Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: e/irukPPppyk/OJTZyyuA4lUk/ILvMKQc7SvhTw8CjM=
Subject key identifier: A5:F7:CB:3E:7F:12:F2:28:8E:03:27:0E:44:8A:96:10:A3:11:A7:D2
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 01A0E399DDB400BB8473B35A5046B41C8C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 1A8F
Signing time: Sun 27 Sep 2026 16:01:46 +0000
Manifest this update: Sun 27 Sep 2026 16:01:46 +0000
Manifest next update: Mon 28 Sep 2026 16:01:46 +0000
Files and hashes: 1: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
2: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
3: a2QkPtyL0SmdjP5zau-ugnaW-EU.roa (hash: gM4VfQdg6WpZhQD+HowobTuTX+TLbbelKQeacFg1zmA=)
4: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
5: fFvKoiV0VFBu4-OsBK2GYOwQH4U.asa (hash: 6DUFJoRDSzQ5uZ9J7qiuNTODxM1mTEYJM2iS/0tUeFU=)
6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: DPld+O9nyLcu6lBKtfJUYrv1yF4Nk0Cpe1l/KQI1qmE=)
7: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
8: kZguNbKDxcwx7TTRhlYgy4TEeQ8.roa (hash: gALJSh2LcRXQqCp+dXvtYhynkz9C6FiHkuFaiMFg4sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:dd:b4:00:bb:84:73:b3:5a:50:46:b4:1c:8c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Sep 27 16:01:46 2026 GMT
Not After : Sep 28 16:01:46 2026 GMT
Subject: CN=a5f7cb3e7f12f2288e03270e448a9610a311a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:07:9a:80:34:77:82:38:95:86:94:59:f9:
18:5e:e3:ee:58:27:24:a7:a2:32:96:f4:d3:b1:8c:
83:53:6f:b5:cc:7f:06:45:bc:af:d5:e1:14:12:3f:
c2:6f:b0:3d:49:74:79:4e:49:f3:19:74:e3:47:47:
60:a8:42:ae:d7:67:13:fe:da:70:9a:3d:df:4e:cc:
01:2b:b3:2c:2e:a3:91:67:b5:66:7d:1e:3a:59:82:
53:28:8e:35:51:09:f7:60:af:06:e6:a3:d0:24:3a:
d6:9c:31:75:3f:e0:14:d9:b9:00:7d:60:92:db:2d:
3f:fa:cc:f0:fc:14:fc:f2:2a:0f:70:a2:4b:c4:a5:
92:2b:e4:f9:63:0b:78:f1:77:b6:d4:80:28:e1:59:
1e:1a:57:85:58:b1:52:d2:b6:6a:07:97:dc:d9:e0:
f8:f1:c0:d4:38:d4:5c:9a:b6:97:2d:15:c2:d3:92:
d0:3e:3c:16:f6:68:d5:32:02:d3:e1:1a:c6:be:06:
73:6c:a4:08:c0:77:47:c7:c6:61:38:8e:1c:07:ec:
35:6b:4a:94:42:36:39:43:48:d6:38:1a:8d:e4:ac:
b5:64:6c:79:4a:4c:8a:c9:a9:d1:a4:7f:62:53:b6:
02:65:a4:4b:87:bd:2b:fd:5b:2c:13:5a:96:73:12:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:CB:3E:7F:12:F2:28:8E:03:27:0E:44:8A:96:10:A3:11:A7:D2
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:63:6a:8a:06:8a:a4:7d:d7:e6:21:7e:88:02:85:4a:c4:10:
df:46:3a:f6:4f:b1:48:24:9f:b3:60:b8:f8:29:13:48:42:2f:
4a:56:a8:0e:5f:64:d8:48:42:aa:97:98:36:90:3e:df:e6:c5:
34:04:c3:ac:e3:82:3f:38:5c:a9:1e:06:43:03:eb:17:7b:31:
22:06:61:90:a1:9e:db:d3:91:23:a0:55:20:3c:62:d9:1a:2b:
88:37:c7:0b:04:bc:b1:ca:e9:e0:16:3a:d7:59:a3:1c:c0:79:
2f:e8:8c:da:38:0c:ff:a4:8a:50:df:bd:0e:b7:8e:de:57:9c:
a2:b1:20:17:66:de:f6:8f:0e:a3:d4:2e:06:89:44:f3:3c:da:
80:f3:a9:65:7b:04:43:0d:92:61:85:80:0f:c8:4e:a1:66:ee:
e3:cf:6e:a8:ae:f4:97:6e:b7:ab:d4:ac:a0:df:5a:97:f0:10:
1a:7a:82:51:69:34:06:e5:a7:91:b4:21:3e:fc:c3:a7:15:40:
1b:41:c7:95:7a:08:70:24:cb:51:c2:1d:58:dc:75:98:9a:ba:
2a:7e:ac:bb:61:82:d9:ba:a8:2f:79:07:18:fe:d8:d5:9b:c1:
83:c1:37:0a:87:b3:67:c5:8a:e2:94:1a:07:09:25:d8:59:59:
44:3d:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:21:14 2026 by rpki-client