2:fa:ba:
ab:a8:00:c6:e5:94:8d:1b:a1:74:de:87:1c:e9:98:b8:c1:fd:
a7:46:56:81:40:59:96:62:82:9f:ae:0b:b9:bc:89:d0:79:2c:
0b:aa:24:d2:49:e7:22:46:18:ed:c1:1b:6d:5a:82:15:cf:0b:
22:ab:0e:aa:5b:ff:6f:ec:ba:12:38:5a:83:c1:92:26:57:67:
8e:81:81:74:5f:99:7d:43:56:16:a2:d7:e5:e6:79:bb:12:35:
db:37:72:f4:c5:1b:6f:1b:c8:9d:4d:e6:d0:f9:67:1f:22:30:
7a:83:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:23 2026 by rpki-client