Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: qrQkAuF7ffWxpCKDKB30ruVw0e8KPdD44vCNAWyaXLQ=
Subject key identifier: 24:39:3E:13:A2:F0:84:FA:B5:D6:F1:2F:80:A0:12:F1:9F:04:E2:F7
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 01A0ED41FEAE987A23C4EC2D944E8E36C9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0525
Signing time: Tue 29 Sep 2026 13:02:00 +0000
Manifest this update: Tue 29 Sep 2026 13:02:00 +0000
Manifest next update: Wed 30 Sep 2026 13:02:00 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: bzSn0jnjGoPS7AEB/mk5kXv1TGek2HPpFSNNUw9BRJI=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:fe:ae:98:7a:23:c4:ec:2d:94:4e:8e:36:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Sep 29 13:02:00 2026 GMT
Not After : Sep 30 13:02:00 2026 GMT
Subject: CN=24393e13a2f084fab5d6f12f80a012f19f04e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:6f:1f:dd:13:f0:d4:43:2a:67:3d:70:0e:
c2:18:aa:4a:19:d7:54:4f:a5:2a:fe:a4:22:68:84:
e5:64:07:95:c9:99:48:e4:45:80:08:8a:f2:1f:65:
7e:2e:17:05:c2:d8:fd:da:4c:97:89:42:c8:29:9f:
20:aa:8d:2a:40:da:c5:43:fd:52:6b:1f:34:5e:bc:
65:ec:ca:2a:09:d6:32:6e:dd:78:b5:2d:98:d8:6d:
a4:74:33:30:e1:40:38:94:b4:10:96:4e:ab:48:18:
c0:c0:4c:5c:c0:cd:27:6d:1c:ed:11:cc:c6:ac:57:
a5:02:63:76:67:01:fe:9c:d4:78:64:45:48:cd:6a:
80:cc:db:af:43:3a:8a:50:9d:67:ef:24:d5:4c:7b:
c8:86:e8:f7:d9:8f:71:46:cb:c4:51:4e:44:07:df:
c0:0a:14:ad:39:9b:9f:f3:76:46:e8:dd:97:9c:7b:
77:68:81:27:b1:19:12:90:02:5f:07:42:70:ef:da:
f0:72:18:a4:58:17:8e:af:c5:81:99:f2:29:c4:d1:
e3:03:d3:38:f5:76:7e:3c:4f:c2:70:e1:69:b7:f8:
21:a7:5b:31:43:ff:d6:65:5e:5c:17:0d:ae:31:a0:
6a:c9:9c:42:da:70:8c:71:ec:e3:9f:94:dc:fa:03:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:3E:13:A2:F0:84:FA:B5:D6:F1:2F:80:A0:12:F1:9F:04:E2:F7
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:a1:8f:f7:a1:3b:a8:a4:9f:3c:82:89:f9:5a:e0:75:ed:
44:63:7f:d5:77:40:3a:8e:f3:f2:76:e4:06:02:28:5a:2a:66:
d0:3c:de:2e:78:b7:e0:c8:60:ff:2b:62:3c:81:12:f9:75:78:
fe:07:48:26:f2:9a:f9:71:eb:9f:c4:02:39:3f:c2:2f:cb:cc:
8e:71:ca:1e:47:96:21:db:43:80:22:03:28:91:26:e8:5e:d4:
22:cc:28:b0:1b:8c:04:55:ec:6c:72:c2:19:60:9d:64:59:b9:
f9:3c:c9:b9:7c:c3:2b:6a:f0:38:ca:37:0d:80:cf:3d:83:3b:
14:36:25:57:c8:1b:42:8a:69:4c:a1:b0:7d:a9:6c:0c:51:2c:
37:bc:06:82:57:61:00:39:b9:a1:51:24:90:ea:9e:6c:73:00:
5f:c1:f9:92:5b:af:52:7e:31:e5:d8:8d:d1:45:a5:48:1f:a3:
a3:1e:e6:76:0c:eb:06:db:f5:35:5c:82:89:33:86:74:96:55:
95:a4:c5:92:9b:37:3b:70:49:0c:0b:ba:8a:9c:8f:25:2c:a2:
ae:0e:bb:da:83:13:b4:2b:89:04:92:6a:b8:9a:8b:ee:66:3a:
52:9c:eb:2d:f8:11:f8:e4:cf:95:7f:b8:d6:1d:22:32:df:d8:
fd:3d:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:09:09 2026 by rpki-client