Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: V5JIB79FPlZ2JDOtnmyk7B+/9UbZRCvrkUPihLoKgh4=
Subject key identifier: 2F:C5:E3:EA:60:49:E3:2D:27:CD:72:EC:08:8C:73:5A:84:7F:EA:A7
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 01A0C5C58D0EB982DD506DC5CD5197FCE58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: 0400
Signing time: Mon 21 Sep 2026 21:00:53 +0000
Manifest this update: Mon 21 Sep 2026 21:00:53 +0000
Manifest next update: Tue 22 Sep 2026 21:00:53 +0000
Files and hashes: 1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: DKTvaDFGQqeIaHHhIInjXjEzDpQch8LzgB8ErIIDieY=)
2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
3: dHpkVz1qG-AF-2ObL_WKlgFCa5A.roa (hash: pDto/Hqi4osJfNZa1fOxjtdmxoHJy3MfMIgMhgvqHY8=)
4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:8d:0e:b9:82:dd:50:6d:c5:cd:51:97:fc:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Sep 21 21:00:53 2026 GMT
Not After : Sep 22 21:00:53 2026 GMT
Subject: CN=2fc5e3ea6049e32d27cd72ec088c735a847feaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:80:67:f6:7e:64:27:f0:c3:93:46:7f:ef:
59:d1:83:1a:88:6c:bb:59:5d:df:9a:1d:5e:aa:7c:
4c:93:a2:94:ce:73:69:ed:37:86:be:21:d1:af:88:
a0:ca:cd:c8:7d:17:57:5a:8e:0d:c9:20:f4:92:b9:
8d:d8:97:8f:9b:81:c2:74:11:8f:e5:99:a8:be:25:
56:e8:e2:6f:28:d2:dd:6c:74:5d:6f:7b:e6:1e:52:
84:85:35:4a:a7:26:d4:36:f1:7c:f8:14:1a:cb:27:
ed:6d:1b:75:44:9a:37:80:63:ba:76:f2:9f:a4:66:
23:95:f1:39:48:ec:4c:fe:fd:de:2b:68:2c:ff:11:
28:3c:21:e0:0f:7d:0d:bd:13:90:32:6c:be:9f:df:
67:19:ff:3f:db:30:3a:cf:af:f2:ad:5e:69:6a:8b:
06:0b:6d:87:7f:4d:2e:98:d2:a6:9f:82:67:97:cb:
ae:ac:76:1e:1c:7d:eb:b9:66:72:cc:38:76:44:45:
a6:92:46:e2:b5:af:38:90:a8:0f:6c:fe:d2:63:d8:
35:28:ee:a0:3e:83:6c:a6:df:74:8e:7f:6e:13:88:
7c:ab:ed:3d:98:b3:36:b6:71:2d:a9:c4:35:4a:f1:
aa:ab:79:23:d4:9e:ea:e4:48:0e:24:95:7c:08:a7:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:E3:EA:60:49:E3:2D:27:CD:72:EC:08:8C:73:5A:84:7F:EA:A7
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:33:c5:5e:02:66:5a:91:25:a9:9a:aa:74:40:cd:2a:61:da:
d6:b2:3a:cb:72:d1:06:2e:d3:be:74:50:0d:80:8a:ba:7f:67:
dd:4d:e0:21:a1:b8:1f:a6:77:8b:cb:27:59:56:c5:23:d1:32:
79:58:4d:23:75:a9:72:cc:5e:4d:2b:f8:1b:83:f5:77:0b:33:
db:9f:6b:d4:57:ac:fd:83:ff:22:5a:a1:23:9f:82:66:2a:73:
9f:aa:22:9a:22:4a:9e:59:3e:ac:de:f4:b9:2a:8e:c7:05:39:
28:7d:4f:5c:29:69:88:c8:4a:ce:5f:fe:1a:4b:81:ca:7c:bd:
55:08:e5:11:dc:e4:b4:4a:ce:99:b0:7e:d5:34:b8:ea:8e:1b:
20:22:da:ad:c9:7c:f8:a9:62:db:92:78:30:8b:68:13:75:8a:
21:74:f1:8a:ae:7f:a9:dc:a4:46:a9:91:bd:b3:dd:5b:be:bc:
39:85:43:83:e2:dc:d1:bb:3e:78:28:37:bf:8f:95:f5:1b:be:
2b:01:bf:9f:d5:40:70:bf:4b:9f:73:6a:24:87:e2:49:47:98:
65:c2:93:49:bf:0e:fc:1c:e8:32:c7:d7:56:e1:7a:1f:62:f9:
73:80:54:81:41:c7:53:f6:ce:71:27:4c:6f:00:d6:57:d0:5a:
a7:69:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:45:43 2026 by rpki-client