Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: AeWJ+IFxaXC+SsXmKVP4vLwbi+bcozQmKjPk90cO5vE=
Subject key identifier: 23:6B:B6:CC:61:C4:BD:21:6B:56:52:BD:46:23:36:65:66:07:E3:0F
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 01A0D0119EC80F711AE07D50E955B8FCECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 21:00:10 +0000
Manifest this update: Wed 23 Sep 2026 21:00:10 +0000
Manifest next update: Thu 24 Sep 2026 21:00:10 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: WaIovZoyCAVvXbTBJBQ2f+7SaQyQ4iXkHqsvdrf1v+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:9e:c8:0f:71:1a:e0:7d:50:e9:55:b8:fc:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Sep 23 21:00:10 2026 GMT
Not After : Sep 24 21:00:10 2026 GMT
Subject: CN=236bb6cc61c4bd216b5652bd462336656607e30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:7d:08:0c:58:35:e0:55:b4:94:20:84:2a:
aa:d8:b2:53:85:f8:23:36:db:46:ea:60:b1:b1:52:
1f:bd:46:a1:b1:5f:a0:bd:35:08:af:c0:ee:06:1f:
54:cf:6f:6b:d9:58:29:28:7f:9e:a8:c6:d6:79:80:
02:8e:a5:12:01:46:ab:e0:ce:ef:44:8c:e0:7f:8c:
e2:54:1a:ab:a3:e0:17:11:86:cf:bd:26:5c:c8:33:
de:bb:04:59:f4:a4:df:f6:44:66:5c:2c:5c:ba:5c:
eb:f5:37:27:63:0b:40:23:ef:a6:26:fa:b7:b9:dd:
13:76:14:d2:a8:23:42:61:ca:01:1a:f3:6b:4d:2a:
cd:42:4d:70:d7:aa:f5:07:24:30:1e:d0:1b:b1:57:
7e:57:4c:34:23:0a:06:48:b3:28:f1:3d:01:9e:1a:
0b:0f:7e:77:10:83:f8:9f:4b:bf:bd:8e:cb:3a:31:
f3:54:97:a8:de:bd:fd:ca:65:cd:a0:3f:45:a3:91:
81:3f:b1:8a:a1:3c:f2:58:cb:47:f5:50:1a:c3:83:
5c:f3:51:db:14:ce:29:14:42:26:51:10:c4:31:2f:
26:c8:52:77:4c:4f:fb:a3:59:2e:b1:f8:84:8e:2c:
a1:8f:85:72:d4:87:32:20:a9:f5:c0:41:38:31:02:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6B:B6:CC:61:C4:BD:21:6B:56:52:BD:46:23:36:65:66:07:E3:0F
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:7a:e6:bf:c7:10:a9:56:a7:89:bd:6e:6f:3f:c3:81:6b:
c4:35:6d:a2:23:6d:66:e7:6f:6f:fa:12:c9:a5:a5:1e:7d:34:
2a:00:44:ee:42:14:0e:f3:22:91:5e:39:23:55:96:78:bf:4a:
d9:83:97:72:d2:4c:6b:c9:4e:bf:92:0c:36:92:e5:38:b7:17:
fe:35:92:e8:3d:5d:90:9d:6d:cc:d2:b5:d1:f8:72:b1:f9:0e:
46:fa:1b:99:15:83:0e:0e:6c:3a:58:e9:21:da:14:24:09:71:
75:9a:80:73:b4:5c:a4:55:de:ae:82:c4:4f:45:66:49:2f:42:
27:8d:7e:7c:b8:45:41:dc:fb:15:ff:7d:54:08:e3:88:8c:cf:
e0:bb:ac:5a:79:c7:89:67:72:b3:8f:5e:11:b8:e1:14:0c:63:
ad:fd:d7:b0:16:08:11:d9:ea:1d:db:16:8a:fb:28:a3:3b:47:
7d:00:40:b1:48:9e:25:57:89:e7:07:42:67:b9:39:c5:a9:8f:
1a:ed:23:63:98:0f:2a:76:81:2b:5a:00:5b:07:12:94:a6:a2:
67:fb:c1:f4:7f:a5:10:cb:32:74:0c:4e:c7:5c:a7:c3:18:42:
07:d7:d3:eb:39:9b:0d:61:22:18:bc:d7:b1:ed:5f:d0:d6:d2:
2f:92:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:08:32 2026 by rpki-client