Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: 7tXpMGQPHNiXk3OdlJVbAcuiMlaNqKptBJCnDuGAmug=
Subject key identifier: 2C:D2:1A:38:D7:06:DE:43:56:DF:9B:1B:B0:DC:B3:D3:9E:D0:CE:8F
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 01A0C746AC8EC8ED40AC0DE93DB75D828637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0843
Signing time: Tue 22 Sep 2026 04:01:32 +0000
Manifest this update: Tue 22 Sep 2026 04:01:32 +0000
Manifest next update: Wed 23 Sep 2026 04:01:32 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: iIKtq3Yd6vC3FXSk1+jlz/TnzpiVCs3PoUJSRxn2hTs=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:ac:8e:c8:ed:40:ac:0d:e9:3d:b7:5d:82:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Sep 22 04:01:32 2026 GMT
Not After : Sep 23 04:01:32 2026 GMT
Subject: CN=2cd21a38d706de4356df9b1bb0dcb3d39ed0ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:ea:fe:fc:7b:e1:8a:cf:f7:55:dd:b1:8e:
04:a6:0d:14:ca:94:5b:ad:75:87:e0:4a:c9:86:65:
89:42:7b:44:13:91:dc:49:25:e4:0c:78:ba:5e:00:
2d:22:f8:ed:c6:4b:9f:1c:cb:a7:9f:00:50:53:94:
60:47:18:b0:70:bf:05:b6:4f:4a:97:6e:33:53:86:
e3:d2:7a:a7:c4:90:9d:ff:ae:4e:37:1a:72:0c:07:
93:9e:18:1c:5d:ab:07:f8:cf:8f:85:77:8b:16:7e:
7b:17:16:d1:d3:14:f1:a2:52:7c:e6:9e:16:a8:34:
4f:ff:e5:95:36:54:72:a5:5e:1a:fe:66:f2:ef:32:
c8:4b:37:64:8d:3c:8f:86:88:bc:3c:2a:33:62:14:
02:49:1a:23:d2:80:27:b1:53:91:9a:60:70:12:c2:
86:86:d3:ca:bb:59:f8:ce:84:61:54:57:6a:cc:ef:
f5:91:2a:70:37:9f:db:6c:f5:a3:d8:08:02:fd:9b:
e2:03:eb:36:ed:24:9f:f6:0e:5a:33:e3:63:b1:ea:
8d:c5:05:ed:f0:41:2a:f1:02:72:8f:b4:d9:5c:db:
b5:a4:09:50:41:7e:9b:28:df:a2:92:f2:5f:72:94:
77:48:c8:62:30:48:1c:98:46:53:4a:58:1f:84:5d:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:1A:38:D7:06:DE:43:56:DF:9B:1B:B0:DC:B3:D3:9E:D0:CE:8F
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:b1:5d:8d:24:be:50:ae:87:3d:d7:2c:85:4d:3f:a4:50:
8d:b7:f7:92:c1:9d:14:1a:e7:cd:30:3d:bd:c4:ae:45:35:2a:
4e:dc:55:ff:37:c0:1f:87:12:99:36:a4:8c:79:b0:30:8c:50:
b8:39:1c:76:cf:b9:1a:80:eb:9a:56:8e:78:2c:07:5e:29:c3:
3d:a7:6a:00:27:2c:30:e6:7d:6d:1a:86:41:0a:40:0f:31:41:
3d:ff:9a:b8:c0:94:1a:c1:7c:42:f5:9b:57:6b:b3:f7:a4:77:
57:23:58:58:c1:b4:9d:d8:bf:0c:e0:ca:46:61:6d:fc:19:ca:
6c:2d:2f:ba:51:ef:d0:e4:34:97:88:4c:32:eb:71:58:04:6e:
f4:a8:81:79:f4:bb:fe:8c:d2:b5:d5:1d:9b:ca:b0:b0:f7:17:
36:17:4b:26:ae:fe:dd:0a:30:a1:a5:51:c1:11:b6:79:c3:a2:
de:28:36:2c:5b:bf:6c:69:6f:e7:ab:0c:32:c4:59:9d:d3:d2:
26:11:4a:1e:7e:4a:fe:14:1e:44:50:41:a0:fe:46:7b:f1:98:
14:38:ce:2d:ea:8a:ed:8d:88:a9:c2:57:42:44:7a:03:cb:ee:
2f:48:e1:1b:b8:2f:8d:b4:e7:2c:f6:d4:8f:1e:bd:40:2f:3f:
2e:f7:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:21:32 2026 by rpki-client