Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: vCFjwNDHDwHQgbzuuITTN2ZcQXCEBHM/P0+rioHtRAU=
Subject key identifier: 07:32:E8:29:76:A3:2B:62:5A:44:29:83:D2:51:B6:B3:79:67:A8:32
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01A0C030F58DE19A4F241D441BF5E0ADBDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0B24
Signing time: Sun 20 Sep 2026 19:00:29 +0000
Manifest this update: Sun 20 Sep 2026 19:00:29 +0000
Manifest next update: Mon 21 Sep 2026 19:00:29 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: ZHn+PcwVBncDYua7hTYLz+akARMv/QeBYoHmJOj0s/Y=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:f5:8d:e1:9a:4f:24:1d:44:1b:f5:e0:ad:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Sep 20 19:00:29 2026 GMT
Not After : Sep 21 19:00:29 2026 GMT
Subject: CN=0732e82976a32b625a442983d251b6b37967a832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:44:36:8b:6f:81:7d:2c:7b:df:f5:90:f3:
54:a8:d4:bc:e6:3e:c0:10:8f:56:34:95:e6:a1:00:
e0:16:8f:89:90:01:29:95:ec:6e:92:9e:60:0e:b7:
50:7c:43:b8:fc:65:6e:d0:01:01:16:a2:e3:0f:13:
4e:40:46:ee:28:ed:eb:04:64:f6:bc:6f:36:cb:0c:
0b:75:35:ef:2f:c1:6b:68:60:18:99:49:e9:48:f8:
3d:48:4c:eb:31:e9:7d:03:5a:62:7b:a7:51:89:f3:
0e:9c:ab:09:b1:19:c7:3f:06:3b:fb:2b:de:7e:36:
8a:73:57:76:c5:6d:2b:f4:f4:02:70:3e:91:b2:18:
c2:e6:87:00:33:65:40:a1:f7:64:89:ad:fc:e3:2c:
e3:30:ae:9f:f7:0a:1b:ca:b2:45:a5:8d:65:d8:ca:
34:75:65:ca:f8:21:54:21:9d:2d:b3:5a:89:e1:57:
0f:c0:0f:ae:16:58:b4:5a:83:ca:8f:f2:dd:dd:27:
57:93:f2:16:da:41:d3:d6:b1:73:19:2c:d1:b1:35:
bb:1c:a5:9b:30:53:b1:60:9d:4c:5e:ea:f9:eb:2b:
2d:33:54:dd:d9:2f:4b:e1:85:a6:77:13:3f:25:e8:
18:1d:0f:80:03:c8:09:07:fc:e8:a2:20:63:77:f5:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:32:E8:29:76:A3:2B:62:5A:44:29:83:D2:51:B6:B3:79:67:A8:32
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:23:c5:10:e6:70:f7:40:cc:71:18:44:dd:35:f6:c2:6f:
eb:f4:b8:6c:61:8c:1f:d9:a1:35:0e:fe:17:e6:14:62:9c:5f:
67:cb:2d:23:22:4b:e9:d3:60:d4:58:25:b3:36:63:db:d3:b7:
9e:c4:19:74:99:ba:78:6b:4d:85:9a:b1:d6:88:44:88:9e:b3:
f1:d7:88:e4:ea:4e:4e:3f:fc:4b:dd:7e:32:a6:65:ec:33:cf:
ee:67:26:da:27:68:3a:5a:12:be:92:c9:c7:56:b3:e1:93:c1:
ff:e3:87:bb:c2:87:70:08:ae:f8:86:67:5a:86:8b:3c:79:1d:
ee:15:c5:4c:4e:79:ef:f9:06:ca:80:a1:8a:3e:e1:f3:ae:ab:
21:c3:4c:e5:6f:b2:34:5e:ee:74:80:32:e0:c6:c8:e1:0d:f0:
0b:8a:e5:cc:7b:0b:bb:6c:8a:7c:49:1b:9b:4d:2d:9c:1d:14:
1a:99:b9:b7:38:f9:18:8d:7e:79:a5:b5:9a:b4:47:03:5c:1b:
ba:47:ef:3e:e0:94:b3:fe:0a:cf:03:4e:1d:27:4e:c9:16:40:
55:1b:2f:02:68:62:55:1d:b4:65:aa:c1:ba:e9:72:92:82:3a:
39:90:7e:ca:d0:96:83:d4:11:5b:f9:9d:32:e1:12:7c:c9:a5:
b8:85:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:38:12 2026 by rpki-client