Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: a9Gqj2xUfKThaylMgIbmTJH4II6xgD7ohcyG51X0z18=
Subject key identifier: 99:6D:E7:92:99:20:7B:F6:B8:78:75:69:E3:5C:43:BD:7D:96:E6:80
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01A0C77C9F3233F0E65FD4EB947144C73986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0EFD
Signing time: Tue 22 Sep 2026 05:00:28 +0000
Manifest this update: Tue 22 Sep 2026 05:00:28 +0000
Manifest next update: Wed 23 Sep 2026 05:00:28 +0000
Files and hashes: 1: 8X-vY96aKKHfj_txGbHwT7KRdWc.roa (hash: 0WIWIIW0b9953A6VR0CU69w8OMoDd9V6tcRbkVExZv4=)
2: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: HA7VqfCjxebiUqt1hUpL4657kv+NOzt2IXi2BxNZsJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:9f:32:33:f0:e6:5f:d4:eb:94:71:44:c7:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Sep 22 05:00:28 2026 GMT
Not After : Sep 23 05:00:28 2026 GMT
Subject: CN=996de79299207bf6b8787569e35c43bd7d96e680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:ac:ba:ce:ad:a6:8d:0c:8b:00:92:c5:56:
d5:96:95:f2:4d:48:94:aa:52:41:48:24:38:38:77:
0b:eb:fe:db:5e:ee:82:70:38:96:13:05:cb:63:bd:
63:07:f9:73:9f:3e:80:35:cc:42:56:af:2c:ab:3b:
d1:da:b2:1e:06:6e:d7:ac:ac:01:1e:f9:d6:34:d7:
a6:ac:a0:60:c0:4e:bb:e7:fc:3c:47:27:56:23:b0:
91:9b:3a:48:c7:bc:b6:4a:ed:27:56:3f:ef:28:c1:
65:50:76:2c:f4:25:82:d1:2b:76:ce:cf:1b:5f:c7:
8c:b2:80:0d:41:55:37:76:67:1b:a4:f5:17:f2:de:
e8:d7:38:f9:01:4b:0b:fe:69:1b:ad:54:c3:3f:52:
27:d6:94:44:14:30:fd:4c:b2:1f:3a:6b:06:50:83:
07:f4:8a:50:fa:32:9f:d4:cc:e4:11:8f:38:6c:fd:
b6:59:68:45:77:25:d0:1f:95:31:41:47:97:95:b3:
0a:48:ff:6d:42:32:b8:37:c3:4f:a9:bd:9f:7a:73:
a5:45:8d:8a:8d:3c:50:45:02:b6:fc:f7:9f:aa:4a:
ff:86:40:ff:4e:2a:c9:f0:22:79:1c:7b:ee:0f:de:
c9:61:c0:cb:a5:de:03:e8:98:ab:22:e7:b7:4e:7f:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6D:E7:92:99:20:7B:F6:B8:78:75:69:E3:5C:43:BD:7D:96:E6:80
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:ce:83:95:58:27:1d:e5:02:f8:b4:c9:b2:9f:7d:46:60:
eb:15:c8:ab:8d:cb:8e:10:7d:ff:0d:ed:07:40:24:ee:47:23:
66:bc:1e:ab:04:b0:23:e8:77:f4:79:c2:68:de:55:01:c8:31:
45:a4:5d:28:8a:12:ef:9a:39:cd:8f:3f:1c:26:ac:0a:c4:01:
d5:8f:2c:88:65:47:7a:6c:74:76:5f:56:07:f0:32:c5:ae:53:
96:03:48:9c:41:64:9a:5b:c1:5f:16:f9:23:c7:77:8c:01:62:
47:56:d7:6b:e1:c8:5a:94:08:d7:95:bd:e4:c0:80:fb:a8:6a:
71:b8:69:e3:9e:5f:b9:da:76:18:06:06:c7:0c:d0:b5:18:a2:
96:20:02:4f:12:26:7f:f2:42:50:6c:e6:7f:d4:b3:ae:fc:8a:
0d:ab:86:73:57:55:88:3d:8c:43:95:95:be:b7:50:3e:15:b4:
36:19:2e:51:9c:35:8c:c8:bb:a5:22:f2:46:62:46:21:93:74:
fe:e0:07:f3:bc:dc:9f:04:a1:6b:d9:d9:d3:93:5c:30:05:b1:
1c:14:aa:7f:e9:d7:cd:6c:b1:2e:fc:fa:74:1f:fb:0e:2c:6e:
0b:24:5a:4e:89:8d:34:2b:bb:13:0f:33:f9:4b:bc:ac:e1:25:
ae:7f:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:39 2026 by rpki-client