Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: mOXc5p/2gwbxn3OaXMqqIqYuAF/x/Nxui7WCECTGotk=
Subject key identifier: DC:D0:25:BC:F4:1E:58:FE:1A:89:57:19:B9:2F:E8:32:D8:BD:9A:87
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 01A0C10CC71AC73534A81709FDAD2BE351A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 1A66
Signing time: Sun 20 Sep 2026 23:00:35 +0000
Manifest this update: Sun 20 Sep 2026 23:00:35 +0000
Manifest next update: Mon 21 Sep 2026 23:00:35 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: fU2PT5TWMrtyccqs2AYDP8/1IxoJ4ieYvbaqiXdINyg=)
2: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (hash: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:c7:1a:c7:35:34:a8:17:09:fd:ad:2b:e3:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Sep 20 23:00:35 2026 GMT
Not After : Sep 21 23:00:35 2026 GMT
Subject: CN=dcd025bcf41e58fe1a895719b92fe832d8bd9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:e0:e9:1e:09:ce:68:9a:76:7e:b3:bf:7a:
a7:7c:64:0f:a3:09:1e:00:6e:a2:c2:20:ae:bf:40:
bf:c8:b2:6c:3f:1a:2c:99:2c:76:52:c8:2c:dd:8f:
5d:86:1a:3f:2c:44:dd:05:f7:c8:b6:1a:d8:81:d2:
91:de:fe:b6:05:0a:41:fa:8d:5f:c4:92:af:38:b4:
24:21:aa:bf:74:8c:0a:34:a8:fd:6d:67:0c:dc:a9:
1d:3c:b4:71:4b:ab:42:f5:93:ef:fb:60:19:aa:49:
6c:6d:57:53:12:5b:39:0e:e6:e6:90:ec:85:a7:01:
20:3a:e7:d0:f6:83:b7:16:f8:97:13:63:c2:aa:8d:
82:9f:29:de:e3:e5:5c:50:ae:85:0c:c1:ee:f7:08:
b0:7d:36:35:a1:05:d7:83:3b:31:98:31:b4:46:57:
c7:23:5e:29:0e:7a:c1:02:a6:57:07:d6:7b:51:b0:
3f:ed:55:92:84:2c:1e:9e:db:77:3d:10:f2:2e:40:
ef:39:ec:2c:4c:2a:ab:81:1b:f0:e2:b2:32:99:50:
e1:db:5a:46:8f:c0:44:7b:a8:04:3e:52:cc:c7:65:
d7:72:8b:0b:82:1c:86:93:e8:02:8a:8e:87:07:7f:
d4:08:ea:7f:4e:58:46:25:d9:d8:52:a4:67:84:f2:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:25:BC:F4:1E:58:FE:1A:89:57:19:B9:2F:E8:32:D8:BD:9A:87
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:67:31:52:dd:04:78:7f:db:00:f6:83:d8:9c:ff:80:c9:9b:
bd:3f:66:5e:11:dd:47:0e:16:1c:a0:63:24:0f:ed:9d:01:6f:
2c:f8:cd:e7:10:22:5b:d0:9d:a5:ed:bb:51:03:a3:14:ca:8e:
8e:da:59:b4:bb:4a:6b:b2:90:e9:b8:8b:9a:f7:de:46:3a:47:
f4:f1:29:24:3f:91:68:a0:bc:09:10:33:df:2c:c4:bb:8a:a9:
9e:5b:2f:49:23:a3:c8:33:86:22:b8:8b:ee:fb:c4:90:74:29:
f2:a1:08:aa:9c:fd:3b:f7:7d:db:cc:23:86:d6:99:e7:2d:07:
37:f7:fa:1b:4a:fb:cd:21:66:41:a2:64:b9:cf:9b:74:20:95:
6e:f6:98:13:0f:15:00:14:27:4c:2d:71:49:4b:42:06:7d:d8:
2d:5e:ae:99:ae:aa:9c:d7:48:4e:e3:b9:4e:33:b4:68:39:ff:
ff:f7:09:36:b2:42:89:a4:11:75:2a:64:70:8a:fa:30:a8:44:
b2:0c:9e:c0:79:b6:3a:15:7b:98:cc:53:40:2d:83:ba:dd:74:
8e:a3:72:26:ff:6e:90:fd:4d:28:44:34:9e:de:e6:1e:f3:dd:
94:1d:15:bd:d2:3c:78:61:ba:cc:19:e0:33:36:40:43:10:06:
0b:6c:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:57:40 2026 by rpki-client