Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: 5OwguXkUEGpQr0up2RmzzLMu71tlTw0P5GMZkmZ+ym8=
Subject key identifier: 3B:E1:20:63:9F:BB:78:46:63:96:F7:30:49:30:B1:8A:EC:2E:45:30
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01A0C36946184251ECEF9747758A2C42DC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 10:00:51 +0000
Manifest this update: Mon 21 Sep 2026 10:00:51 +0000
Manifest next update: Tue 22 Sep 2026 10:00:51 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: reA3m5ifSdddn00kl/JNXqrnqToa27WMTB7K4IdCttc=)
2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:46:18:42:51:ec:ef:97:47:75:8a:2c:42:dc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Sep 21 10:00:51 2026 GMT
Not After : Sep 22 10:00:51 2026 GMT
Subject: CN=3be120639fbb78466396f7304930b18aec2e4530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:42:7e:5d:ba:93:f6:d3:c5:99:18:e8:95:
09:23:dc:84:c3:9d:1c:57:03:c8:2e:b0:fd:2d:bb:
d7:24:9e:8c:a3:46:c4:26:72:a1:16:e0:72:03:41:
d1:85:95:b7:24:b9:c3:ff:9d:e2:ae:8d:6d:d5:c4:
88:a5:0a:5a:39:77:bd:5a:d5:ce:5b:60:97:89:0e:
d3:2c:53:f8:14:8f:b5:9e:57:52:e7:2e:cf:a0:5d:
10:a7:d6:d9:77:95:93:ed:d0:5f:9e:6d:8e:b8:d1:
f1:e8:f1:ec:f2:5e:61:df:fb:78:66:ec:46:d7:a7:
12:aa:b0:24:1f:ba:f2:e9:9b:cc:3c:83:c8:5a:9b:
ba:77:7a:67:39:88:ec:45:63:a7:21:da:4f:7c:1c:
25:ba:69:a9:0b:61:a2:84:55:c5:85:10:4f:7e:1f:
3c:e4:41:ec:a3:c3:e3:f4:2c:a6:79:57:14:c2:25:
db:66:a3:a3:ca:f3:de:2d:1b:73:14:44:07:f1:8a:
34:97:ed:fe:75:0f:a8:22:50:33:67:c2:a2:3e:fa:
69:ce:6b:ec:11:3e:cc:ea:58:10:1a:2e:1c:c9:8f:
7b:d4:7b:3b:f8:ec:75:ba:35:20:f2:2d:2b:05:0d:
b9:80:b0:ef:94:82:cf:9c:76:05:a6:f7:08:7f:32:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:20:63:9F:BB:78:46:63:96:F7:30:49:30:B1:8A:EC:2E:45:30
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:a1:e0:47:92:24:ae:50:2c:7a:5d:48:73:4d:08:55:0d:
62:c3:b5:f3:95:c8:ad:9f:ae:5d:01:ea:80:92:7b:cd:f2:54:
03:ff:a7:bc:f3:b5:4b:03:ac:a6:99:42:43:9a:fb:8b:91:2f:
2f:0f:75:6f:02:eb:b9:e2:3a:97:e9:51:c1:a5:6d:87:f5:c7:
a7:e4:f1:b5:7b:e0:07:53:57:81:b6:1a:34:95:9e:4b:e1:1a:
68:11:e8:9a:bd:31:60:c6:dd:9e:28:c4:bc:f1:93:51:c4:a9:
93:7b:4d:8e:93:28:b8:eb:29:78:97:2f:ed:a9:f0:c8:11:01:
1d:98:a2:fb:ec:64:8e:52:e1:b8:a6:40:47:a5:77:a7:66:be:
bf:72:6a:f8:18:a7:9d:f1:1f:db:23:52:a1:ec:c3:22:51:e0:
50:0d:bc:60:37:c2:8d:78:8a:10:4f:3a:a2:b8:63:7f:8b:6e:
68:45:fc:57:9b:ed:97:98:46:41:97:fc:42:22:05:ff:46:09:
30:7f:e0:5f:29:fe:e7:ec:e9:a0:28:b0:40:4a:ed:38:05:09:
0b:f7:f6:e7:70:db:53:8f:c3:82:1c:93:4d:68:90:1f:fd:5e:
22:87:fb:11:eb:6b:b8:24:c3:aa:16:2f:90:45:8d:4f:48:53:
ee:a4:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:27:50 2026 by rpki-client