Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
File: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft (raw, json)
Hash identifier: KbLk/3+etMlzf6GMbzBNgETzeuYzNzOE7PHdHJxT+vM=
Subject key identifier: 90:99:15:8D:97:8A:BD:00:12:B1:3E:29:D1:EA:B5:39:75:0C:CE:2B
Authority key identifier: F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
Certificate issuer: /CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Certificate serial: 01A0D15C1D07AAAC04233858E0383EF616B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
Manifest number: CE
Signing time: Thu 24 Sep 2026 03:01:09 +0000
Manifest this update: Thu 24 Sep 2026 03:01:09 +0000
Manifest next update: Fri 25 Sep 2026 03:01:09 +0000
Files and hashes: 1: 8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl (hash: xiQXmaLw9QVQNhD9FpR7cviciwhYuyDMdSZ0P5SUoVQ=)
2: r42oR0C5g5SuflKWJ6GIOiVUO0U.roa (hash: Cm2S/1eJoWgRD00HMcE5iW9xvFGpF376Bo3aWrPUtvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:1d:07:aa:ac:04:23:38:58:e0:38:3e:f6:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd59335979fc360e7cbe3c277cbf998fa93610
Validity
Not Before: Sep 24 03:01:09 2026 GMT
Not After : Sep 25 03:01:09 2026 GMT
Subject: CN=9099158d978abd0012b13e29d1eab539750cce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:18:cc:fa:7d:4a:7e:05:ad:c6:f9:f1:51:
0a:c5:d9:92:a1:e8:b7:9d:2a:a7:7f:b9:22:cd:aa:
cd:30:5f:28:72:33:c4:29:be:1f:70:12:e1:aa:17:
e2:1c:59:51:a3:30:69:5a:1e:7b:23:c5:3d:6a:93:
79:71:95:1c:3b:24:5e:44:64:41:38:88:d5:98:3c:
d2:23:1d:7f:4a:00:62:d0:ba:6d:8a:ef:5c:a8:91:
65:b6:5f:f9:17:c1:a3:b4:8d:92:aa:79:f3:12:21:
21:11:f7:f9:1b:97:1d:97:41:5d:63:24:7c:2e:2c:
93:f4:69:09:54:3e:08:6f:66:5c:86:91:ce:14:cf:
12:68:a2:ee:03:de:58:11:8f:f5:0a:89:66:93:79:
49:63:b9:27:c6:47:77:45:c8:a6:3d:98:5d:88:73:
0f:a1:97:47:4e:b7:2e:52:fa:3d:3c:4e:16:31:78:
9c:fc:94:94:ac:f2:c7:20:4b:29:c4:f3:11:e9:97:
b0:2c:85:87:59:ac:04:33:91:ea:74:14:5e:b5:06:
73:0a:89:07:5a:2c:cb:93:6c:dc:c0:c7:d1:11:3d:
ef:75:85:4f:77:fa:ed:6f:41:44:0a:c6:12:c4:ba:
6f:5d:80:43:ca:d8:28:ab:b4:1e:01:69:4d:74:88:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:15:8D:97:8A:BD:00:12:B1:3E:29:D1:EA:B5:39:75:0C:CE:2B
X509v3 Authority Key Identifier:
keyid:F0:CD:59:33:59:79:FC:36:0E:7C:BE:3C:27:7C:BF:99:8F:A9:36:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M1ZM1l5_DYOfL48J3y_mY-pNhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/65d6f5-8657-4ddc-b444-42690120c231/1/8M1ZM1l5_DYOfL48J3y_mY-pNhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:71:5e:f3:73:0a:3a:d2:12:c6:67:78:a6:7e:4e:5c:0a:91:
80:38:2f:bd:73:a9:58:71:ad:a7:c3:1d:5a:fe:bf:37:2f:79:
af:7b:20:d7:2f:c7:59:b1:d7:58:b7:5c:ba:89:da:81:d7:e2:
50:85:7c:76:ce:f1:b9:fd:db:97:ee:c8:ad:15:e8:7f:cf:0b:
f6:e9:9b:e0:92:71:4b:e7:5c:1c:25:0e:64:e6:b4:13:a7:91:
d8:a3:a7:51:a4:21:11:8e:58:fe:65:7f:2d:a4:48:08:8f:cf:
7a:1c:06:c7:16:21:47:b7:62:c1:4c:5d:be:02:1f:ff:c3:ae:
fc:45:99:62:c7:d7:06:12:19:e6:fb:05:7a:0f:fa:6b:7f:f0:
78:e8:47:92:12:96:95:78:ce:d5:85:96:15:39:b4:48:00:41:
1a:19:17:20:e7:c8:08:67:69:b4:62:a1:55:8a:dc:48:c3:c4:
4c:2c:df:2d:b3:2c:c3:a2:a7:84:06:f5:66:23:db:47:af:6f:
34:8f:90:11:73:d8:d5:26:48:f0:65:f5:10:52:a3:21:df:f1:
f2:d6:7c:3d:e5:8f:12:39:b0:7d:08:6a:2e:bf:cb:2e:0b:16:
cd:16:b1:e2:10:79:5c:e2:75:e0:1d:44:fa:b8:6b:f0:43:cb:
62:14:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:43:47 2026 by rpki-client