Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: DBB+6XBydHIDgH3zLq9lQkOLoKq29Z0gd+ID49/yeZM=
Subject key identifier: 63:A6:76:F9:44:07:11:66:C4:6C:C7:42:21:83:F3:07:77:F4:BE:D1
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01A0C3A02373E71037560F7948E90BB92405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0BE4
Signing time: Mon 21 Sep 2026 11:00:46 +0000
Manifest this update: Mon 21 Sep 2026 11:00:46 +0000
Manifest next update: Tue 22 Sep 2026 11:00:46 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: qv7IZm9CpLA6cwdpCLVhq0opmXFvMEmBC02uz7ULnJQ=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:23:73:e7:10:37:56:0f:79:48:e9:0b:b9:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Sep 21 11:00:46 2026 GMT
Not After : Sep 22 11:00:46 2026 GMT
Subject: CN=63a676f944071166c46cc7422183f30777f4bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:2d:bd:7a:a3:44:85:57:8a:79:3a:ff:5e:
52:b8:e6:68:98:f7:5b:3d:6e:d9:f1:95:19:c2:9b:
5c:bb:87:74:14:5c:3b:39:76:8d:f3:a0:04:f0:99:
63:32:c2:68:d3:07:0d:3a:4b:e3:d7:8f:28:08:75:
79:41:7e:7d:bf:dd:fb:51:f9:3b:e5:73:a4:fd:22:
c4:c2:48:56:8b:a9:a3:f5:fc:63:87:97:ae:74:07:
c7:61:62:83:d0:68:c0:b7:d6:63:23:51:7c:24:32:
ab:c7:29:5f:18:aa:06:38:f5:e6:86:db:2d:7d:d4:
1c:17:9b:a8:c3:a4:a4:a6:08:b6:7c:ab:68:61:c1:
4f:ca:b3:72:79:da:67:c8:50:7c:cd:ab:5f:eb:bf:
3d:40:3e:99:dc:f8:60:d9:7e:24:75:6a:b7:d8:d5:
1c:60:14:8d:07:30:97:61:3c:3b:db:1c:71:e8:0d:
bf:55:07:36:dd:ab:40:d4:72:a3:17:a1:30:36:aa:
ce:bc:fa:83:5f:a9:0b:9b:55:d9:6e:aa:33:0f:5f:
0b:ce:4b:d4:c2:98:c9:a2:f6:db:77:0b:cd:b4:0a:
ac:cf:ab:57:cc:53:a9:6d:7b:05:27:ec:a2:23:fe:
e4:32:a8:b8:8e:4d:e1:39:c5:5e:11:12:22:d1:ea:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:76:F9:44:07:11:66:C4:6C:C7:42:21:83:F3:07:77:F4:BE:D1
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:ae:da:84:47:47:55:07:66:38:dc:2b:43:90:c5:63:e6:
4a:a1:ed:e7:8d:7b:ad:d3:d7:c0:2b:bc:72:43:93:6e:cc:31:
a3:13:0c:c8:be:13:73:09:89:27:01:fa:82:c1:90:7c:52:17:
b1:d1:f1:d5:12:64:4f:39:fe:d8:58:0f:24:66:50:58:c3:53:
99:81:c5:40:93:08:9e:70:18:6a:e2:4a:6a:53:92:e4:a7:ff:
81:ca:02:04:c5:4e:7c:91:ee:9d:4d:71:16:68:f2:8d:50:95:
0f:4b:25:17:eb:17:78:dd:b5:12:b9:98:e3:29:5e:cf:1b:49:
bc:46:c4:86:42:a9:38:e2:a2:f7:4d:da:8a:9d:90:ee:7b:c6:
a7:05:fb:6a:16:19:50:46:dc:a6:f6:a5:97:a6:e4:74:aa:80:
45:69:26:6d:de:70:11:34:89:eb:5c:b9:f7:3a:82:b7:5f:88:
09:ad:76:c2:aa:6e:a3:db:8a:50:0f:fa:f2:06:8e:7d:22:01:
47:5a:79:fe:63:f1:4c:1e:68:7d:ca:9b:4a:47:7e:e6:85:6e:
b3:65:e2:cc:88:48:6c:44:12:dd:64:03:d0:03:96:96:a0:ca:
dd:72:90:0b:bd:66:a8:fa:db:6e:d9:d6:64:5e:34:5e:1f:12:
fd:a0:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:51 2026 by rpki-client