Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier: apPXv2otYGx+/5BsNY77hD36hMtIyJdw9bEH8zrsAPM=
Subject key identifier: F6:63:C5:7D:0F:84:57:01:1F:1C:8A:30:0B:32:67:C1:D8:C6:FA:8C
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 01A0DA96D7B19CF5287A8E0FDB40817BC30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number: 1A28
Signing time: Fri 25 Sep 2026 22:01:53 +0000
Manifest this update: Fri 25 Sep 2026 22:01:53 +0000
Manifest next update: Sat 26 Sep 2026 22:01:53 +0000
Files and hashes: 1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: ulI+SeiTEvwVBFAWAl8ehX5BSkfSIAhU4Fbt2MbxfvM=)
3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:d7:b1:9c:f5:28:7a:8e:0f:db:40:81:7b:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Sep 25 22:01:53 2026 GMT
Not After : Sep 26 22:01:53 2026 GMT
Subject: CN=f663c57d0f8457011f1c8a300b3267c1d8c6fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:c2:42:3d:c7:fd:3d:33:c5:82:0d:39:2d:
68:17:40:0e:3f:0b:2a:c5:d6:0a:cb:f3:ca:2f:6e:
73:5f:af:fa:eb:5e:ff:71:30:ae:a1:b3:d8:cd:84:
c7:c9:c2:c2:2a:b8:26:5a:9f:82:68:fb:76:8a:46:
e7:1c:78:d9:e9:d4:f3:4b:36:27:86:4d:22:9d:12:
99:0b:57:c4:6e:99:31:12:f1:7f:a9:70:00:e6:16:
6a:eb:a6:dd:8a:2f:c2:fb:77:7d:99:be:e0:e2:db:
9e:fb:62:56:d5:4e:40:73:89:df:ca:9d:43:5d:ca:
f0:a4:61:2f:bf:4c:be:83:a5:8b:a5:97:d2:46:42:
07:b7:72:0d:f2:78:7a:be:d9:ef:26:1c:be:49:ea:
4b:64:84:10:cf:ab:70:af:3e:a6:cd:7c:b2:10:6b:
de:98:54:b8:56:27:fc:1a:f9:de:bf:b7:02:bd:23:
b1:61:5b:65:16:52:c1:ee:01:42:45:23:ff:94:a1:
cf:22:e1:b8:b2:d4:3a:bd:ea:e5:94:0c:40:f6:98:
69:ef:b6:13:6f:c1:62:9c:b5:cd:b6:33:cd:dc:f4:
6e:ab:57:3e:d9:4e:39:ce:f6:38:9c:25:78:da:6c:
6b:af:fa:30:70:9d:08:ef:89:59:48:46:1a:99:4e:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:63:C5:7D:0F:84:57:01:1F:1C:8A:30:0B:32:67:C1:D8:C6:FA:8C
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:f7:fe:7f:59:43:ab:b2:de:74:85:54:9f:6b:ff:cd:02:
35:aa:aa:bf:37:8b:9b:2e:45:fd:bd:bb:78:a7:50:ba:70:6d:
c2:2e:07:8c:38:99:70:dc:b9:fb:33:c4:ab:7a:19:0e:7d:4a:
67:0d:45:2d:63:f3:86:52:0e:5f:7f:20:6f:81:bc:df:be:3f:
88:c7:9a:0a:87:0e:70:28:79:14:e1:c1:e8:43:ec:e1:f4:9e:
96:81:ad:79:f9:6e:a6:96:1c:84:ee:5d:37:84:c3:2e:bd:f3:
be:fb:a3:fc:8c:f2:29:1e:f9:c5:a3:c9:41:37:a4:45:cd:d6:
05:2e:a1:09:89:85:19:4f:b7:1b:3a:d3:a5:07:14:4a:00:ce:
bf:09:5d:f8:a4:e6:63:b0:67:d4:32:66:27:54:38:5f:18:b0:
a0:a1:2e:e8:d9:bc:a6:bb:56:91:69:22:26:22:73:71:5b:7b:
4c:0d:d6:28:08:ee:ad:70:b3:23:34:b0:aa:fb:c0:12:39:6b:
55:8f:ee:3f:91:5d:bc:72:08:7d:06:b5:c4:c5:48:34:9c:05:
e4:e4:36:46:5a:7a:00:9a:9d:02:e1:30:ef:b2:db:59:86:aa:
c7:97:79:ab:58:cb:98:bb:e3:5c:88:91:8a:84:cb:5e:12:25:
cc:35:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:07 2026 by rpki-client