Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: D2q+x4rirOKPpzmavnvWFMfTarMFJNixcnjc/nC2gRM=
Subject key identifier: 08:87:FF:79:62:03:FB:EF:EE:6C:B1:F5:5B:00:12:9B:D1:F3:EC:1E
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 01A0C21F662C91384D7CD3E92D6073D79B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 11E8
Signing time: Mon 21 Sep 2026 04:00:32 +0000
Manifest this update: Mon 21 Sep 2026 04:00:32 +0000
Manifest next update: Tue 22 Sep 2026 04:00:32 +0000
Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: LhYgp93hbtbU3Xxk0PcKFZ+yXgSOSlsEzJz4PfEX2a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:66:2c:91:38:4d:7c:d3:e9:2d:60:73:d7:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Sep 21 04:00:32 2026 GMT
Not After : Sep 22 04:00:32 2026 GMT
Subject: CN=0887ff796203fbefee6cb1f55b00129bd1f3ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:15:0e:5a:ef:71:7f:b4:70:47:f6:5e:7a:
41:83:49:2d:7a:2c:ce:8f:d1:ba:d7:c4:96:fa:5f:
ec:04:05:c8:24:f8:c9:7f:c3:dc:b3:16:e3:e1:22:
64:ed:49:df:f1:1f:53:71:65:e0:38:b3:27:1b:53:
8b:f6:d0:59:3f:f6:67:6b:d9:3f:c2:52:27:8b:7f:
af:7d:c8:fe:81:be:bb:7e:49:f8:11:5c:ab:01:a2:
e2:5a:e8:32:4b:eb:d8:3a:04:06:86:b6:98:52:14:
70:da:e5:a7:41:2a:75:95:67:fe:fc:a2:55:4c:7e:
a4:53:6b:83:8c:1a:d8:80:e6:3e:e2:f8:79:f3:7c:
df:2f:66:07:30:12:7d:50:b8:1f:82:bc:30:80:2d:
f5:d8:4d:67:43:6c:a4:88:dd:a3:e5:c4:89:bd:eb:
61:b0:5b:c4:ab:b9:fb:74:7b:25:d1:96:dc:df:8c:
6d:e3:34:8a:40:42:d1:92:b3:ee:0b:40:08:59:f8:
be:d9:01:89:26:df:76:9e:16:86:00:f5:c3:fe:29:
4c:1d:c3:79:b0:55:74:3d:24:c9:9c:79:8c:9d:70:
df:e0:2b:4e:32:cc:28:14:81:8b:dd:38:b0:f3:98:
cd:a2:62:38:60:21:e5:f9:19:41:73:09:fc:27:a3:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:FF:79:62:03:FB:EF:EE:6C:B1:F5:5B:00:12:9B:D1:F3:EC:1E
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:af:18:80:b7:bd:66:f0:a4:3d:9c:d2:98:a6:5e:6e:c5:d4:
64:b0:9c:1a:a7:31:31:43:77:74:16:c8:49:b9:13:42:68:7e:
0e:55:9d:6b:d6:c9:dc:07:18:cb:fb:74:22:5f:d3:03:91:7f:
01:8e:11:36:2b:66:f1:52:8a:67:9c:f0:2a:6b:9a:18:6c:28:
50:bb:78:e1:19:b4:d4:0c:02:9c:3d:b9:61:11:2e:26:6f:7c:
e3:96:bd:92:63:22:64:5a:ef:8d:c6:f6:91:3d:72:af:44:bd:
22:7c:4a:5b:2c:cb:8c:29:f5:b2:20:08:81:50:2c:1f:d5:7b:
b8:f8:ba:b7:c0:0e:b3:a6:be:34:99:d3:c2:6b:0d:06:47:8d:
88:ce:7e:ab:79:92:5e:ba:e8:24:0c:0e:bc:27:6d:86:61:02:
fa:77:5f:74:1e:5e:4f:42:2e:36:0b:b7:24:9d:c6:4e:63:bf:
11:5a:d8:fb:b6:d0:b6:63:9d:98:4e:a6:4b:0d:8d:dd:22:7d:
ad:e3:dd:21:55:a1:a3:75:2f:19:50:fe:30:b0:1a:6a:1f:37:
a2:96:cb:7c:29:e8:dc:be:7b:eb:80:75:1a:ca:62:5c:a4:0b:
af:7e:57:30:58:9b:d7:7e:6f:34:6d:41:7a:0b:55:be:76:6a:
a8:e5:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:42:05 2026 by rpki-client