Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: 6ZasmpTeiauxUt1CrQxB6Kitnj+PjgMVwJNESHVE8hM=
Subject key identifier: 17:83:57:4A:AD:0C:86:AB:2D:AA:27:C7:D0:2E:FB:39:00:6E:82:0A
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 01A0C7461A146EBF9D965F976874A4EF6581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 19FB
Signing time: Tue 22 Sep 2026 04:00:55 +0000
Manifest this update: Tue 22 Sep 2026 04:00:55 +0000
Manifest next update: Wed 23 Sep 2026 04:00:55 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: CyfsGXOAmudrmRRT2mokOz0on9ifr8W5lk7PYxvhyeU=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:1a:14:6e:bf:9d:96:5f:97:68:74:a4:ef:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Sep 22 04:00:55 2026 GMT
Not After : Sep 23 04:00:55 2026 GMT
Subject: CN=1783574aad0c86ab2daa27c7d02efb39006e820a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:69:0e:79:04:3f:53:2b:58:72:d5:55:18:
1e:b5:58:1e:98:a3:f6:1e:0e:76:5d:71:6f:37:69:
f1:74:41:6c:ea:38:f6:f5:9b:f8:50:0b:1e:22:2d:
8f:2b:d6:13:ff:a8:d3:c1:65:94:08:d1:54:37:f3:
ba:61:8d:ab:8f:78:74:0a:a5:e7:64:86:13:b4:38:
ef:e5:bd:88:84:39:86:d5:51:30:b7:7b:e6:50:63:
6b:e2:85:6f:3d:d6:93:be:40:eb:1f:cd:99:6d:14:
b7:fe:13:a2:0b:99:2b:7c:0f:f9:e5:7d:73:55:b5:
2e:f7:8d:9c:98:2d:e9:32:e7:9a:09:52:4b:43:dc:
97:d1:2f:fb:fb:a6:bf:22:ee:09:93:48:61:4b:ef:
d1:f3:95:b3:ea:14:cf:e7:b0:51:7b:73:50:c3:4c:
10:3e:37:b4:b8:b0:85:25:92:9a:c7:88:02:02:9d:
4d:72:00:c4:d7:fc:b2:86:c9:61:26:bc:52:b9:40:
3c:4c:90:98:03:6f:b1:e5:cb:96:63:17:b2:a0:08:
0c:ca:15:f9:f7:a4:6b:78:60:30:96:e3:b2:b5:cc:
4a:7d:fd:65:59:64:f8:e7:45:02:7e:e2:cf:5e:34:
7b:9c:79:ee:57:1a:4b:c1:9f:ad:6a:97:e4:41:de:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:83:57:4A:AD:0C:86:AB:2D:AA:27:C7:D0:2E:FB:39:00:6E:82:0A
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:bb:7f:21:02:d0:0b:f4:62:51:3d:5a:44:0b:0d:42:14:
fc:07:0e:ab:55:50:59:77:11:98:0b:67:19:4e:1e:a0:18:8b:
85:8d:0e:10:cd:26:7c:b8:7b:ee:60:f3:81:68:3c:dd:7d:57:
70:ab:e0:04:b3:46:df:3c:89:05:21:fe:30:f6:45:06:db:d2:
fa:eb:e6:28:df:36:f6:53:94:f4:05:a9:d1:e7:67:2d:fc:b6:
ac:e0:ca:d3:d6:2d:01:27:2a:f0:f3:97:c9:6d:ed:c2:ed:9f:
d0:85:03:e4:3c:86:27:3e:0f:ff:8d:40:dc:f0:e6:69:46:8f:
19:4b:69:40:67:93:2a:f3:39:c1:06:04:0a:47:0e:d5:4f:5d:
10:63:9a:e5:4f:a3:cc:7c:fc:46:85:37:6e:22:36:37:26:09:
8a:98:f8:16:4d:a3:48:8f:3c:9a:a4:33:f7:50:b5:86:40:c8:
6e:34:ac:4e:46:07:01:36:cd:42:60:8a:78:24:8f:58:ac:6d:
99:55:90:06:33:75:be:61:ad:46:43:b0:93:bc:85:53:8f:16:
d1:cd:0b:b8:52:60:d5:15:e9:b1:d6:62:df:07:2d:56:44:a4:
ee:43:7e:75:27:be:98:2f:11:ac:96:a0:86:ac:29:30:bd:8b:
e6:5b:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:54 2026 by rpki-client