Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: StYCqfYhSN9/Xys1luUr7CWSQFFgTcAZjS9FawkAsAU=
Subject key identifier: 38:1D:6B:34:EC:35:C2:AA:1C:D5:40:D8:18:EC:A2:2C:10:95:81:39
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01A0DF86B248E38525222E02D344BF961085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 14D9
Signing time: Sat 26 Sep 2026 21:02:21 +0000
Manifest this update: Sat 26 Sep 2026 21:02:21 +0000
Manifest next update: Sun 27 Sep 2026 21:02:21 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: BEeYPhVxLOV8ivFiopunvMS09VpSweIsQU/qz4tv09o=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 21:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:b2:48:e3:85:25:22:2e:02:d3:44:bf:96:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Sep 26 21:02:21 2026 GMT
Not After : Sep 27 21:02:21 2026 GMT
Subject: CN=381d6b34ec35c2aa1cd540d818eca22c10958139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:24:48:93:f9:77:ed:58:14:4f:68:52:ee:
a2:d4:d3:93:8a:a7:56:ff:93:3c:63:12:02:1c:02:
64:5d:d6:ec:cf:34:66:70:af:05:ff:b6:1b:ce:ef:
fd:79:fa:0c:af:17:b7:b0:b4:ea:47:9a:57:68:0b:
f6:52:54:d3:3c:3f:58:26:96:49:1b:34:b4:3c:5b:
5b:43:c2:b2:d6:66:91:9f:74:29:e1:5a:f5:1c:88:
71:aa:e7:37:3b:e3:4d:9d:1d:01:87:c0:b5:18:5e:
8b:22:fc:68:e0:8d:c4:98:b7:df:ef:fe:0b:c6:f6:
a4:59:82:7b:1b:59:8c:83:56:b1:08:9c:45:24:78:
5a:18:83:0a:ad:dc:4e:f7:9f:94:ba:4e:47:27:f3:
d3:f9:f5:40:62:89:dc:97:c1:94:70:a8:0a:f4:12:
98:be:63:07:85:72:08:10:f7:6c:3f:9b:fd:e5:48:
11:cc:9b:88:91:45:f6:c7:53:83:12:51:96:e3:dc:
52:61:6a:fa:e4:6e:eb:b3:76:79:a3:dc:85:e5:45:
ef:09:7b:a5:22:2d:a6:ba:1a:2d:5c:73:0f:e1:55:
33:db:12:7f:e4:8b:a4:66:cc:82:f1:0d:4d:0b:a2:
1e:71:cb:d5:1c:48:87:cd:18:21:0a:21:a6:38:c6:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:6B:34:EC:35:C2:AA:1C:D5:40:D8:18:EC:A2:2C:10:95:81:39
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:eb:a2:2e:33:26:ca:18:d7:e3:8d:b4:a3:3a:37:ea:c5:
38:62:a9:ae:66:bf:db:de:b4:49:e2:28:31:c4:a8:6d:84:30:
c9:3e:90:17:d1:39:9e:66:4c:ab:43:56:dc:9c:57:ee:15:15:
ef:97:d5:38:4f:62:18:5a:9a:14:33:45:f0:d8:60:37:58:2e:
4e:40:00:c0:39:5d:fa:79:a0:57:5d:94:67:0b:a6:2f:4e:7a:
bc:d1:57:f3:8a:f8:ee:ff:9f:93:82:1a:ee:b7:81:3d:55:63:
4d:fb:a7:74:f1:61:e6:cd:a2:29:a6:bc:d7:11:f8:eb:4b:60:
08:e8:71:96:4a:38:69:9c:7b:97:d3:51:a9:f7:62:42:f5:67:
a1:52:4e:1a:52:93:0a:02:df:42:44:30:99:bc:d8:41:c6:94:
d9:3d:3f:77:de:15:ba:c6:cc:39:de:c9:30:02:91:cc:ed:7f:
e8:80:82:54:17:a5:e2:03:fc:03:5f:e4:06:a7:62:3b:f4:dc:
6d:4e:19:ed:33:93:ef:a2:24:1d:d7:81:d9:d3:62:7d:29:34:
2e:9f:34:fd:af:9f:f6:39:9f:82:e9:97:a8:22:3d:16:3b:c3:
04:3e:9f:9b:f1:9d:3a:e6:38:75:fd:4d:6c:c5:29:00:d5:d2:
15:5f:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:49:58 2026 by rpki-client