Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: E0b+1x9+93C3b1vcebGC/s/n1vfAyZkXuEiQVeXt23Y=
Subject key identifier: 14:91:24:51:13:90:E6:A0:6C:6F:43:0C:0C:E1:DD:07:3C:82:6E:17
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01A0C40E58621538FB56D1A87A8A37EF58E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 13:01:09 +0000
Manifest this update: Mon 21 Sep 2026 13:01:09 +0000
Manifest next update: Tue 22 Sep 2026 13:01:09 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: 0vo1tt0JtvK85f+saGa41SjNFlNztfhUeDxqmdvkOYU=)
2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:58:62:15:38:fb:56:d1:a8:7a:8a:37:ef:58:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Sep 21 13:01:09 2026 GMT
Not After : Sep 22 13:01:09 2026 GMT
Subject: CN=149124511390e6a06c6f430c0ce1dd073c826e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:eb:c2:ca:6d:71:ef:04:46:b6:cf:71:ee:
a1:b2:af:d3:d8:ed:64:25:1c:08:07:42:26:8b:74:
98:9c:2b:68:b4:8b:1c:73:ce:6b:19:b8:9c:c7:6f:
a4:bd:ef:60:1e:51:65:37:cd:b0:a8:58:f6:61:0e:
e4:09:87:d1:be:19:3b:50:17:a0:88:db:47:b8:14:
1e:92:b3:71:37:89:5c:79:22:6b:ee:07:28:01:1d:
ad:d7:61:33:b6:f3:37:40:4f:a9:5a:22:ea:a4:7a:
87:12:aa:e7:dc:ef:35:c5:4e:b4:75:2b:78:24:54:
24:20:a1:7e:5c:6d:d1:e6:df:30:fb:5c:12:3f:ed:
ac:b2:c0:17:f7:a0:7f:20:57:3d:cb:f7:11:db:16:
50:15:db:2d:e5:32:17:7f:e4:89:a3:f3:dc:ca:81:
69:fe:4d:61:9f:e3:9b:dc:bd:ab:60:ab:4b:28:70:
52:a3:40:fe:b1:bf:4e:79:bd:93:08:45:2a:4c:71:
46:aa:f6:46:b9:f0:a0:bb:c7:b7:18:39:f3:65:79:
4b:5d:f5:b1:e2:1a:f9:03:4a:c0:66:b5:94:3c:03:
e7:f9:0f:82:f1:7a:85:74:e4:2f:98:4b:b9:29:a6:
10:43:41:22:a7:52:e3:61:ab:4e:9a:af:56:5d:04:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:24:51:13:90:E6:A0:6C:6F:43:0C:0C:E1:DD:07:3C:82:6E:17
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:64:98:5c:f6:95:21:6c:25:d1:0d:f9:c9:63:51:59:75:
cf:f7:18:dc:7b:e5:54:0d:fc:99:f2:35:53:55:e8:a8:51:ae:
3b:2b:b4:22:05:ab:d1:d2:e3:ea:47:4b:d6:47:40:59:26:40:
e3:14:d4:8c:3f:1b:a3:fd:bf:cc:20:98:8d:5c:79:25:20:b4:
4e:12:cb:5c:f3:e4:e7:f8:da:08:a0:7d:c9:77:64:5a:ad:d4:
54:7d:8c:38:57:aa:77:8e:c9:cb:7f:ad:f8:01:2b:03:e0:82:
e7:ed:61:fd:07:40:21:75:ce:5e:2d:3a:01:3e:1a:34:54:b4:
b1:a6:d0:27:0e:44:08:ae:63:99:16:d3:be:9c:d4:b0:f1:74:
f5:6f:f3:e5:b0:d1:9d:dd:b1:1a:74:50:88:bf:76:d3:5b:bd:
78:64:6d:7f:51:ea:ab:5c:b4:52:8e:4b:b0:99:f0:ee:62:57:
21:b9:c9:4e:54:bd:77:3f:11:91:02:ca:e3:fc:0b:dc:a2:2d:
60:b0:e8:55:93:02:bb:fe:b0:c8:5a:fa:06:75:76:6c:87:30:
40:b9:04:a2:c7:df:22:fb:f9:93:a2:ea:04:5d:2d:45:9d:7e:
54:9c:d7:77:ba:6e:7a:59:26:3a:2c:ad:43:e3:9c:83:70:77:
9a:69:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:31:01 2026 by rpki-client