Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
File: 8ZJhuvRuQzbW8EWjgwKAehURTyg.mft (raw, json)
Hash identifier: nrAIU5tYLkZTPlIUOmI/muAQpA3PH2ih7JIS3n+WRzs=
Subject key identifier: 95:A3:43:73:D2:61:B8:76:6D:A1:91:94:A0:81:87:AA:27:7C:D3:19
Authority key identifier: F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
Certificate issuer: /CN=f19261baf46e4336d6f045a38302807a15114f28
Certificate serial: 01A0BF1E72D82289F57972E44FB6069CFC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 14:00:38 +0000
Manifest this update: Sun 20 Sep 2026 14:00:38 +0000
Manifest next update: Mon 21 Sep 2026 14:00:38 +0000
Files and hashes: 1: 8ZJhuvRuQzbW8EWjgwKAehURTyg.crl (hash: 64Tn/Tao9nU81Hvx6tc8Sw3kUXsshBjz1gs0BZ1Wym8=)
2: AwjHZOUDzV2do1pKjQJTigNmWvY.asa (hash: AVjOvrWcyb3LLZ1yPyNBczaWWyURv9WbV2eyywQTRm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:72:d8:22:89:f5:79:72:e4:4f:b6:06:9c:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19261baf46e4336d6f045a38302807a15114f28
Validity
Not Before: Sep 20 14:00:38 2026 GMT
Not After : Sep 21 14:00:38 2026 GMT
Subject: CN=95a34373d261b8766da19194a08187aa277cd319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:44:d7:07:0c:da:1b:4a:bf:2b:94:b9:de:
52:aa:32:a9:70:08:9a:ef:10:13:bc:6b:75:30:66:
ab:87:5c:b4:de:1e:6f:cb:e6:1f:b3:81:8d:13:d1:
a9:4a:e2:2a:61:08:89:5c:f4:27:98:d1:c6:13:09:
45:fa:3e:50:20:c6:de:27:c5:11:c7:38:ae:6a:4e:
54:ee:9b:84:2a:d3:16:47:0c:8b:8a:54:b3:a1:d2:
f0:3b:57:ee:11:18:16:77:f9:e8:f6:01:eb:7a:b2:
f6:69:eb:6f:e2:c0:27:2f:58:4b:a5:cc:e1:fb:99:
76:d2:df:48:b2:9d:42:81:45:fd:5f:23:5a:32:d7:
80:7e:1d:ea:cb:77:bc:73:ea:20:4f:29:57:61:9b:
ee:0f:62:c4:6e:01:92:bf:eb:d0:c3:71:82:a7:c3:
e3:7b:4b:5e:2d:c9:34:60:40:44:a8:2f:47:b6:86:
ef:84:66:5d:d6:f9:f7:81:2a:f9:9b:0c:bc:eb:e8:
ac:64:6a:65:25:b4:73:b2:69:e6:b6:95:23:97:66:
7a:8f:12:c8:b2:dd:07:de:e4:a4:92:e1:ee:8d:80:
b8:a0:8e:a7:d4:f7:99:e4:89:0b:e5:cc:1a:82:bb:
73:86:c4:fe:6e:d5:a2:8a:9a:3b:06:e7:31:89:20:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:43:73:D2:61:B8:76:6D:A1:91:94:A0:81:87:AA:27:7C:D3:19
X509v3 Authority Key Identifier:
keyid:F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:b4:e9:97:c0:e7:85:7b:3b:8f:2d:97:5f:45:82:5e:21:
49:9d:8a:86:0f:f6:b4:66:ad:50:75:99:b8:8a:80:ed:da:2e:
d8:1f:51:9d:53:bc:ac:76:d1:2e:9b:bd:e6:a8:d8:72:0a:5a:
76:34:dd:02:36:91:cc:30:16:f7:57:a6:a1:d2:e7:81:27:e2:
40:55:e8:1d:e3:13:10:bb:5f:ad:5d:71:e9:90:a3:8d:2e:83:
a9:ab:29:e0:1e:cc:e1:b3:66:c6:92:56:e6:dc:97:a7:ef:d6:
53:38:06:ce:40:20:c3:1f:77:91:55:e8:d7:54:c9:8e:25:ea:
fc:68:b4:2f:a9:fd:cd:d6:1f:b4:52:bf:58:b7:b5:d3:fe:ac:
75:b4:83:6e:3e:a7:9d:97:c3:b4:be:f1:85:08:f2:6e:28:4f:
30:90:80:b1:38:e0:6f:f2:bf:06:8f:43:38:b5:88:40:a7:68:
ca:de:f6:29:2c:1e:6f:73:8f:92:3a:71:93:69:a5:11:a0:c0:
05:0b:b2:e9:a0:ef:80:8b:5c:fe:7c:86:9b:7c:97:0a:b4:68:
1f:f8:57:f6:30:3f:9b:51:07:8f:68:32:02:c6:1d:c9:3a:ec:
ba:b8:13:56:00:5a:7c:ae:73:da:b1:e8:8d:ad:49:8b:ed:1e:
6e:b0:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:59:14 2026 by rpki-client