Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: CRo2DGicrNfmSIqOsMLXZ0NDSzQqZM1y0i3lRR+WejA=
Subject key identifier: 5D:CB:D5:3D:4C:2E:25:53:8D:F3:2D:47:AB:E5:81:2D:92:BA:08:5A
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01A0CF360DC0DC2F92770F730EB3823B6AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0BEA
Signing time: Wed 23 Sep 2026 17:00:21 +0000
Manifest this update: Wed 23 Sep 2026 17:00:21 +0000
Manifest next update: Thu 24 Sep 2026 17:00:21 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: goZlFbx5ra/tnTGLx6xVk7KxnR2QQy0zTbQhkcMt8fk=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:0d:c0:dc:2f:92:77:0f:73:0e:b3:82:3b:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Sep 23 17:00:21 2026 GMT
Not After : Sep 24 17:00:21 2026 GMT
Subject: CN=5dcbd53d4c2e25538df32d47abe5812d92ba085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:76:f5:22:cd:f7:31:72:e9:09:18:42:0e:
ed:fa:1f:0d:d7:ab:48:1f:b8:46:5c:f9:4c:44:24:
df:b1:23:18:8c:db:14:e4:5c:e4:9e:91:a7:6c:67:
32:98:b6:76:03:e3:2d:b3:02:fa:33:3a:c1:b7:84:
2f:87:58:f7:44:25:74:42:73:b3:fa:6c:bc:29:c6:
af:9c:12:2a:30:ff:62:94:63:03:65:7e:04:db:fd:
d6:d0:e7:c7:10:e4:70:b5:e5:0d:49:5c:71:2b:ed:
a4:61:ff:70:aa:46:94:11:88:53:75:b6:14:aa:fd:
ef:92:61:16:19:27:29:b3:e7:59:bc:08:1a:4a:90:
63:84:e3:4d:e8:5f:17:94:0b:4b:4f:bc:2c:8f:0b:
73:cd:1c:3d:d1:54:c0:4c:ad:b6:b9:d2:1e:a5:fd:
e7:62:6e:48:a7:89:e2:0b:57:33:ab:d1:5e:7e:5d:
8f:51:d5:21:25:88:86:ec:bd:74:fd:cc:72:3e:e6:
7e:6e:a6:16:14:52:09:bc:36:9a:c5:08:fe:9b:26:
8f:9e:21:06:15:01:48:12:48:7b:fa:e3:56:29:bb:
a5:ad:cc:a0:fc:42:24:1c:90:64:0d:70:a1:50:af:
41:d0:2b:70:74:1b:9d:8a:51:44:99:04:31:d3:33:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:D5:3D:4C:2E:25:53:8D:F3:2D:47:AB:E5:81:2D:92:BA:08:5A
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:08:6b:d1:89:2b:f2:74:1b:09:9d:2a:f3:e3:6b:0a:0d:
c5:f2:86:00:2a:d3:05:30:6e:f2:5d:7a:7d:47:b4:80:05:9f:
ef:ab:6a:95:69:2e:e8:bb:2d:e1:34:ab:cb:1e:df:e1:20:04:
15:eb:f1:7f:3f:97:0a:63:5f:28:c5:04:c7:31:b0:cf:f9:d0:
82:59:1f:bd:c5:67:20:24:3c:29:ae:3e:b6:c5:3d:02:c3:26:
9c:7b:0e:bb:d8:d6:00:21:cb:2f:7b:c8:90:94:63:72:78:2a:
e1:c3:18:39:6b:3a:0f:1b:5a:c1:18:31:c0:37:8e:5a:bc:f4:
84:ec:42:5d:9c:51:9d:01:d2:c6:13:65:24:4f:a5:d7:51:d5:
23:dd:8e:55:43:da:2e:7a:ca:5d:9e:e5:84:51:a4:e3:42:4a:
82:97:29:07:d3:d6:b3:cb:d8:39:66:c5:5c:e4:ab:ec:1b:7d:
7b:d5:44:18:31:a0:5f:f6:0d:30:95:1b:05:be:d4:0a:c5:92:
3e:6a:ac:e6:37:64:0f:bf:e0:44:09:ed:e1:a7:fc:52:45:17:
8a:e5:02:ac:2c:4a:c3:3b:db:9c:d3:4a:68:0d:ac:03:89:2f:
c7:07:7d:47:7e:7d:80:db:67:16:0b:63:de:64:99:83:72:fa:
fc:65:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:41 2026 by rpki-client