Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: EH/Rw5xtuB04eqoMX6QtaM1UihaAytSupKNL0MHkmew=
Subject key identifier: 36:83:B7:5C:3F:7B:C3:1E:D1:45:79:5B:09:2E:2D:55:9A:B1:98:D8
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01A1C2F8AD51C95CF79C86871C1E63B63596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1AEE
Signing time: Tue 10 Nov 2026 01:00:39 +0000
Manifest this update: Tue 10 Nov 2026 01:00:39 +0000
Manifest next update: Wed 11 Nov 2026 01:00:39 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: 7M4J7A6MC5roUT7C9ftsZjwbXm+GQuz7u8Nv2lFeFT0=)
2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f8:ad:51:c9:5c:f7:9c:86:87:1c:1e:63:b6:35:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Nov 10 01:00:39 2026 GMT
Not After : Nov 11 01:00:39 2026 GMT
Subject: CN=3683b75c3f7bc31ed145795b092e2d559ab198d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:9c:e5:3e:f3:49:41:bb:d2:2e:7e:74:4c:
96:35:06:e7:a7:59:8a:d3:2a:c1:5a:8b:d4:97:cb:
40:68:a6:6a:eb:85:e2:4c:42:23:7d:1d:c3:e6:03:
50:6e:b7:30:ce:62:f5:1d:7b:a1:3a:93:e9:02:10:
64:93:44:61:1b:5f:87:5e:68:6b:87:23:e2:49:d5:
c5:53:c1:8b:2c:32:47:3f:83:10:87:a9:74:d0:bd:
1d:ed:a3:be:19:bd:19:bf:c5:93:ad:f8:1e:10:b0:
7e:a2:24:82:27:54:0e:1d:ed:6d:88:60:d5:34:6e:
c6:00:2d:44:b3:6f:36:2d:1b:d2:a7:77:f2:32:a9:
82:d0:1d:38:ee:52:51:a7:65:82:ce:88:e6:81:ab:
20:10:45:8c:6a:5f:7a:8f:10:5b:39:fe:f4:53:ca:
51:fa:d2:aa:6e:9b:7a:df:2b:1d:33:2f:71:97:05:
27:bc:51:a9:3e:fe:1d:9b:df:04:af:5d:8e:d3:1c:
99:17:e4:3f:5d:e4:4b:47:bf:6c:ca:cd:0b:a7:ca:
ca:f2:c9:f6:98:7d:36:1c:d8:c3:17:72:6d:e1:ba:
8e:2e:24:83:33:d7:7b:22:c3:01:cd:a5:66:41:c9:
23:58:34:f0:fa:76:ca:33:44:16:3e:ba:ce:9a:a5:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:B7:5C:3F:7B:C3:1E:D1:45:79:5B:09:2E:2D:55:9A:B1:98:D8
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:4a:13:01:ec:a2:4e:4e:8c:9e:9f:83:d7:5a:e6:a1:5c:
7b:d2:bc:1a:f8:78:d8:fb:c9:82:d1:84:95:8d:79:9f:02:0e:
37:28:50:d7:e8:ae:3d:69:9b:47:75:45:fb:86:bb:ce:70:8f:
e0:a1:c2:e0:14:cb:0d:05:80:0f:21:cd:82:4d:a9:41:b5:64:
c7:5d:0c:1a:9f:ff:f1:2c:74:1d:5c:35:2f:d4:08:fa:02:55:
6d:af:c6:b0:3c:98:1b:97:c5:a7:68:c7:1c:ed:f7:6e:4f:9a:
dc:f1:08:0a:24:ec:2c:78:3b:c3:48:03:b3:9e:59:e8:9c:ff:
d1:c1:b6:f4:b6:48:68:c2:0a:a6:42:b5:4b:39:54:d8:29:32:
1b:77:0d:8e:7d:21:62:2b:14:a5:4e:18:88:86:0a:75:6c:93:
43:46:9d:df:fa:e3:73:01:db:e5:82:e7:d2:11:86:4c:cd:0a:
e4:6d:bd:94:0b:20:d0:71:30:b2:8c:11:95:a1:f5:aa:45:ac:
ba:a1:17:99:1d:6f:25:0c:91:b7:9a:d8:b2:52:9a:f7:e3:ec:
a6:fd:b3:a8:45:86:e0:f9:5a:db:1e:7a:3a:b6:c2:1e:cf:a6:
b2:69:bb:c7:0b:03:9b:9d:97:3f:20:2b:68:90:af:de:c8:14:
2d:f9:85:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHC+K1RyVz3nIaHHB5jtjWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl
NzE2ZDcwHhcNMjYxMTEwMDEwMDM5WhcNMjYxMTExMDEwMDM5WjAzMTEwLwYDVQQD
EygzNjgzYjc1YzNmN2JjMzFlZDE0NTc5NWIwOTJlMmQ1NTlhYjE5OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgWc5T7zSUG70i5+dEyWNQbnp1mK
0yrBWovUl8tAaKZq64XiTEIjfR3D5gNQbrcwzmL1HXuhOpPpAhBkk0RhG1+HXmhr
hyPiSdXFU8GLLDJHP4MQh6l00L0d7aO+Gb0Zv8WTrfgeELB+oiSCJ1QOHe1tiGDV
NG7GAC1Es282LRvSp3fyMqmC0B047lJRp2WCzojmgasgEEWMal96jxBbOf70U8pR
+tKqbpt63ysdMy9xlwUnvFGpPv4dm98Er12O0xyZF+Q/XeRLR79sys0Lp8rK8sn2
mH02HNjDF3Jt4bqOLiSDM9d7IsMBzaVmQckjWDTw+nbKM0QWPrrOmqU4qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaDt1w/e8Me0UV5WwkuLVWasZjYMB8GA1UdIwQY
MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt
NjQzYzFmZTM4Mzg1LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1
LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlRKEwHs
ok5OjJ6fg9da5qFce9K8Gvh42PvJgtGElY15nwIONyhQ1+iuPWmbR3VF+4a7znCP
4KHC4BTLDQWADyHNgk2pQbVkx10MGp//8Sx0HVw1L9QI+gJVba/GsDyYG5fFp2jH
HO33bk+a3PEICiTsLHg7w0gDs55Z6Jz/0cG29LZIaMIKpkK1SzlU2CkyG3cNjn0h
YisUpU4YiIYKdWyTQ0ad3/rjcwHb5YLn0hGGTM0K5G29lAsg0HEwsowRlaH1qkWs
uqEXmR1vJQyRt5rYslKa9+Pspv2zqEWG4Pla2x56OrbCHs+msmm7xwsDm52XPyAr
aJCv3sgULfmF6g==
-----END CERTIFICATE-----
Generated at Tue Nov 10 11:11:10 2026 by rpki-client