Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: DBNCs9Gprut7dHz9fjA1LsSHnh5b4/1AWJTPADUkTJU=
Subject key identifier: E8:B2:84:7D:25:84:79:2F:5B:02:E0:19:D8:9F:BA:1C:47:15:EF:78
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01A0C1E85E46FB5D7780F505CBE676162D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 03:00:26 +0000
Manifest this update: Mon 21 Sep 2026 03:00:26 +0000
Manifest next update: Tue 22 Sep 2026 03:00:26 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: Op/+f0hR2+lD9aSkCUlvnlaNGlCtLJGNwxQ9ZZJ/PAM=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:5e:46:fb:5d:77:80:f5:05:cb:e6:76:16:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Sep 21 03:00:26 2026 GMT
Not After : Sep 22 03:00:26 2026 GMT
Subject: CN=e8b2847d2584792f5b02e019d89fba1c4715ef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:21:a1:8f:a7:cf:0b:64:d1:e9:6b:87:d2:
71:61:05:3d:31:4e:78:63:b0:54:46:ab:99:ac:66:
32:f7:ea:7b:63:91:78:18:21:da:5d:bf:48:eb:22:
a7:dd:83:f5:fd:8c:fe:45:ff:9a:3c:42:cb:d5:86:
2f:cf:5a:ef:0d:81:36:ed:6e:b1:9d:88:38:72:c4:
a4:74:4c:30:94:7c:dc:74:19:0e:da:fd:82:da:d8:
9c:c1:33:a0:d5:53:c4:34:69:9b:75:33:77:a9:43:
9c:4c:02:03:c2:de:31:fb:75:25:58:24:06:05:17:
35:1e:aa:b7:f8:64:11:7d:f9:c2:67:00:2d:07:b2:
26:5b:1c:f3:02:8b:d1:7e:a7:24:b0:cb:6d:57:47:
21:92:23:3f:84:63:72:85:4f:95:d5:5b:56:c9:c7:
df:43:c7:5b:53:a9:b6:29:19:e5:23:0c:1a:c4:2e:
21:4a:f7:d8:f9:6f:0c:d9:f9:14:3a:d0:3e:ca:3f:
e5:17:ff:33:36:63:f1:3e:bd:8a:b8:e2:3a:6f:b3:
37:7c:bd:12:b1:ef:d1:e3:82:b6:3b:c1:e2:ad:39:
42:06:f2:1a:a0:9c:b1:d1:ae:91:82:93:f3:71:60:
3c:c6:89:e4:23:a8:f7:80:71:56:e7:20:57:92:fd:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:84:7D:25:84:79:2F:5B:02:E0:19:D8:9F:BA:1C:47:15:EF:78
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:33:9c:f2:46:81:64:8e:fe:80:50:53:15:35:10:6b:d4:
fe:a7:3f:34:39:ac:df:d7:1e:5b:1c:95:f5:81:a3:fe:01:6e:
9d:d9:c7:77:6b:d7:11:d9:ae:23:12:7d:8e:97:fb:07:fd:ae:
ad:0f:ad:fd:1c:8d:36:2c:bb:95:ae:27:dd:2f:86:64:34:ba:
77:28:cc:91:98:26:c7:9f:da:36:2f:bc:3a:d1:2a:40:9f:67:
42:db:55:7e:13:1b:25:4b:7a:0d:19:7a:6a:6d:07:37:b8:a1:
d0:40:08:40:ee:94:3f:f9:4c:1d:ec:0d:fe:12:18:d3:2a:94:
7a:5c:20:b0:47:3f:1c:87:52:c2:fe:98:25:7a:82:83:ff:08:
09:c9:d9:39:a2:c3:5e:82:03:88:48:ec:16:d8:45:6a:2f:a4:
db:95:17:01:05:04:bb:2d:ef:61:9f:a2:62:47:c0:aa:10:00:
d2:21:0c:67:7a:e6:78:b0:72:6c:84:87:75:73:06:8c:a9:52:
c2:4a:94:92:96:c6:5e:bb:66:25:3a:f7:d2:82:93:8d:e7:43:
91:f9:77:9e:2a:4c:97:f2:d3:81:11:c9:65:46:eb:95:7a:6e:
a3:79:3d:e3:5e:01:22:da:9e:c4:e8:62:e7:51:3a:d7:b4:eb:
f8:d0:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:35:18 2026 by rpki-client