Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File: 8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier: Uyh0fkQMzAiSGx9CYYij4ySFeEQsPMVysGc4sL2rO64=
Subject key identifier: B8:A3:31:E0:4D:51:A5:C5:C3:15:E8:57:97:B9:17:A4:1E:A6:1E:DF
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 01A0BCC22767FDD543D69A64C884B77BEBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:35 +0000
Manifest this update: Sun 20 Sep 2026 03:00:35 +0000
Manifest next update: Mon 21 Sep 2026 03:00:35 +0000
Files and hashes: 1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: Wn4D5mdFdgWmPt35Sz1xy7Rbr2/OAyecjQFBEpVqcv0=)
2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:27:67:fd:d5:43:d6:9a:64:c8:84:b7:7b:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Sep 20 03:00:35 2026 GMT
Not After : Sep 21 03:00:35 2026 GMT
Subject: CN=b8a331e04d51a5c5c315e85797b917a41ea61edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:ce:a0:4d:1a:a4:e8:ab:31:c2:9d:65:1c:
3b:15:e5:31:00:24:68:6e:20:55:f6:b2:e2:ff:73:
24:df:12:d2:0d:4d:0a:05:dd:5e:67:d2:34:5f:df:
49:74:ae:cc:90:1b:21:83:a2:61:f3:14:33:d0:25:
ab:70:b4:a9:38:3a:0c:35:06:46:6f:49:3f:10:4f:
bf:f0:8c:67:f2:4c:bf:88:e7:ec:88:43:3a:c4:d7:
97:68:4a:18:64:2f:de:66:5e:4c:c4:02:1f:7d:a3:
a0:1e:67:19:9f:19:5e:24:64:ba:93:43:e1:5c:b5:
f7:58:b2:f4:e3:e3:fc:ef:56:b0:79:2f:4c:e0:90:
a1:0a:a3:51:41:b8:24:3b:4f:44:0f:51:52:19:cd:
db:f1:49:57:52:e8:5a:00:4a:cf:2f:35:6b:63:34:
88:69:a4:44:3b:9c:4b:cf:10:6f:26:08:18:76:cd:
69:15:c1:c6:b0:ec:86:19:68:01:20:68:b9:27:4d:
cb:4a:5b:2f:79:8b:47:a6:06:71:e6:f9:3c:ec:ac:
7f:f3:0c:c6:98:4c:fd:2e:40:65:dd:40:1b:0f:d9:
43:8e:9e:69:8d:6f:6d:e4:b4:59:98:a7:3e:af:c9:
a3:28:c3:c1:21:8c:74:6b:a1:76:02:06:42:03:7a:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:31:E0:4D:51:A5:C5:C3:15:E8:57:97:B9:17:A4:1E:A6:1E:DF
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:74:39:e1:c9:0b:41:fc:61:f5:70:c2:24:23:ca:64:9c:c6:
a2:eb:27:c9:de:11:f2:c1:89:3f:b3:ab:53:f7:a5:2d:c3:a7:
c4:8b:eb:fd:68:6c:8a:fb:2d:5b:93:c8:0e:25:a6:36:2b:cb:
25:ac:b4:ae:de:83:4b:cf:31:1b:84:2c:37:fc:7d:a7:89:0d:
86:10:7b:59:83:5a:11:5a:18:07:10:79:b9:b5:b8:15:8e:7a:
25:e1:6d:85:06:18:07:da:6f:62:b8:fe:fd:ec:04:84:6e:c8:
58:a2:79:8b:51:c2:ac:87:85:a0:ee:aa:60:29:1d:48:a1:b5:
2f:28:24:58:95:d9:8f:16:f4:20:24:80:c9:42:c2:bb:a5:ec:
ed:9a:a5:50:e2:cd:c2:23:b6:2f:02:c0:3a:6f:e6:e9:89:7d:
2c:e3:6f:00:9f:e2:52:77:90:7b:37:bc:aa:06:02:9a:e9:e4:
ad:85:d9:13:b5:06:87:95:55:f9:8e:eb:1a:30:66:c3:b4:86:
36:b7:c8:9a:bb:fb:8e:bf:a9:e3:35:8b:20:cc:59:56:de:76:
6b:6b:cb:bc:18:19:f8:ad:a8:20:51:e1:31:6e:99:e4:93:1e:
60:9c:ae:20:f3:26:6e:ab:b3:5d:00:e8:b0:dd:88:e1:df:07:
b5:ab:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:09:49 2026 by rpki-client