Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: Xtu9tigx9CwbcdkCqsyeVVQv/YUjyvzz5IFsB+jRUSo=
Subject key identifier: 0C:D6:05:2B:5E:2D:07:B2:3B:19:BC:E9:64:56:45:23:FD:5F:9F:38
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01A0C96BB148D743D99AC940608FA0C7061A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0BE7
Signing time: Tue 22 Sep 2026 14:01:13 +0000
Manifest this update: Tue 22 Sep 2026 14:01:13 +0000
Manifest next update: Wed 23 Sep 2026 14:01:13 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: bCwDCoG29H/Q/MTj4OdjToR3O/yBlQ2EB2dowt3ctNE=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:b1:48:d7:43:d9:9a:c9:40:60:8f:a0:c7:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Sep 22 14:01:13 2026 GMT
Not After : Sep 23 14:01:13 2026 GMT
Subject: CN=0cd6052b5e2d07b23b19bce964564523fd5f9f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:cf:18:05:45:24:cf:a1:5c:10:37:5f:6c:
4a:88:b0:45:48:e7:69:fb:7d:68:5b:3e:33:5f:b9:
69:08:39:5d:31:8d:0a:10:98:55:6e:3a:cb:27:d3:
1d:84:e5:63:da:1d:88:5a:d5:71:aa:31:21:36:f5:
df:f6:57:2b:c2:57:75:38:97:32:65:fb:33:99:4e:
d7:52:68:61:86:7b:27:a2:17:ec:6a:67:f0:ae:13:
72:cc:6e:92:49:1a:68:48:05:59:a9:2d:84:23:d6:
6e:21:8d:f5:af:86:dc:ab:9b:2c:d5:d1:67:00:69:
7b:b6:9a:3d:37:6d:0a:50:ec:7e:db:de:d8:e9:c0:
f1:0f:e9:80:11:b8:d5:7b:38:ea:1d:bf:0c:3f:75:
90:71:1c:66:e3:44:8b:6a:77:cb:45:5a:2c:34:8c:
ec:1a:ab:50:04:5b:f2:6d:51:b4:72:7f:4c:73:3c:
d7:8d:5d:9f:a2:c7:97:aa:d6:62:3b:85:90:10:aa:
b8:8e:f3:16:0e:34:7c:13:48:d6:a9:b0:84:8e:1a:
0d:96:10:b6:31:32:23:af:58:97:24:33:88:90:e5:
dd:df:db:3b:af:9d:0b:6d:d7:05:49:59:fa:06:e7:
3a:23:33:e1:cd:4c:13:4d:17:5f:f2:65:1c:2a:53:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D6:05:2B:5E:2D:07:B2:3B:19:BC:E9:64:56:45:23:FD:5F:9F:38
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a3:86:da:85:9f:e5:90:16:5d:09:10:a0:c9:7a:a3:4a:77:
95:8e:b7:84:53:48:f3:f4:5e:fa:58:48:79:0c:53:51:e6:ce:
12:eb:72:97:7a:38:8e:18:27:b8:ca:23:87:74:ad:e0:41:a0:
76:61:43:2c:36:0b:ee:dc:fe:46:f1:cb:73:cc:67:e7:74:30:
3e:e4:be:9f:d8:ac:f4:42:6a:35:42:57:27:e7:84:d0:62:8f:
c9:8f:50:87:d0:9e:1b:f0:41:77:0a:4a:36:6c:55:0f:c2:66:
66:7a:ea:db:6a:d1:a6:3f:b3:34:21:c6:55:d4:b2:60:72:20:
1b:17:f8:70:a2:14:f9:4e:b1:cf:11:c4:f5:c2:2d:fc:79:96:
0c:d1:7f:61:81:4e:bf:e7:4f:d1:f3:0a:0e:19:0e:c5:36:7f:
75:ed:5a:06:9d:1d:70:5f:af:b1:3d:81:f2:c2:cb:02:ad:57:
ff:dc:ba:99:a7:69:f0:0e:d3:5c:96:f7:21:a7:70:32:85:3d:
5a:25:a6:5b:c3:aa:e5:0b:c5:d6:c9:73:5b:3c:e7:2e:61:83:
e8:78:41:61:40:bd:8f:9f:57:9c:79:cd:25:29:ea:15:e1:c6:
18:6d:36:91:f9:fa:1b:23:1f:37:3c:11:74:bb:7e:af:87:9a:
31:1c:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:18:49 2026 by rpki-client