Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: btYdcl9QrDP2WuFgN/a7GUxldWeY811zLQMj69FcY2A=
Subject key identifier: 38:68:3A:F6:DE:19:80:DD:82:21:9A:48:1B:E0:32:6F:34:C2:DD:BB
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01A0D15BED8113EC3A0903AFD6AF83CC847E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 11DA
Signing time: Thu 24 Sep 2026 03:00:57 +0000
Manifest this update: Thu 24 Sep 2026 03:00:57 +0000
Manifest next update: Fri 25 Sep 2026 03:00:57 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: lvL3AJJHmvSfDzTKIwK5GbArqbzxGdo/ttSuIBhxukQ=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:ed:81:13:ec:3a:09:03:af:d6:af:83:cc:84:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Sep 24 03:00:57 2026 GMT
Not After : Sep 25 03:00:57 2026 GMT
Subject: CN=38683af6de1980dd82219a481be0326f34c2ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:8c:de:49:bd:3f:10:30:29:30:f0:49:b8:
01:14:08:6d:36:f0:7f:ca:5e:2f:57:eb:2b:3f:d6:
8b:c3:52:af:80:ef:ee:3b:c8:63:d3:e8:d6:e7:b9:
25:2e:61:d0:ca:28:07:46:9b:41:e3:38:a5:7a:af:
01:8b:70:d0:6e:71:29:89:a6:b8:b8:3e:57:d3:9a:
64:79:e0:c9:bf:23:1c:bd:2d:9d:81:ae:a9:5e:55:
9e:6b:92:5a:df:1c:0e:ed:e6:75:fe:84:bc:a0:8a:
79:6b:25:51:a4:ee:19:d9:15:2e:73:72:0a:27:5c:
b0:e3:91:d7:1e:49:28:9a:e5:55:37:c7:65:e8:f3:
5b:99:b2:f6:eb:84:67:3a:ab:06:9a:00:43:e7:25:
62:5f:a1:09:80:22:9a:54:1e:1d:45:b7:16:2c:6e:
dd:af:86:31:76:7a:79:e3:a5:79:40:f5:38:5a:5a:
e0:b2:71:fa:ef:2d:54:05:61:4b:a4:de:22:de:66:
b0:d1:f5:75:73:db:5b:b4:4d:94:82:fb:a8:41:55:
74:1f:5c:8e:8e:ba:5f:d3:bd:3e:b7:4d:59:1f:ec:
e0:32:12:9c:1f:ee:cf:2a:86:80:cf:48:a0:20:a5:
d5:49:22:5c:60:41:7b:9e:79:64:dd:d9:e9:e3:4a:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:3A:F6:DE:19:80:DD:82:21:9A:48:1B:E0:32:6F:34:C2:DD:BB
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:66:c9:49:a9:d8:2c:00:96:ed:8c:b7:63:ef:f6:d5:c0:92:
1c:0a:88:6d:9a:5b:a7:a8:38:06:b4:d4:2b:85:95:a1:b5:df:
56:d0:1d:d5:d2:0e:2c:1c:70:d3:0b:42:6e:11:b0:bf:09:db:
71:61:af:6a:44:11:83:d5:c3:a2:b3:57:fd:ad:a4:d2:2e:a0:
ad:5c:08:fe:77:8c:02:fc:40:e2:2c:12:42:23:cd:57:ed:4f:
30:9f:64:fa:80:89:04:e9:8d:ca:6b:17:26:aa:f1:c7:57:b3:
d4:cc:56:02:5b:86:9c:4e:2a:84:b6:8d:3f:60:7d:8c:82:a1:
7c:e4:3d:90:db:2b:85:77:9a:02:8a:58:2f:51:0a:0d:72:18:
91:6a:26:fb:41:ed:f6:b7:ee:84:c9:f0:2e:8d:6a:fb:07:1e:
8d:02:ab:d9:0e:16:4b:dd:d7:35:b9:38:1c:da:5d:d0:f6:60:
62:ca:59:7e:56:26:e2:e6:2f:93:aa:78:68:d7:ac:f4:b7:66:
2e:e4:70:fd:35:5b:da:e9:5c:21:f1:65:25:eb:9c:c7:60:13:
f6:d5:37:3d:b9:de:f2:a2:e6:fc:ef:9f:ac:90:41:ea:d2:ea:
d2:15:8b:9e:b9:8c:ac:eb:6b:eb:65:da:92:e9:a6:7a:fb:44:
66:e8:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:20 2026 by rpki-client