Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: qL79dE3Q0GjIx16S2YnkCNIRsvFdHetDuXMnvM2AQTY=
Subject key identifier: 5A:78:56:88:F2:81:6B:EE:83:39:66:98:E8:92:9D:A4:B0:0C:51:EB
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 01A0C7EAC3AABD8B571D18C1A5874B2B4AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0C67
Signing time: Tue 22 Sep 2026 07:00:46 +0000
Manifest this update: Tue 22 Sep 2026 07:00:46 +0000
Manifest next update: Wed 23 Sep 2026 07:00:46 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: PRkKLgNpznjXu+BP9P1DKqFkrITeevjePL+mGrrAoKw=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c3:aa:bd:8b:57:1d:18:c1:a5:87:4b:2b:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Sep 22 07:00:46 2026 GMT
Not After : Sep 23 07:00:46 2026 GMT
Subject: CN=5a785688f2816bee83396698e8929da4b00c51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:56:23:b5:4f:c4:41:fe:5d:81:47:8b:7e:
cc:1a:cb:98:35:c3:80:c0:c9:cf:ee:5d:2f:88:89:
1c:bd:87:6a:ec:8d:11:80:ae:5b:0a:b5:bf:2b:ac:
cd:ce:c7:73:c3:b6:14:f7:df:70:f5:66:34:61:67:
d5:5b:92:11:60:16:aa:55:7b:17:8e:23:48:3e:1b:
9d:66:7c:07:08:10:b7:f9:0c:7d:fa:03:f3:0f:41:
99:a0:d8:54:80:ff:24:7d:8f:80:32:41:be:95:e2:
c8:de:f4:01:ff:78:2a:29:99:8e:88:8c:b7:91:a7:
46:36:80:20:cc:37:4b:b2:03:21:bc:7d:5a:bd:9f:
41:60:59:31:77:40:ef:c5:27:57:7b:9a:58:36:bc:
a6:e9:04:58:97:f7:18:86:7a:ab:36:29:eb:22:e4:
17:98:0a:c0:47:13:5f:8f:fb:bc:b1:85:1e:e9:42:
87:3e:7d:43:e6:f7:aa:62:02:70:86:45:a8:d8:f4:
60:fa:6f:1f:1b:83:c4:4f:8a:69:51:5f:22:98:17:
8b:1d:f6:68:2c:c4:fe:ca:04:f4:08:df:8c:f9:b8:
ac:95:80:12:e1:5e:60:61:5b:cf:07:b2:09:41:f5:
b8:52:9e:d4:36:6b:ad:cc:40:fd:d7:cf:65:2e:62:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:56:88:F2:81:6B:EE:83:39:66:98:E8:92:9D:A4:B0:0C:51:EB
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:39:93:78:de:c7:16:c1:17:29:cb:2d:cd:68:be:b5:56:24:
8d:db:b2:ca:75:60:0d:57:fa:d2:ba:2c:44:37:aa:64:1e:63:
c9:65:7a:b8:b2:d5:da:95:ed:2e:87:05:ef:4c:6a:b3:0e:5d:
01:85:cb:c7:27:8a:ce:31:61:92:12:5d:56:d5:e3:c4:e6:f7:
90:9b:4d:b0:23:e7:36:a3:49:b9:b1:54:56:4f:77:4b:0c:1d:
15:89:74:04:64:00:2e:1d:64:2c:09:f0:56:ad:92:56:9e:b6:
79:df:2f:d9:b9:03:5f:2a:23:27:95:81:6d:c2:8f:c6:1c:8e:
46:ea:df:5c:a2:2c:e8:b1:40:c7:b4:85:85:f4:b9:b6:b4:45:
ca:0e:e9:e9:cd:07:1f:42:7f:a1:99:77:4d:d2:c8:d8:27:1d:
8e:36:13:09:93:1b:22:df:00:52:34:1e:b3:b9:0d:c8:ee:f6:
02:2c:f8:e9:75:11:be:40:dd:9a:0f:1a:69:42:a6:cd:74:15:
28:ed:3a:2a:66:65:d6:9f:d5:8e:95:21:30:5d:ad:cb:20:31:
25:d9:87:3d:e7:bb:d8:2e:f1:4a:0f:b3:df:a2:32:aa:de:bb:
dc:a9:e3:ae:11:37:96:d8:02:34:a0:df:ca:f6:16:28:85:cb:
33:84:e5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6sOqvYtXHRjBpYdLK0r7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi
YTcwZDUwHhcNMjYwOTIyMDcwMDQ2WhcNMjYwOTIzMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg1YTc4NTY4OGYyODE2YmVlODMzOTY2OThlODkyOWRhNGIwMGM1MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk1WI7VPxEH+XYFHi37MGsuYNcOA
wMnP7l0viIkcvYdq7I0RgK5bCrW/K6zNzsdzw7YU999w9WY0YWfVW5IRYBaqVXsX
jiNIPhudZnwHCBC3+Qx9+gPzD0GZoNhUgP8kfY+AMkG+leLI3vQB/3gqKZmOiIy3
kadGNoAgzDdLsgMhvH1avZ9BYFkxd0DvxSdXe5pYNrym6QRYl/cYhnqrNinrIuQX
mArARxNfj/u8sYUe6UKHPn1D5veqYgJwhkWo2PRg+m8fG4PET4ppUV8imBeLHfZo
LMT+ygT0CN+M+bislYAS4V5gYVvPB7IJQfW4Up7UNmutzED9189lLmKnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp4VojygWvugzlmmOiSnaSwDFHrMB8GA1UdIwQY
MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt
MmYwODM4MGFlNmM3LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3
LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDmTeN7H
FsEXKcstzWi+tVYkjduyynVgDVf60rosRDeqZB5jyWV6uLLV2pXtLocF70xqsw5d
AYXLxyeKzjFhkhJdVtXjxOb3kJtNsCPnNqNJubFUVk93SwwdFYl0BGQALh1kLAnw
Vq2SVp62ed8v2bkDXyojJ5WBbcKPxhyORurfXKIs6LFAx7SFhfS5trRFyg7p6c0H
H0J/oZl3TdLI2CcdjjYTCZMbIt8AUjQes7kNyO72Aiz46XURvkDdmg8aaUKmzXQV
KO06KmZl1p/VjpUhMF2tyyAxJdmHPee72C7xSg+z36Iyqt673KnjrhE3ltgCNKDf
yvYWKIXLM4TlIA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:57:51 2026 by rpki-client