Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier: Hf4RAsLFBiAQjZ8C4ASLWAChy3NiRFvdB+s+gA8dGuQ=
Subject key identifier: 6A:88:88:61:72:4B:AC:9D:EA:74:6E:47:E7:1C:80:F1:07:15:96:93
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 01A0D8A8DF52FA6CC7594706065B8D8DDF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number: 1A27
Signing time: Fri 25 Sep 2026 13:02:20 +0000
Manifest this update: Fri 25 Sep 2026 13:02:20 +0000
Manifest next update: Sat 26 Sep 2026 13:02:20 +0000
Files and hashes: 1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: jzgIDRBuihhXYwT0YlhVKlYCH6URl6haerAPbiBaWc0=)
3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:df:52:fa:6c:c7:59:47:06:06:5b:8d:8d:df:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Sep 25 13:02:20 2026 GMT
Not After : Sep 26 13:02:20 2026 GMT
Subject: CN=6a888861724bac9dea746e47e71c80f107159693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:96:04:a1:27:ac:43:90:29:2b:5b:f0:c1:
6a:28:da:d2:e6:8f:32:41:e9:17:75:51:d8:37:1f:
a9:ab:e7:c9:e7:89:bd:11:21:db:87:ed:a7:f9:46:
bd:38:82:4a:5a:4f:e5:e6:c7:a1:38:40:34:a8:74:
a0:8e:d8:93:51:1a:9b:33:6e:f0:bf:74:40:6a:46:
a1:d2:06:a4:33:38:7f:56:42:c2:6b:bf:5f:e2:61:
3b:a4:16:21:76:13:56:12:59:f7:e4:8b:a0:54:13:
69:c9:cd:29:ae:9d:3d:28:08:96:81:e4:3d:06:71:
e6:77:e5:56:3c:24:f0:ff:f3:3f:f3:af:74:ff:81:
68:99:b5:75:a4:32:bd:58:68:fd:a1:53:b8:85:7b:
ea:77:b4:6c:b2:6e:93:aa:c8:a5:7b:62:56:11:27:
bc:5b:2a:e4:d8:c7:c7:71:13:6f:17:11:8e:19:9f:
22:ad:7b:3d:7a:0c:47:81:c4:b9:8d:d0:26:3b:46:
47:74:5f:69:9a:26:df:0c:9c:aa:2b:92:7a:74:bc:
12:86:46:75:d4:8c:b9:e1:70:15:a3:9e:fb:f4:35:
4d:d3:98:74:32:e0:a7:61:29:d4:4d:70:38:a9:12:
7b:e1:b6:13:ad:9a:ef:a5:e0:d2:7a:fb:66:5b:2c:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:88:88:61:72:4B:AC:9D:EA:74:6E:47:E7:1C:80:F1:07:15:96:93
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:a3:a5:0e:7b:f6:08:3d:2c:14:dd:4c:91:88:ad:83:f5:
41:16:a7:15:a4:db:a7:21:65:42:2e:29:56:81:48:06:45:76:
67:bb:ba:7c:8a:23:f8:63:2b:b5:07:82:b9:1a:f0:d8:5b:92:
15:08:97:bc:e9:e5:c9:ad:ed:ad:2d:d7:ef:a5:0b:5d:ee:df:
3f:99:a5:00:13:b3:20:74:30:ed:35:d8:aa:84:45:1b:a3:d4:
a7:4a:38:0c:f5:3a:73:c5:1f:93:16:3a:2f:82:ce:79:c9:1e:
25:84:ae:dd:f9:3b:4c:30:6f:38:17:b7:54:2d:eb:81:84:af:
9b:a2:46:ee:b1:55:f2:68:ee:59:f3:ec:61:61:6c:22:49:43:
85:55:92:0f:b0:b7:d9:d3:95:9c:10:8e:07:dc:12:c0:70:ca:
11:0c:8f:1c:1a:5c:62:09:8c:a2:17:53:6b:64:4c:ae:c3:b2:
25:a5:59:39:a9:54:30:79:2d:d0:c9:40:d0:0d:ed:cb:25:99:
a2:b1:1b:16:63:78:3a:a2:c8:3a:ac:6e:fd:a2:13:14:ff:24:
e9:65:2d:93:c8:6b:f9:f3:ce:be:b9:9c:f4:c9:58:f1:7c:6b:
bb:fa:5c:0b:cf:7b:b6:27:bd:d9:59:2a:ba:12:b4:7e:02:0b:
ad:0d:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:42 2026 by rpki-client