Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: P+LhUm5yvlfyj9h8Ry6BPhs8t8buqPgjVx9zP2ywwLg=
Subject key identifier: 02:94:17:D3:FD:EC:77:AC:86:F0:0D:44:2C:3D:E1:61:5C:9D:BB:73
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01A0E5F5ACAD3E8BDC824BFE39B1DE555B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0ED0
Signing time: Mon 28 Sep 2026 03:01:17 +0000
Manifest this update: Mon 28 Sep 2026 03:01:17 +0000
Manifest next update: Tue 29 Sep 2026 03:01:17 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 0laAfM7vSCAmDawBZWaTvKdHk6GKrRXKXglWALzQ4bk=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:ac:ad:3e:8b:dc:82:4b:fe:39:b1:de:55:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Sep 28 03:01:17 2026 GMT
Not After : Sep 29 03:01:17 2026 GMT
Subject: CN=029417d3fdec77ac86f00d442c3de1615c9dbb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:24:99:5c:66:84:ec:c2:ae:bb:1f:cb:f4:
23:ef:74:fa:89:ab:e0:6e:05:7c:4a:10:74:db:04:
5d:d3:04:4c:39:86:b5:cc:44:0d:a4:40:0c:a1:b0:
51:28:c0:c8:89:20:23:59:ee:b0:7b:cd:dc:e0:35:
74:fb:ff:c1:95:d5:c4:62:a3:2e:d5:78:7f:62:06:
d5:38:c0:ef:e2:68:b0:ad:fc:2d:d7:91:95:92:d3:
60:1a:37:a8:28:a3:ed:e5:ec:97:c5:29:b1:57:0c:
69:99:39:15:e9:cb:a7:59:6f:1a:84:c6:db:79:53:
f6:7c:35:99:d0:ea:33:8a:ab:6a:e1:81:d8:56:45:
d7:f9:27:5f:62:08:b6:8a:9d:e8:7c:50:1e:4a:e4:
a8:13:6b:b5:7f:7b:b0:a3:6e:5e:f7:24:29:ec:f2:
ce:18:23:38:b5:ce:c0:40:35:b2:1c:ef:d4:4d:92:
f4:ec:6a:45:c2:63:15:31:86:49:f5:6f:33:7e:b2:
ad:a1:98:cb:c6:4c:30:32:5a:7d:57:d5:24:2b:e6:
bb:19:d3:85:bc:f7:5c:2a:1f:7e:83:9e:ba:6f:ac:
7f:1c:4f:bc:e6:ee:1a:29:59:f8:ab:68:11:46:24:
b3:72:27:2c:6c:4b:32:36:b4:4b:53:93:70:bc:4e:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:17:D3:FD:EC:77:AC:86:F0:0D:44:2C:3D:E1:61:5C:9D:BB:73
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7e:56:11:3c:bf:74:61:7a:38:bc:26:e6:34:af:b2:2e:6e:
28:22:53:66:bb:ca:88:03:91:06:8d:30:88:c8:44:7c:81:8a:
64:0f:56:a1:0f:bc:60:41:ef:77:32:90:00:15:b3:83:81:f8:
7c:d4:1b:57:29:50:a8:2d:62:8e:d9:5a:0b:4d:55:61:f7:2a:
36:0e:30:e5:fb:89:b0:e3:0e:de:fc:73:b8:e6:b8:68:e5:3f:
f0:2f:11:98:89:68:71:6e:40:ac:da:0d:c9:1b:bb:b8:21:c9:
f3:29:e6:a1:76:70:ec:a1:c2:48:cf:fd:34:03:c9:f7:d1:52:
41:a1:1c:ca:3d:3c:8b:74:6c:07:4d:45:5d:75:ca:bc:62:d9:
4d:f6:66:a3:bb:fc:3a:c4:b5:63:61:82:f6:77:57:c4:82:f4:
10:3a:db:39:02:75:25:c4:09:4b:91:03:e8:5a:1d:5e:a0:9c:
7c:76:4e:46:18:e7:6b:94:b2:9d:ef:71:72:92:2a:43:19:6e:
f9:35:95:28:fb:f6:d9:f7:ce:1d:6b:5d:98:03:18:d0:5a:d6:
79:9a:8a:9c:c2:3a:28:47:44:21:95:37:49:ca:67:17:3a:6e:
16:f6:84:41:ec:bb:8e:9b:17:e8:f3:6a:26:f4:45:73:d4:12:
0c:41:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:05:54 2026 by rpki-client