
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: 5myhp1JP4tdqsIfPN9/ZkWwSrxKJhsxbGDbejIu8jjM=
Subject key identifier: DC:C9:80:25:92:63:F6:39:F1:6A:B2:0E:C3:2E:F2:BA:B4:B0:A3:8F
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 01A08AC33941260E578FF3C4A07CB445C458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 17FB
Signing time: Thu 10 Sep 2026 10:00:44 +0000
Manifest this update: Thu 10 Sep 2026 10:00:44 +0000
Manifest next update: Fri 11 Sep 2026 10:00:44 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: YDtwJSILBBnnKgyU7oUE6/N/iEWlpzELUdM86clX7Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:39:41:26:0e:57:8f:f3:c4:a0:7c:b4:45:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Sep 10 10:00:44 2026 GMT
Not After : Sep 11 10:00:44 2026 GMT
Subject: CN=dcc980259263f639f16ab20ec32ef2bab4b0a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:1a:d4:ea:ce:e6:f8:00:da:9d:e6:f4:a0:
5b:43:b2:7f:97:09:f6:1c:09:81:5e:3f:df:d6:d6:
d2:51:97:bc:99:92:20:87:9e:82:9c:13:02:b2:dc:
07:a7:36:bd:6e:d7:fd:a3:f8:b6:10:7c:74:8a:43:
7f:93:65:47:0c:bc:e7:58:42:35:85:91:3a:fa:9b:
64:ce:0f:c0:dc:bf:ca:0b:a4:e1:8f:52:07:8b:1a:
66:f3:bb:db:7d:7b:50:8d:19:30:cc:61:83:3b:55:
6c:4c:51:40:2d:f7:a0:af:8b:0a:ca:f7:00:1b:ce:
67:00:6f:e9:58:15:58:df:05:45:31:2e:72:e8:97:
2c:ab:ec:74:1f:af:96:0c:6f:1c:0b:c1:a3:22:4f:
d0:01:f7:d5:4c:20:ea:a9:fc:62:48:82:01:0b:a4:
65:d1:c3:d6:05:05:89:f8:36:13:a9:a7:25:c2:19:
e7:52:5b:10:c1:65:64:a5:8a:73:63:4b:9f:a5:e9:
e3:04:50:04:42:49:ca:05:0c:ce:95:83:00:38:8d:
4a:9a:fa:30:32:c7:b3:22:cb:92:0c:9e:b1:94:89:
d2:34:75:b8:92:53:da:88:cd:66:2b:58:52:be:19:
85:ae:c8:8e:ef:b5:31:14:67:46:b3:44:d5:d2:9a:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:80:25:92:63:F6:39:F1:6A:B2:0E:C3:2E:F2:BA:B4:B0:A3:8F
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:6d:87:39:f6:87:00:ad:aa:bd:8c:8a:17:37:c0:44:ee:
cf:b1:6f:54:6c:3e:ae:95:e1:12:da:6d:d7:dc:ea:80:d3:e6:
fc:7a:8c:e1:77:b2:da:d0:ed:d1:f7:fa:e7:21:a3:69:6b:35:
03:76:fa:75:25:aa:59:f7:3e:79:cc:d2:24:75:5c:d0:54:e8:
f9:da:18:6d:d1:58:a7:e2:d4:75:5e:a4:6f:3c:48:08:ff:af:
da:a4:f3:91:46:00:1c:b0:76:f0:1e:d4:9d:84:f5:87:c0:6a:
62:1a:57:0b:ab:31:d7:b5:b6:86:a0:6c:e7:4f:74:af:ea:40:
f6:b5:92:17:a2:5b:ae:ba:e8:ae:c2:d7:cd:fb:ab:3c:44:87:
48:05:54:3a:80:71:87:fd:ca:eb:ca:6b:42:df:74:3f:8e:93:
f3:80:1c:65:86:33:46:2e:d2:01:d8:49:cd:4d:4e:15:92:86:
9b:b3:8f:29:11:48:89:dc:47:67:5b:52:d9:a8:41:c7:ba:7a:
f7:75:1d:ee:ff:51:82:71:51:e2:11:65:33:7a:56:3c:ee:99:
b1:05:9e:6e:e4:5a:15:d1:ed:a4:b1:e4:ce:de:4e:fb:f7:a1:
d7:0d:b0:0e:ac:c9:57:4c:3b:d3:22:d3:57:44:81:42:29:8c:
cf:0f:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:00 2026 by rpki-client