Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
File: 8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft (raw, json)
Hash identifier: tXImUG1fMuAlr3rR6IYiXjBujmUsXq0LnT2InBu3Amo=
Subject key identifier: 4D:0E:45:ED:9C:F5:D2:73:A6:CC:76:57:0D:70:89:D1:26:0A:65:E7
Authority key identifier: F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
Certificate issuer: /CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Certificate serial: 01A0C66B0D24AF7AADBF204D6E94601A3599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
Manifest number: 94
Signing time: Tue 22 Sep 2026 00:01:39 +0000
Manifest this update: Tue 22 Sep 2026 00:01:39 +0000
Manifest next update: Wed 23 Sep 2026 00:01:39 +0000
Files and hashes: 1: 8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl (hash: MVFBqwh1Ug42DlGDWXp4c0SYZARniRO9mQ9Lbs6ULfU=)
2: onax22orp9aPX6JBzkCEgQHEpK4.roa (hash: YkAqulV7jTa5rY8AeeKV4BLqEQTQB2lE7BiD7vGkE+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:0d:24:af:7a:ad:bf:20:4d:6e:94:60:1a:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d1f63dc123ec6a64cfc9562047d9ea02969c9a
Validity
Not Before: Sep 22 00:01:39 2026 GMT
Not After : Sep 23 00:01:39 2026 GMT
Subject: CN=4d0e45ed9cf5d273a6cc76570d7089d1260a65e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:48:a9:da:9e:37:f6:b7:d5:37:f6:42:73:
18:7f:00:cd:5d:1d:8b:29:dc:79:72:cd:9d:39:bc:
aa:7f:8c:67:8b:32:b1:da:3d:95:61:6e:92:7d:cf:
ca:83:1b:6d:34:79:aa:3d:12:bb:e9:7f:b4:1d:95:
0b:46:f1:28:35:1a:2c:c6:40:0c:c0:da:e7:a4:18:
2d:b9:6f:61:2d:47:82:29:26:96:93:27:b3:15:61:
be:18:a1:c8:3e:d9:e3:a7:50:d1:20:ba:cc:b3:b2:
5e:d6:dc:51:1a:ab:08:d3:c9:34:b5:30:fb:7f:f2:
98:1c:3e:41:c6:a2:4a:87:09:78:33:0b:5f:03:85:
e0:44:27:c2:0d:f9:31:67:4a:a4:3a:a2:31:50:15:
7d:99:26:2d:9d:c8:c3:5e:4d:20:f1:53:e9:69:37:
af:69:c1:72:1b:bc:55:2c:b8:34:c7:1f:f4:ff:61:
bf:84:63:97:04:cb:b6:d8:97:da:3c:d9:e5:b5:c6:
7d:8d:a2:be:de:d0:e1:ab:33:e3:a1:f5:c2:0b:0f:
57:d2:37:52:d4:93:73:42:df:36:a3:2d:99:41:4b:
a3:1d:bc:9a:62:41:2f:1a:a1:b5:fc:b7:2c:30:6c:
e2:46:c0:e1:57:33:d1:b0:da:94:2f:ee:82:51:b7:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0E:45:ED:9C:F5:D2:73:A6:CC:76:57:0D:70:89:D1:26:0A:65:E7
X509v3 Authority Key Identifier:
keyid:F1:D1:F6:3D:C1:23:EC:6A:64:CF:C9:56:20:47:D9:EA:02:96:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0e4922-e547-4559-b7a3-79962c0f4515/1/8dH2PcEj7Gpkz8lWIEfZ6gKWnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:be:f7:d1:a2:38:ed:ba:3a:4b:3a:5c:86:c7:7f:b6:e6:3b:
0c:b2:33:40:cc:8d:7d:08:de:48:8e:7b:66:a1:10:5c:70:3c:
02:94:f6:e7:f2:d2:c2:e9:31:0a:b1:f4:b5:b6:1a:98:9f:c9:
5b:94:b3:cb:16:81:80:94:79:74:b3:c1:03:12:91:53:f5:ef:
c1:05:05:26:3d:d6:2a:01:db:56:c9:d4:f4:c0:22:e6:11:e9:
52:de:4a:ca:ea:b6:1f:11:17:eb:98:f1:b4:47:43:ed:c3:80:
cd:62:c6:1a:88:f0:d7:60:ae:91:c1:47:ce:45:4c:52:53:61:
48:a0:66:e9:2f:9f:1d:db:32:ba:25:3d:34:3a:b0:30:1e:41:
25:d2:2a:ff:6a:6e:9c:6d:28:ae:bb:16:ff:08:e5:ff:ec:96:
bc:d9:8e:6d:c1:84:8f:d9:12:44:04:88:a2:6f:f1:dd:f5:ad:
b3:cd:25:66:7d:ec:70:be:87:dd:4e:93:7b:44:fa:75:5b:2d:
78:d2:3a:52:2c:b3:86:5c:3a:a5:d8:7b:2c:79:69:34:77:57:
b1:5c:20:b8:23:ca:38:2e:1a:6d:ee:5e:d9:2d:bd:99:34:91:
00:23:77:ce:66:be:88:80:0c:9f:a2:99:e5:85:b0:cf:c6:b3:
95:f7:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:58 2026 by rpki-client