Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: a0+XCzE5cIrCldS5weWF3TKT+ZTkIUpKVMh8Gf9w7nE=
Subject key identifier: 53:BD:CF:B8:AC:B8:58:97:CB:0E:0F:0F:99:C9:94:5C:7F:C4:6E:C2
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01A0D8A8AF7DFE64843E785C600C203ACE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 1666
Signing time: Fri 25 Sep 2026 13:02:08 +0000
Manifest this update: Fri 25 Sep 2026 13:02:08 +0000
Manifest next update: Sat 26 Sep 2026 13:02:08 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: +cQwj2FGXTib0kJQ9d3MEhGjmD3JQvFkOxuq0G1acXE=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:af:7d:fe:64:84:3e:78:5c:60:0c:20:3a:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Sep 25 13:02:08 2026 GMT
Not After : Sep 26 13:02:08 2026 GMT
Subject: CN=53bdcfb8acb85897cb0e0f0f99c9945c7fc46ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:36:d8:27:af:10:4e:a7:87:69:02:98:09:
b8:2f:af:c1:af:7a:f5:3d:29:f9:c2:7b:7b:ee:57:
eb:f4:a9:39:59:20:01:45:42:44:7f:9d:84:ab:dc:
36:72:c9:a4:7b:88:08:e9:82:00:12:84:c0:f1:66:
8e:c7:eb:5b:8c:b4:8a:eb:8a:5f:bd:25:17:a4:f7:
d6:4f:9b:8b:df:8d:ce:89:84:c9:44:0f:8b:d0:80:
5a:74:3b:7a:cf:bb:08:fd:7f:8b:b3:08:d9:8c:b2:
0e:e1:53:79:f0:05:92:30:fd:cc:0d:80:03:2e:90:
d0:6f:f5:0f:d1:c9:38:e5:4b:01:55:e4:19:b4:8e:
d1:0e:76:9f:89:20:f1:0c:e8:a2:b1:d1:a4:06:f6:
e6:97:48:57:ab:57:91:a9:76:d9:ba:49:c0:34:dc:
4b:88:66:19:3b:38:82:b8:10:b8:d0:4c:ac:6e:45:
67:8e:05:bc:d1:25:7e:80:b0:0a:77:6f:da:2d:e4:
6a:6a:99:41:af:42:b3:59:43:2b:72:7f:3c:73:c7:
bf:d0:7b:78:3d:6f:95:41:70:a8:36:a7:83:f5:2b:
65:a4:e8:94:fe:3a:d7:41:33:2b:91:39:8f:69:2c:
d9:67:36:df:cd:4f:4b:4d:e4:62:b0:18:5b:61:e0:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BD:CF:B8:AC:B8:58:97:CB:0E:0F:0F:99:C9:94:5C:7F:C4:6E:C2
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e4:5a:2d:11:0b:3c:e1:b8:e1:67:7a:55:6e:09:07:23:43:
e2:5c:3f:af:72:2d:10:5b:e2:99:1c:70:0f:6d:76:51:e7:ce:
40:7f:3d:d5:56:43:6b:4f:6e:01:a8:7a:93:52:89:9b:33:20:
fd:cb:5f:ad:9a:3e:47:ca:66:6e:3a:e7:e2:04:cd:04:f8:bb:
a9:84:a3:32:47:05:e8:14:e2:f6:e8:c3:49:23:b2:df:eb:2d:
ef:2a:b4:7d:3d:3d:8c:9a:70:f1:03:08:2e:6c:2e:78:5a:53:
74:ca:b5:50:3e:69:be:b8:4d:fb:fd:03:89:48:93:cb:bc:2b:
6b:07:ee:17:0b:3a:6d:cb:35:2b:72:17:bb:a1:68:3b:88:96:
0f:0b:0c:26:7d:98:f9:0d:b0:70:eb:07:8c:51:f9:b3:df:02:
e6:b6:a6:cf:10:a2:dd:16:df:6f:85:cc:73:4e:e5:b0:c9:be:
e4:b4:56:b7:4b:63:b8:62:dc:55:0d:b1:a9:78:8d:df:b0:3e:
f3:b6:46:af:20:27:7c:19:57:98:cd:c8:e5:f5:f7:ac:52:22:
37:2f:4e:8c:50:7a:47:96:e5:b5:c2:a3:dd:d8:32:1c:20:53:
8a:84:79:2f:07:48:f5:60:a7:fa:3b:cf:5f:ad:e7:56:f2:76:
43:da:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:59 2026 by rpki-client