Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: nIZXYU+J8FRMx8hDC0qXoYhn/JdPgtAg2adC0L6xA30=
Subject key identifier: 04:F5:10:94:AC:7A:A8:A7:B6:69:E7:AC:DA:79:D9:01:79:BF:D3:77
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 01A0E098E9DFF40C3E1A07A2B5B78F4D96C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 116D
Signing time: Sun 27 Sep 2026 02:01:52 +0000
Manifest this update: Sun 27 Sep 2026 02:01:52 +0000
Manifest next update: Mon 28 Sep 2026 02:01:52 +0000
Files and hashes: 1: 7o87e6t6rCHZCTctqNbeIGrB924.asa (hash: gPHZRrAJDyxpEWcymQSdvWZAGGUKmIVDKFbHH3RVcGE=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: eW0unhv9VQe/Adqh3d9eEgMr4chqIbnh4YRZI/c/0K8=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:e9:df:f4:0c:3e:1a:07:a2:b5:b7:8f:4d:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Sep 27 02:01:52 2026 GMT
Not After : Sep 28 02:01:52 2026 GMT
Subject: CN=04f51094ac7aa8a7b669e7acda79d90179bfd377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:2d:a1:50:98:92:cc:d5:4e:f8:66:d8:64:
4e:92:2d:9d:eb:55:10:05:11:d3:ba:47:f7:d4:92:
ba:fc:78:f0:19:92:04:d0:56:43:97:1f:9e:28:b0:
d9:be:f3:3d:fc:b3:64:3b:a2:f7:bf:a7:46:8b:f4:
2e:5d:3d:c1:37:c7:09:7b:56:e4:2f:f3:0a:a0:fc:
10:43:4b:e2:d7:50:97:7e:4f:16:6a:41:17:d2:27:
05:8e:57:e2:ab:df:5c:91:7c:25:ce:7f:6a:44:44:
a4:bd:a9:d3:1c:be:29:43:ee:29:2e:db:35:51:79:
86:a9:7c:90:e0:ff:4b:01:79:b5:d5:9d:7a:69:d1:
bd:22:03:f3:7d:04:21:4b:e8:37:b0:51:d1:7a:5f:
c6:42:27:55:bd:7a:6e:23:ad:18:e2:4a:ea:4a:09:
3e:1d:a2:8e:7f:2c:92:66:ca:46:4f:9d:c0:e0:f4:
96:35:1e:ef:3e:b1:a5:f4:48:17:fe:e6:1c:c7:07:
1d:13:59:82:e4:99:4a:23:3a:56:c3:3b:e1:db:5b:
af:6d:b6:7a:d1:83:56:7b:87:f3:1f:3c:01:93:05:
5e:9f:a2:b0:bd:fb:de:4b:5f:da:6b:ba:3f:8e:da:
19:c5:35:41:84:7c:0d:38:a8:42:83:85:16:3c:f1:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:10:94:AC:7A:A8:A7:B6:69:E7:AC:DA:79:D9:01:79:BF:D3:77
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:34:5e:b9:9c:6f:1c:a6:06:24:f1:50:8d:6d:f4:7e:28:
a6:92:01:1c:8c:9b:31:fa:01:4d:70:86:14:5a:4e:6b:c2:a3:
03:08:fc:a5:9d:01:29:ea:ef:30:29:94:4a:0b:de:75:83:ac:
f0:ca:8d:ca:62:47:8b:02:10:a7:77:23:59:69:e9:8f:43:78:
49:b3:d0:57:73:5c:37:90:0b:48:c2:93:5e:e4:f8:82:f5:08:
8a:a6:f8:94:bd:4a:49:98:a6:ee:0c:16:26:96:e6:ab:6e:28:
d7:dc:b9:0e:ac:cc:dc:df:a2:26:6b:b6:2d:af:82:95:22:1e:
65:4c:46:2c:f9:ff:36:bc:55:5c:8e:41:ba:36:65:15:9b:b0:
77:e2:a6:6c:ea:76:2d:01:cc:d4:3a:e6:9a:82:77:d0:f8:15:
ea:91:db:24:8b:96:c7:c4:c1:9c:0e:d1:66:c5:39:2b:30:9b:
cf:fb:71:eb:cf:b2:78:69:f4:0b:d3:11:49:51:88:78:c3:d4:
f3:ee:ad:7a:d0:b5:aa:83:c1:55:c6:ea:51:a6:fb:b9:3e:75:
c1:01:94:7b:ba:c7:7f:db:d4:21:fe:ce:5d:4e:90:87:14:41:
dc:05:37:f7:b4:5c:61:ef:28:e8:da:77:d3:e6:b6:9c:e9:69:
34:6e:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:46:38 2026 by rpki-client