Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: OG0cSGRUWj0oPWEjak9UoyEe/F2cqVY9uFEeuuIrjZg=
Subject key identifier: 95:E5:14:ED:EB:49:FF:75:73:63:D2:28:2B:44:06:CC:B8:87:0D:D7
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 01A0CA4722488227E0C66C08A525CFE244D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 18:00:54 +0000
Manifest this update: Tue 22 Sep 2026 18:00:54 +0000
Manifest next update: Wed 23 Sep 2026 18:00:54 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: gUH3iIEE+Vo0VQDyX9cM6GU2htRoBqUA+yNx6ShYKC0=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:22:48:82:27:e0:c6:6c:08:a5:25:cf:e2:44:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Sep 22 18:00:54 2026 GMT
Not After : Sep 23 18:00:54 2026 GMT
Subject: CN=95e514edeb49ff757363d2282b4406ccb8870dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:e6:18:80:68:ff:30:58:4e:d5:83:62:f0:
68:6b:78:40:4f:7b:f1:0b:3f:e4:ec:ac:28:51:1f:
b0:1a:17:4d:e5:b1:d0:35:e7:93:52:6f:17:5a:2b:
8d:a2:4e:53:f0:6f:61:d3:d5:b7:85:7b:ca:9c:1c:
e2:ac:ef:bb:0e:e1:2a:18:bc:49:9b:36:b2:44:78:
c2:71:45:ce:e7:39:35:d8:ec:9d:c3:21:9b:a2:57:
c5:e2:ff:d8:7f:53:f6:bb:56:de:f0:ac:e0:89:66:
e2:6b:f2:7b:12:fe:13:90:30:dc:15:8f:a9:59:57:
19:55:1f:1a:c1:ad:e2:5b:e5:bb:ea:31:e4:88:89:
09:9a:4f:77:82:98:bb:c1:61:9e:16:6d:4a:88:2e:
23:6d:e5:2e:66:ed:e8:3a:10:8b:00:02:15:90:0e:
2c:22:01:62:53:68:a7:d9:a4:2d:cb:64:b7:6b:e8:
1a:aa:b7:e2:a3:5b:92:fb:e7:cd:b7:01:35:35:a3:
d6:88:49:59:d4:17:e0:45:17:b1:da:08:ce:5d:a0:
c3:21:95:86:01:4a:a2:5e:c2:46:92:ad:e7:59:04:
bb:9d:3f:45:aa:45:ab:e6:ec:97:49:8d:a4:11:f4:
7f:14:0a:3d:a9:32:20:51:17:c0:c8:da:09:48:00:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:14:ED:EB:49:FF:75:73:63:D2:28:2B:44:06:CC:B8:87:0D:D7
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:01:ab:d8:bf:91:28:1d:2b:6f:11:c6:54:65:04:61:06:7a:
cc:8f:02:4f:af:5e:d7:15:0c:04:11:2c:bb:c2:8b:5b:3b:7d:
12:5b:af:f3:f5:a8:04:3a:70:6c:d9:46:98:eb:27:9a:b1:48:
f8:80:f0:ea:81:93:ad:66:69:b7:80:6b:e1:36:b4:07:48:13:
07:d3:13:04:cd:26:bf:1c:dd:ec:97:a2:63:2a:b8:c2:d0:54:
1c:04:10:4c:83:5b:71:c5:15:55:e6:aa:3d:56:6e:d9:c0:11:
e7:6b:76:5a:b0:fd:7a:a3:45:7c:de:e0:15:9d:16:aa:43:53:
c4:13:8b:f3:47:33:73:f1:7f:6b:88:a5:e0:9d:4c:39:4a:f1:
c9:f6:00:51:73:26:84:e4:5e:6b:ed:8e:f3:0b:b9:97:30:e3:
a0:12:30:f0:af:c4:6a:56:57:be:6d:b7:c8:b4:ce:5d:1b:69:
b0:9d:55:82:19:20:7c:9c:7b:65:1f:8d:84:f5:88:d5:f3:a4:
67:76:14:19:77:eb:5a:e6:6e:60:14:ed:34:14:2a:4b:6c:a3:
1f:bd:88:46:8d:44:05:bb:b0:77:7c:fa:0b:29:34:7e:f0:09:
d7:9c:70:70:55:af:d6:29:e5:80:ec:75:d4:ef:fc:2f:9e:fa:
e4:29:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:51:16 2026 by rpki-client