Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: jo6SBvaCFc6rURLLy9K43cjrH5pzxmoOZRf/eCP6Gk0=
Subject key identifier: 7F:2C:F7:72:D0:2F:C9:62:9B:F7:AF:9B:AC:AA:94:3E:98:E7:46:B1
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 01A0C3699416741DF876ACDB214568A697DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 157A
Signing time: Mon 21 Sep 2026 10:01:11 +0000
Manifest this update: Mon 21 Sep 2026 10:01:11 +0000
Manifest next update: Tue 22 Sep 2026 10:01:11 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: jBojtI+x6D2KkmkMWJiVuiGOEizWwOc0a6gNXhM4bu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:94:16:74:1d:f8:76:ac:db:21:45:68:a6:97:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Sep 21 10:01:11 2026 GMT
Not After : Sep 22 10:01:11 2026 GMT
Subject: CN=7f2cf772d02fc9629bf7af9bacaa943e98e746b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:66:e0:b6:05:a7:25:33:aa:b0:bb:54:7c:
12:c4:bc:36:5e:77:63:27:f2:f4:da:64:d1:4e:aa:
44:e6:47:74:e2:e2:53:8c:22:99:1f:87:15:00:96:
01:0b:33:9e:c8:a7:ab:80:21:fd:09:9b:fa:99:24:
c5:5a:0b:b9:81:50:b6:41:00:c7:23:c4:76:2d:fa:
c9:53:50:92:f5:3f:e2:03:f9:e7:4d:fd:17:e3:f2:
cd:8d:f7:51:0a:0e:4c:6e:2c:e5:3e:b5:6a:49:f6:
ae:c9:5f:ce:4c:25:c1:e4:cb:b4:9f:7b:5a:74:7d:
c8:2d:03:2f:16:b7:68:cb:0b:2d:1c:91:83:75:0c:
1c:80:c3:15:e5:65:67:4e:08:cd:32:46:d3:34:e8:
65:ef:4d:aa:18:9d:0d:6e:27:bf:99:1e:f5:08:13:
bf:18:56:45:6c:e9:07:b0:fe:85:fc:15:ef:70:d5:
5f:24:4b:eb:32:59:f6:f3:fc:67:d7:a2:1d:f3:b9:
ef:bf:03:76:9c:65:e3:5b:b9:8f:53:a4:55:6e:23:
fe:d0:a8:f6:77:c7:be:22:49:e2:6c:04:c9:43:f8:
76:35:67:b1:c9:92:9d:a7:fa:86:6d:e7:ee:40:16:
6b:30:1b:d9:20:d3:12:8f:61:08:65:ab:81:47:e9:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2C:F7:72:D0:2F:C9:62:9B:F7:AF:9B:AC:AA:94:3E:98:E7:46:B1
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:2e:9d:db:63:5e:7b:76:02:8b:7b:90:4e:a0:bb:09:34:
e5:47:be:6d:80:f9:cc:a3:89:f3:dc:69:23:de:19:f6:61:d3:
40:cd:c9:fe:ac:b2:be:01:37:dd:46:0d:f9:d8:c1:e2:1a:cc:
e9:29:78:9f:da:08:09:e7:a0:44:5b:46:77:27:ba:13:4f:32:
1a:47:65:c5:b5:b8:79:7c:ec:07:41:a4:d3:c8:60:3e:b7:60:
44:60:cd:b7:87:a4:d7:94:21:d4:74:e6:7c:d2:a1:08:65:e7:
79:1b:8c:fe:07:18:77:9b:a5:e0:5b:74:38:cf:10:64:78:ea:
10:fe:cd:c4:92:2b:1d:4b:7f:54:17:ae:63:b2:4f:76:52:66:
1a:48:44:2b:88:1a:44:62:07:87:e4:97:e2:3b:10:c6:af:1e:
f1:4c:18:b1:26:62:df:07:20:15:b4:a8:a6:03:36:98:d4:97:
cf:d6:57:dc:3c:55:57:c1:45:1f:fe:31:b9:ef:e1:15:e0:e9:
e8:ea:70:8f:74:b3:00:2b:67:74:71:07:a0:ff:6e:83:0e:7e:
92:80:eb:6c:c4:04:e1:5d:02:aa:9d:8e:79:25:99:6c:00:9f:
10:40:c2:f6:05:56:14:3d:91:60:2b:8a:a0:3a:08:de:ad:8e:
95:f6:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:48:37 2026 by rpki-client