Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: yL3y5zxiKltb9td/kQuqitVopIIbCo8/B0HXiy+Ht4w=
Subject key identifier: D7:7E:01:37:81:3E:55:B4:F6:CD:79:17:10:AD:31:8C:58:28:44:D2
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 01A0C2FB9EF36A42CAD5698F5395C445A80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 115E
Signing time: Mon 21 Sep 2026 08:01:04 +0000
Manifest this update: Mon 21 Sep 2026 08:01:04 +0000
Manifest next update: Tue 22 Sep 2026 08:01:04 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: P/Dekjh9kCoaxTdsrWtx97I9Yeb53TUbA0WsTn2X268=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:9e:f3:6a:42:ca:d5:69:8f:53:95:c4:45:a8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Sep 21 08:01:04 2026 GMT
Not After : Sep 22 08:01:04 2026 GMT
Subject: CN=d77e0137813e55b4f6cd791710ad318c582844d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:d7:ae:74:04:b8:c4:73:58:16:64:c2:c6:
69:87:25:55:f4:2b:6c:81:3c:5e:ac:75:af:d9:b2:
b0:5d:7a:19:1c:39:82:0d:79:5f:1a:9b:8a:94:88:
02:85:18:49:95:25:27:7e:08:b0:53:63:94:7f:04:
ed:ee:79:e2:b3:24:2d:d9:29:e3:9a:5a:a2:78:bb:
35:36:ed:74:34:80:dc:e2:95:c4:af:35:e9:e9:23:
b7:3e:3a:f0:ee:7c:cb:ef:50:51:8b:6b:96:25:4d:
fa:d9:f9:aa:45:88:c5:31:f8:4c:a7:e1:01:e2:01:
46:f2:d7:6c:f8:49:5b:f7:fa:05:2f:c9:d6:d9:2d:
85:d1:e2:50:96:21:19:b6:87:42:e1:05:1e:a2:85:
d0:30:57:bd:23:12:24:f3:8b:ba:03:ab:e8:6b:45:
bb:31:57:4c:4a:c9:83:2c:60:3d:0d:ce:71:9e:d3:
72:f2:f9:fc:be:e6:10:44:f5:f8:90:e8:2d:be:f6:
4d:f4:23:11:18:73:9e:1d:76:c8:c1:93:be:b7:d5:
46:58:5a:25:b7:71:d5:07:9d:61:ba:f4:28:0e:c3:
ca:9d:9a:da:77:e4:8a:2a:1b:39:54:0f:f5:0f:dc:
f0:54:1d:7d:4b:a6:56:26:57:30:a3:d4:e1:ca:61:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:01:37:81:3E:55:B4:F6:CD:79:17:10:AD:31:8C:58:28:44:D2
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:4c:88:d9:a9:22:94:30:c7:82:85:fa:33:cb:f6:b2:5b:5e:
f6:05:d0:8e:22:74:98:59:f4:a8:f2:87:b2:2b:4b:47:8d:a7:
4d:10:63:64:c8:aa:6b:5a:5f:3b:21:40:c6:a0:1a:c7:68:6d:
f4:ed:35:6a:60:94:30:7a:42:0f:6d:cc:8f:7a:d0:a7:5d:0f:
34:70:89:16:5e:13:c5:f0:3b:8a:b4:19:b9:8f:7b:02:8a:7d:
6e:c1:2c:c2:9e:07:8a:ce:60:0b:38:91:1d:35:af:3b:89:e7:
b1:bc:5b:5a:ee:b0:5c:55:4c:06:4c:35:5c:ab:d9:38:d4:5c:
4a:9b:f4:e0:68:a3:a9:38:ed:90:3a:46:88:63:bf:7c:1f:cd:
ed:8e:42:1b:b7:5a:9a:0e:33:da:1b:de:88:88:78:b3:e8:7f:
18:ce:ba:39:d4:25:85:11:eb:0c:00:18:eb:73:e9:a5:96:21:
e0:1d:e6:b0:25:30:30:cd:6e:00:1b:32:13:00:1f:e0:b0:23:
a4:9c:51:37:4e:77:72:05:43:54:fc:6a:80:4d:53:65:ce:e5:
cb:98:8d:20:df:01:6d:b7:23:45:00:05:56:86:a6:1d:95:43:
b6:1c:d9:14:0d:32:90:f3:8c:2a:bd:23:03:71:e9:44:25:cc:
00:cf:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:31 2026 by rpki-client