Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: oXyb6SfqyYQvdekwydD5o+Jhecm0ZCe5w9wFvi6QyrE=
Subject key identifier: CF:EB:F9:75:26:5C:BA:CC:FF:21:25:8D:49:02:C8:40:35:42:A3:69
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 01A0C368FD19851295095444598AF3CD8B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0A7A
Signing time: Mon 21 Sep 2026 10:00:32 +0000
Manifest this update: Mon 21 Sep 2026 10:00:32 +0000
Manifest next update: Tue 22 Sep 2026 10:00:32 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: ONi6HN3h2VhXpeO5KI17YpD7xlU9Lu5u8FfhRd1LDKw=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:fd:19:85:12:95:09:54:44:59:8a:f3:cd:8b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Sep 21 10:00:32 2026 GMT
Not After : Sep 22 10:00:32 2026 GMT
Subject: CN=cfebf975265cbaccff21258d4902c8403542a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:b9:77:5c:77:34:85:25:0f:64:6c:b7:4c:
87:91:97:59:ed:e3:94:cc:26:1e:6b:f1:34:29:63:
8e:c4:3e:05:25:7e:5e:26:9f:79:93:bc:a9:b7:0f:
e8:8f:54:15:d3:85:50:12:96:35:b4:79:04:6e:7b:
f1:4b:d7:c9:51:4b:2f:cf:6e:66:16:c5:dc:9b:a0:
84:30:6b:e5:c8:d7:e4:17:48:17:27:9d:b6:75:05:
b2:7e:cd:66:06:74:5e:76:8a:f0:ad:13:86:7b:12:
d9:27:e3:93:3b:2f:5c:1a:96:e7:10:cf:79:2f:98:
26:23:bd:8b:ac:65:40:d1:3e:dd:d0:da:c3:36:27:
fd:31:af:ce:e3:aa:1a:28:35:d3:51:d5:8a:fb:8f:
08:6d:89:a6:42:56:17:12:ed:82:74:c5:c1:18:31:
91:06:76:68:1d:75:eb:31:df:81:e0:e7:73:b5:c2:
98:ff:b3:c4:af:89:08:8a:59:18:b8:77:2a:4a:b6:
95:95:85:e0:61:00:1e:46:16:f0:0c:e3:79:59:d6:
18:55:ae:e2:fb:66:80:d0:d2:7e:fc:b9:ed:81:e4:
ec:4b:ec:bc:1b:3f:3d:ee:9a:72:a6:2a:72:9d:d4:
09:0a:6e:bd:ce:e4:01:73:09:3f:40:07:88:97:4a:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:F9:75:26:5C:BA:CC:FF:21:25:8D:49:02:C8:40:35:42:A3:69
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:01:88:c0:7d:02:1e:54:29:c2:90:94:8c:04:ea:c1:25:
c3:ad:39:64:75:ce:37:09:49:51:64:eb:b7:60:e3:69:76:6d:
2e:58:14:c4:fa:86:92:15:5f:40:ab:f3:ca:1d:95:34:5d:fe:
db:b9:e3:a6:06:50:08:24:a1:7f:f8:37:46:9e:8d:67:f5:a1:
bb:0a:91:19:8c:4f:1c:e1:bb:48:b1:ec:10:55:72:87:ea:aa:
21:65:e2:d3:b6:b1:83:8c:aa:fb:5e:1c:21:41:65:55:21:f6:
2a:89:fd:98:59:74:67:c4:6d:fb:8b:6e:4a:14:22:fb:8c:6a:
bc:72:96:b5:0a:fa:80:e4:02:31:b8:df:d0:7e:e8:30:2f:cd:
f9:c4:b1:f6:fe:40:5f:bc:dd:4a:74:43:bd:86:2e:f3:38:10:
db:72:d2:bd:9d:af:0a:60:3a:5e:bb:1d:80:3c:84:c4:f3:1b:
a5:6a:6e:cb:f0:bb:fa:28:60:e7:b8:13:30:ea:25:6c:fe:4c:
e5:18:1f:c9:55:2a:a1:8e:9d:42:e1:af:b2:33:af:bc:1c:81:
a8:f4:ca:d6:b8:5a:45:10:2c:ba:f4:c6:6a:4a:a2:12:10:a2:
6e:12:02:7d:23:59:91:42:6b:ab:09:c6:a6:1c:1f:c5:7f:09:
d4:3b:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:09:22 2026 by rpki-client