Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: LgU1Wf30lA3yy/8/ZARTeN/MI3rOJ1aaaUUxs/dcuck=
Subject key identifier: 5B:A5:54:9C:44:3E:D7:CB:BB:7B:08:F6:61:2F:82:D9:99:8E:07:DD
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01A0C8C628E1FAD648A185B0D80C7159F978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 11:00:24 +0000
Manifest this update: Tue 22 Sep 2026 11:00:24 +0000
Manifest next update: Wed 23 Sep 2026 11:00:24 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: /peDQVZOG2oMQVEDkvhDzGFiZoMFc9Ka2z53tAwIwcc=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:28:e1:fa:d6:48:a1:85:b0:d8:0c:71:59:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Sep 22 11:00:24 2026 GMT
Not After : Sep 23 11:00:24 2026 GMT
Subject: CN=5ba5549c443ed7cbbb7b08f6612f82d9998e07dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:3c:69:a5:5a:f2:90:bf:15:c3:8d:5c:54:
a1:92:7b:00:14:38:a8:3a:a8:36:78:56:66:b3:6a:
8e:de:33:6c:7b:51:a1:48:a0:c1:1a:c1:f1:a6:18:
2f:d2:f6:74:ed:6f:fa:2a:5c:fc:86:0b:a3:32:a9:
04:37:ea:79:ae:f6:8b:a2:4c:6c:a8:40:7f:68:f5:
53:cd:39:90:d6:24:e5:10:b9:ed:f8:e6:ff:00:4f:
2d:51:c5:c2:8d:04:15:39:e6:39:2b:1a:c7:22:eb:
72:a6:32:c8:75:01:10:44:42:bd:69:5c:26:69:90:
23:58:e5:9b:c5:d9:cf:64:a8:db:87:53:8d:da:51:
63:c2:b2:a1:83:58:ec:09:bf:22:92:9c:87:06:d7:
76:88:66:13:15:6a:14:04:b4:59:b8:69:5d:4c:5e:
05:68:95:c1:90:23:52:52:cc:92:d8:61:2d:b2:2b:
86:46:0f:6b:82:08:83:df:be:af:d2:cc:d1:23:4c:
45:66:cc:3a:0e:73:2c:4d:e1:30:43:15:e3:46:6c:
4e:8c:4b:f5:94:a6:34:8e:5e:7a:4d:d1:08:1d:d8:
ce:be:b7:ed:ba:3d:db:46:77:90:55:30:af:38:13:
73:dc:ed:6f:81:8c:10:76:12:c7:23:06:98:11:b6:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:54:9C:44:3E:D7:CB:BB:7B:08:F6:61:2F:82:D9:99:8E:07:DD
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9b:51:cc:f9:90:04:37:f4:7c:94:cf:9e:02:12:7b:e2:0c:
cb:a6:ee:71:e6:f4:9a:d1:26:a1:09:6b:7e:58:0e:36:c7:4b:
6b:56:51:0d:1a:7d:c9:b0:93:13:e7:0e:e7:cf:9a:41:f5:cc:
2f:a2:26:0a:f2:58:65:52:8a:58:83:a9:8c:ac:d5:8a:5a:c8:
b8:57:bd:3c:5d:08:bf:49:54:5b:58:13:66:00:0d:53:4d:51:
75:d5:64:e0:4a:31:f3:13:fe:f7:26:1a:2e:02:ce:de:53:db:
9b:f8:8b:94:78:93:a0:66:a3:97:15:33:a1:fa:3e:13:a5:ff:
68:44:ae:a5:17:4c:3b:86:a2:98:18:63:39:40:82:75:c1:3e:
1d:c5:15:04:a3:be:5f:d1:12:60:7f:89:81:c9:7f:73:33:b8:
53:ca:a4:83:b2:da:23:1f:85:e7:c5:f0:6c:cc:e3:74:35:2d:
ab:b6:ab:e3:10:f6:23:40:f7:d4:ce:c8:d3:33:bb:9a:7a:8d:
49:1a:4c:46:7d:08:85:43:5b:42:d8:28:c7:e1:01:9a:9d:44:
5f:34:98:6d:c4:ee:6a:0d:55:a4:e5:b7:5c:a2:1b:b2:51:5e:
b0:38:fa:06:d6:9f:7d:72:18:28:c0:ea:6e:9a:bc:03:c8:31:
ca:bc:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:17:51 2026 by rpki-client