Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: ttsYvmvQdDRmVW7OGJ6Tfl51ErGc1BjyHD7cLSUOrhU=
Subject key identifier: 6A:6C:AB:69:1A:78:94:53:E8:B3:93:88:7E:1F:3B:EA:50:C3:08:52
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01A0D2A65F6A9414DAB21AC37ECF30B80EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 1362
Signing time: Thu 24 Sep 2026 09:01:53 +0000
Manifest this update: Thu 24 Sep 2026 09:01:53 +0000
Manifest next update: Fri 25 Sep 2026 09:01:53 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: rPk2x2Zx5bh9wZXlk0fH6lMjnikwpNBrCD7CGlYGWKs=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:5f:6a:94:14:da:b2:1a:c3:7e:cf:30:b8:0e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Sep 24 09:01:53 2026 GMT
Not After : Sep 25 09:01:53 2026 GMT
Subject: CN=6a6cab691a789453e8b393887e1f3bea50c30852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:41:50:c5:74:f6:46:5c:c0:f8:3b:25:6b:
4f:d2:42:98:89:2c:fd:61:47:c1:13:40:b4:e1:84:
23:ad:6a:55:09:07:b7:50:f3:e1:6f:d0:62:21:9b:
35:08:cf:5d:17:ac:91:86:ed:9b:e0:fb:d0:64:8b:
a9:f3:e7:8d:e4:da:4c:13:b7:53:ff:16:00:a6:2d:
e3:e5:1a:29:61:0d:2c:49:ea:f5:4a:bc:e9:91:d7:
ab:7b:58:42:60:6b:1b:94:a9:25:82:75:10:ec:e1:
b2:da:11:43:f1:98:30:4d:ea:99:06:db:f4:bb:66:
98:97:45:d0:cb:cd:e7:ca:3e:d6:01:f5:3a:50:d6:
eb:57:98:a3:2e:c2:85:be:9f:b1:3c:0a:9c:f5:76:
c0:1a:8e:53:be:51:2b:4d:23:a8:b0:2f:a6:e4:32:
40:8d:99:8c:9a:19:14:80:7c:57:e5:31:fb:79:b7:
c1:d0:8b:9f:fb:7f:39:b0:23:e4:f9:34:d8:cb:b5:
32:21:83:2d:32:ae:38:21:91:0c:35:89:84:fe:c9:
51:ae:f2:1a:64:31:6b:64:60:38:ee:ac:95:bc:08:
5c:a4:d0:bb:5b:cc:a2:78:e8:d3:fd:a1:f8:59:54:
12:1e:57:61:aa:7e:86:df:ed:50:76:7a:b6:55:a6:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:AB:69:1A:78:94:53:E8:B3:93:88:7E:1F:3B:EA:50:C3:08:52
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:80:23:7b:64:d2:db:4e:ac:a0:30:13:df:03:99:2e:63:a3:
f9:a1:18:2c:d5:4c:38:6d:c6:b9:e9:fc:4f:bf:3e:56:ac:c1:
6c:d9:4a:4d:c9:1f:2f:37:6c:ee:05:63:ac:0f:91:85:c9:58:
b2:dd:21:fd:28:a4:34:92:52:d5:78:41:8b:91:25:19:2a:0a:
06:48:ae:ff:98:77:74:45:4d:4f:8b:ba:5d:0c:2e:dd:91:1c:
5a:d2:76:3a:7c:2e:f6:42:f5:37:49:55:0f:46:ad:8e:46:4d:
c6:81:a3:af:57:46:7d:1b:9c:cb:3e:66:92:74:ee:3a:72:d3:
7f:ce:c0:a2:fb:93:2a:f8:10:de:88:5b:ad:b7:1f:01:56:78:
65:a0:ad:6b:08:3f:0c:21:e6:8e:1f:5e:62:6d:6d:a0:72:19:
2c:8e:f3:d3:f0:1a:4a:f3:42:61:a6:18:58:b3:2e:34:03:16:
68:a8:b5:e6:12:dc:65:41:97:24:4a:8f:62:f1:b4:98:36:56:
58:50:20:3e:6c:84:64:86:8b:d6:16:31:ae:51:89:71:ee:b9:
e0:25:87:60:89:2a:07:b7:5b:bf:08:04:0a:c4:fd:69:2a:d1:
1a:8b:8c:df:c9:ec:33:4b:54:64:cd:95:82:0b:36:d0:2e:6e:
f3:c5:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:05:58 2026 by rpki-client