Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: UshZnj9IC4nUTN/syIeDl2yqd7F7k/eWol748lEbe8o=
Subject key identifier: 4E:FE:42:ED:EF:D1:21:C8:C0:A0:ED:F2:F5:91:D1:A3:61:89:1B:5D
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 01A0C5202A521B41BD62D1CC2097468E8287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 18:00:14 +0000
Manifest this update: Mon 21 Sep 2026 18:00:14 +0000
Manifest next update: Tue 22 Sep 2026 18:00:14 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: JW8d8h8KyWFiJf3IFKNaRdyymt2YOJAPsADU0ChLVjo=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:2a:52:1b:41:bd:62:d1:cc:20:97:46:8e:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Sep 21 18:00:14 2026 GMT
Not After : Sep 22 18:00:14 2026 GMT
Subject: CN=4efe42edefd121c8c0a0edf2f591d1a361891b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:28:95:2c:d3:75:35:0c:1a:8d:ba:07:41:e4:
d3:80:b9:b1:72:15:fd:0c:e2:a8:ff:a0:aa:a2:a1:
08:ac:28:9d:ab:b9:0f:37:02:b3:ae:33:72:64:a3:
3c:0e:2b:c9:44:a3:ee:fd:47:fd:32:05:70:18:ad:
dc:2d:2c:f9:99:e8:bc:f8:d1:95:6c:08:8a:79:1a:
eb:5b:5b:c7:8b:41:a1:c3:2d:0d:18:05:9a:ef:db:
1d:e5:b4:2d:a7:18:88:66:06:62:05:51:32:ac:46:
d1:9e:a0:f3:4c:99:e0:82:09:df:31:da:47:3a:ec:
b4:a0:0f:6b:7c:8b:51:76:ce:6b:bf:1c:9a:20:77:
22:c5:d3:e5:e4:9d:8e:e2:9f:8b:39:b0:e1:28:dc:
c1:ed:31:2e:10:38:c7:4f:1e:f5:b5:f5:59:b6:f0:
0f:78:34:fc:a0:48:70:cf:84:f9:59:9b:d0:40:1b:
e2:2b:af:cf:cb:e7:98:a7:7b:b3:d8:dd:fd:de:a9:
4f:52:d6:d3:24:1a:8c:c4:54:85:12:60:a4:c4:c8:
63:37:4a:d6:d1:ef:3f:4c:70:1a:08:15:f7:ab:26:
1f:42:28:13:98:11:1d:b2:69:07:cd:5e:55:18:24:
85:ad:ed:57:6f:43:6a:ec:40:34:9c:c9:5e:8c:f6:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:42:ED:EF:D1:21:C8:C0:A0:ED:F2:F5:91:D1:A3:61:89:1B:5D
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7e:d7:b1:54:8e:d9:b8:3f:07:b5:7d:4f:79:07:29:25:ef:
18:9a:2b:f1:d7:a9:5d:03:5e:1f:30:ec:97:68:6d:40:fe:38:
ec:75:65:86:81:17:16:bc:4b:83:03:d4:c0:17:83:b9:b9:d3:
de:b8:56:90:7a:72:b4:f6:61:a6:bc:6a:02:e4:64:bf:b2:24:
81:b5:fe:23:0e:9b:e1:0f:ec:95:d9:8a:05:5e:00:35:c3:3c:
bd:cc:e2:c1:77:b4:67:ab:e7:d7:29:9b:0a:85:22:a3:37:a9:
8b:12:50:24:0f:c4:78:e0:7d:10:47:ff:f7:11:45:86:c1:10:
74:85:73:25:17:73:d3:8e:82:56:78:fd:c4:2e:8f:43:b6:d0:
10:63:2a:3d:c2:62:d5:4e:57:45:1f:0b:fe:fb:81:22:a5:43:
b5:69:72:56:66:af:12:2e:87:b9:df:31:18:51:f0:7f:0f:21:
7b:56:3c:4c:76:ee:69:eb:5f:bc:b5:78:8a:fb:51:c5:51:53:
3f:a8:d2:7f:f1:e2:04:36:4a:4d:a6:d5:1a:0a:c4:e7:40:f0:
6a:fa:45:dd:2f:f4:77:11:23:cf:d6:9d:e0:15:fe:85:0e:f8:
70:6a:04:aa:a0:b1:83:fa:a5:b9:52:3a:6b:c9:ae:dc:99:24:
c7:50:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:24:06 2026 by rpki-client