Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: npE014pWaYa2W3Lk41lN9Z3WXeIsAe3fm6z3DTaMlqA=
Subject key identifier: B7:02:31:12:0B:51:FC:46:89:26:E3:29:CB:27:85:AC:1B:1E:90:51
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 01A0BF8BECFC21DF5A9B9C1D686A0C1F5DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 0560
Signing time: Sun 20 Sep 2026 16:00:13 +0000
Manifest this update: Sun 20 Sep 2026 16:00:13 +0000
Manifest next update: Mon 21 Sep 2026 16:00:13 +0000
Files and hashes: 1: 2Hs9aa1I0dVAskh3I_aeTMJXodA.roa (hash: JzxtpS1vvjv40uhd6+QibW7QaKJAzvJMXoecvkNc+LA=)
2: 3kbLc8Qk98OS36Cuqlqi4eSPbog.asa (hash: bH2DofWxw53VbIJoPIQA9QesqLdSY99Ym1sD2aUGFFU=)
3: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: Yb/2I+Fae4n+0Bk40E0Dz2IGX/KS76KaaoX2Ph8oXP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8b:ec:fc:21:df:5a:9b:9c:1d:68:6a:0c:1f:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Sep 20 16:00:13 2026 GMT
Not After : Sep 21 16:00:13 2026 GMT
Subject: CN=b70231120b51fc468926e329cb2785ac1b1e9051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:3e:16:dd:d5:cf:f0:45:05:56:8c:0f:2e:
f2:c7:60:4e:fb:81:6f:c8:bc:32:8f:2a:7d:41:9d:
2e:10:63:8f:6d:b1:de:46:d9:87:57:6f:3e:8f:9c:
1e:83:59:91:1e:22:2a:ed:27:1b:6f:22:87:86:e1:
27:4e:48:f6:ee:a0:ea:36:7e:d1:0c:0d:a4:01:4e:
76:18:0d:14:2f:ad:7d:24:87:43:c0:ac:94:3b:4c:
c4:88:e5:a8:19:dd:88:fc:61:61:32:4c:fd:54:5d:
d5:6f:75:6d:de:9c:b8:66:70:7c:19:75:cf:2a:0b:
6a:86:f1:e9:6e:b5:4e:08:fa:39:ac:d1:bf:c8:95:
ed:55:10:fe:13:24:c4:3e:05:6f:da:07:bd:0b:2f:
40:4d:0d:13:92:bb:4f:7b:e9:d8:3d:f5:30:44:a9:
8e:ed:cb:71:71:5e:23:4a:d2:4f:80:e1:af:99:52:
1d:b8:0c:f8:67:ac:49:6f:ad:64:46:9f:3d:c9:b4:
7e:10:31:3d:9f:55:a8:db:32:ba:31:6a:33:ea:64:
cb:37:12:20:68:c9:68:16:ea:05:aa:25:98:31:37:
e2:e6:67:8b:6e:b2:c0:b1:c0:25:4c:3b:d0:15:a0:
0a:84:16:b4:82:78:5c:6f:be:c7:08:65:a3:69:5e:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:31:12:0B:51:FC:46:89:26:E3:29:CB:27:85:AC:1B:1E:90:51
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:11:8b:b9:cf:2a:cf:11:8e:d5:e2:b6:75:e9:17:37:e7:97:
c4:d0:50:ea:ae:a4:c3:10:18:94:e4:3b:b7:ee:e0:57:6c:6f:
4d:5c:28:05:ab:d7:4f:ba:34:b6:7f:ee:84:40:54:5c:a3:57:
f8:5b:8c:ba:6f:99:24:22:60:fe:51:43:22:b9:e1:db:35:8b:
66:54:12:ac:39:dc:d8:84:bf:3d:a6:64:f6:b5:2d:a1:f5:5e:
7e:51:0a:ea:e0:08:5f:12:6f:b3:f0:24:60:9a:cd:38:8c:61:
51:c9:a2:bd:6e:44:97:03:7e:d4:16:3d:f5:d7:14:94:60:7a:
90:6e:06:02:32:8e:ba:73:82:a4:65:7e:1b:d9:6c:b0:a1:7d:
36:25:ab:83:78:36:cb:b4:df:c4:e9:19:03:2e:92:31:b0:5e:
c3:05:ae:5b:af:48:64:58:3e:e0:ad:93:01:bc:b7:bc:6b:e5:
e3:36:4c:90:cd:97:0d:39:b9:32:db:ee:d7:01:bb:ca:36:38:
44:a0:b7:9c:48:23:da:de:42:58:aa:20:35:1c:9e:0b:1e:0e:
34:99:bd:22:56:66:69:2b:62:60:b7:66:31:84:7a:2b:ae:af:
be:5a:c3:30:fd:07:32:b1:4b:4d:7d:56:92:3b:e0:9b:91:7e:
e3:ec:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:20:36 2026 by rpki-client