
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
File: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft (raw, json)
Hash identifier: eyEmncsTyoZkABOn/5md+q+mS1wVGhhaLJrIbXr1/oI=
Subject key identifier: 40:A7:6F:4C:65:26:7B:CA:04:FD:98:97:62:11:2E:C0:98:1A:8A:5E
Authority key identifier: F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
Certificate issuer: /CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Certificate serial: 01A0C21F8E0B69A26CE1B7BF2E189852B633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
Manifest number: 92
Signing time: Mon 21 Sep 2026 04:00:42 +0000
Manifest this update: Mon 21 Sep 2026 04:00:42 +0000
Manifest next update: Tue 22 Sep 2026 04:00:42 +0000
Files and hashes: 1: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl (hash: 504iWcprESokCGjaRwKiqmevVWo8KuzO6YnmGeK2lGY=)
2: BZv-LoBRIRBTOEYKtA6kf7CvWnM.asa (hash: 6djo3sORenudDTgc+w+x6P5vO7vutX0bQrqSk11uuhw=)
3: QpyzK4A53JlVZWVV1v2jN1WPoAY.roa (hash: 16PfeuBy1FMSFoHFqQhe2PdhxV2dzUiD7Xy/ykQCYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:8e:0b:69:a2:6c:e1:b7:bf:2e:18:98:52:b6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Validity
Not Before: Sep 21 04:00:42 2026 GMT
Not After : Sep 22 04:00:42 2026 GMT
Subject: CN=40a76f4c65267bca04fd989762112ec0981a8a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:5c:b0:2d:3e:48:f6:95:c4:fb:da:e3:c0:
e2:e8:a9:7f:ec:f1:0b:96:7c:3a:c4:5b:52:1c:e3:
8d:ac:f6:7e:60:9f:95:aa:11:5d:0d:49:1d:74:d6:
7e:f6:eb:56:aa:7a:d9:ed:4d:26:cb:e3:3f:a6:e4:
b2:83:9f:df:c9:83:01:37:21:44:50:99:26:96:ca:
29:ab:b1:d0:86:85:6f:e6:15:be:75:d9:14:ea:51:
f2:22:ca:45:45:e2:23:b6:dc:c6:b3:29:95:dc:11:
5a:96:ba:79:46:bc:ee:15:a3:7f:ce:4b:21:38:8c:
39:bf:e8:b6:42:8b:b7:93:0d:d3:1b:54:5f:ef:97:
eb:88:e1:da:0f:3b:5c:f8:45:fb:45:81:cd:33:d5:
e5:8a:d9:7a:68:bd:7d:d0:ac:0b:d3:37:af:d5:be:
70:8d:d8:b7:00:0b:52:ef:08:8a:2f:5b:ec:24:84:
ce:64:1b:f9:1b:ff:e9:86:73:67:51:51:48:68:7c:
8b:2c:47:c8:a1:89:b5:dc:03:a8:3c:52:3f:38:a2:
b8:6a:34:8f:4e:33:6e:2a:13:ee:02:80:9c:4d:72:
bd:29:10:dc:84:c7:df:bd:19:a9:70:ea:69:76:01:
63:fb:99:70:ec:25:43:9e:74:46:7c:4c:fe:14:df:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:6F:4C:65:26:7B:CA:04:FD:98:97:62:11:2E:C0:98:1A:8A:5E
X509v3 Authority Key Identifier:
keyid:F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:dc:9c:d7:99:fe:3c:2c:7b:e9:2c:e4:48:a4:ef:8a:c8:
56:a0:71:c2:16:d6:7e:5d:42:94:76:b0:f1:61:50:3d:bf:54:
11:91:09:7e:b2:d4:49:62:6f:ec:ec:ed:f6:16:f0:9c:f5:c4:
6d:25:50:a5:38:12:2d:9e:e5:8a:e7:f6:4d:46:ad:9b:fd:fa:
34:14:7c:c0:ca:c9:cb:8b:52:4d:c9:59:cd:e0:a5:75:38:99:
7f:33:bb:e2:05:a4:29:cb:ad:cf:af:56:3e:df:62:dd:22:cc:
9c:a2:9d:da:50:76:e5:70:86:e7:2d:91:64:a3:3b:e8:68:75:
96:3b:49:36:da:f6:cc:16:dd:71:bc:3d:3a:2b:af:a5:1c:b2:
47:c2:aa:b5:2e:a8:30:0c:37:93:b7:08:d5:8d:fe:ab:f9:cd:
d5:a8:b3:1a:62:24:d2:59:96:0e:07:82:cc:45:74:6f:5b:74:
81:ea:48:1a:9b:e1:d2:12:41:2f:4e:19:2f:51:9d:80:2d:fe:
38:68:9c:2f:fa:a0:60:15:bf:4f:c6:54:29:a4:9e:04:f7:07:
34:2d:77:fa:98:e8:e4:d0:a7:be:7e:a5:da:5f:91:15:90:6b:
7c:a7:af:31:a4:a7:e0:6d:02:88:2d:2f:b6:96:6a:48:12:d9:
40:61:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:55 2026 by rpki-client