Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: T1/w4P9TOmpM/2aNbVRjcfjUrktfh25j1Ew2C95CGzI=
Subject key identifier: E8:E3:D8:10:5D:CF:C6:05:CC:54:CA:ED:57:AA:B3:EC:E1:C6:CE:CD
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 01A0C40DB7FA035D79B606A1EAB89DBD4B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 13:00:28 +0000
Manifest this update: Mon 21 Sep 2026 13:00:28 +0000
Manifest next update: Tue 22 Sep 2026 13:00:28 +0000
Files and hashes: 1: 5zhW36lGyfogiaElUfbWbhXt_NE.roa (hash: +j+wJnENL0rL/JlQ6DSpZDDPY7E8b83UH4Sgu3v056w=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: R2iUK1inppHDcLgzs1h1D4eYb8mj+TnMEhBInhvG1RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:b7:fa:03:5d:79:b6:06:a1:ea:b8:9d:bd:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Sep 21 13:00:28 2026 GMT
Not After : Sep 22 13:00:28 2026 GMT
Subject: CN=e8e3d8105dcfc605cc54caed57aab3ece1c6cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:bd:ac:ec:52:5b:3c:1c:4d:7e:10:cc:6c:
fa:a1:b2:85:06:65:54:b2:76:04:30:d2:c8:c7:06:
8b:f5:a4:b5:38:2c:ac:47:3d:0b:9f:d2:47:5f:d8:
79:0d:3c:65:8b:4b:29:cc:0f:62:db:fe:c6:52:fc:
7c:b5:e2:ab:cc:cd:97:75:7a:a0:0d:a5:d8:f0:09:
fb:98:3a:9c:a4:f7:ef:45:cb:a5:22:62:1f:f6:bb:
44:e7:f8:de:89:ec:45:28:8b:d5:c9:7e:d6:f4:11:
ca:b0:72:df:b8:32:13:4f:be:d2:1e:3d:b1:f5:6e:
70:6b:16:a4:6f:48:8d:b6:96:f9:37:c5:d9:ad:d6:
a4:d2:4b:72:33:6d:fc:6e:5f:7d:22:35:08:03:c9:
9d:2f:d9:47:7c:6a:82:21:cd:c7:eb:82:15:fe:d3:
d8:3e:6d:06:eb:98:bf:b3:65:f8:0e:da:e4:e7:5f:
5d:c3:b8:03:04:f0:ba:af:5d:b1:aa:93:78:8b:db:
a2:cb:bb:f2:36:c3:12:5d:d8:f8:8d:cb:44:ff:62:
8f:58:74:97:9d:ae:35:68:6a:28:97:63:bc:4c:3d:
30:b6:06:a5:60:57:97:f6:f3:2e:86:01:d7:d3:87:
a3:d1:eb:bc:8d:08:a6:21:a2:57:84:40:3b:7b:0c:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:D8:10:5D:CF:C6:05:CC:54:CA:ED:57:AA:B3:EC:E1:C6:CE:CD
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ff:67:d1:78:72:8d:86:c3:b1:e7:f0:db:56:cc:af:d7:06:
c1:fd:e5:d5:ca:3d:60:8b:95:b2:cd:45:f4:aa:47:0c:30:06:
77:98:11:4a:f6:4d:79:4d:8a:92:b1:e2:0f:b1:d8:4e:09:6f:
93:8e:d8:d3:31:bb:51:f2:f8:4b:eb:51:1c:0d:02:f4:09:22:
e7:36:06:35:f9:ac:83:4d:a9:c2:7d:50:7d:8a:30:04:5a:1d:
7d:4f:e2:8b:4b:ed:b3:f8:ad:fd:0b:4c:78:0b:ba:7b:fa:a6:
e0:8d:ac:0f:7c:5e:15:0d:e8:18:c3:e0:c3:49:c8:16:74:33:
fd:d1:fa:5b:27:53:28:a6:de:97:cf:50:d2:91:ce:12:07:fa:
18:88:9c:d2:8c:80:5a:c1:fb:4a:84:d4:ad:fb:04:de:cb:f2:
6e:7f:6c:c5:77:e9:cc:f2:b5:42:26:8d:d4:61:b7:4c:5f:40:
7c:39:b8:97:7a:c7:8d:65:41:4e:f3:a4:42:37:25:f4:78:2e:
bb:c3:1d:8a:2f:70:68:e1:7b:44:0f:e7:3c:2b:3a:c0:da:19:
21:dc:22:de:90:69:03:aa:97:2d:92:5a:db:ff:fc:4b:38:00:
ae:ab:b6:d1:85:5a:c1:56:30:6a:a8:cb:6c:08:6e:05:44:da:
cf:bf:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:22:07 2026 by rpki-client