Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: ci92Osoaq3z7TcLJOUKfiXNLbOcBoD1oclKTdnFYWs4=
Subject key identifier: 5C:A7:AE:4C:A1:1F:2D:98:C1:1D:77:97:B8:4E:39:50:B8:55:EE:58
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 01A0CE5B2F4CC49E609828611A6AA3FFE978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 13:01:17 +0000
Manifest this update: Wed 23 Sep 2026 13:01:17 +0000
Manifest next update: Thu 24 Sep 2026 13:01:17 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: Hr7oidvsiLzfX4qjPzvfg6kp1YiDzWG5h9+8hEsMPNY=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5b:2f:4c:c4:9e:60:98:28:61:1a:6a:a3:ff:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Sep 23 13:01:17 2026 GMT
Not After : Sep 24 13:01:17 2026 GMT
Subject: CN=5ca7ae4ca11f2d98c11d7797b84e3950b855ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:2b:d2:39:1f:49:94:6c:36:86:7e:60:61:
09:c4:26:87:77:53:6c:51:32:f2:4d:06:5d:dd:2f:
ab:4c:a6:ec:9c:54:2d:38:c3:54:14:0c:e2:32:ea:
90:33:df:20:39:c1:48:0c:fb:fc:09:1e:de:c9:4c:
31:c4:ee:d9:88:b1:8b:2f:41:f6:e1:4e:97:d5:08:
39:6f:42:17:ae:a1:92:c4:42:84:c2:e8:00:42:2d:
cc:78:81:81:7c:9b:dd:35:44:95:11:c9:f0:5a:a3:
41:4a:c9:db:75:b1:6d:2d:32:50:7a:dc:0c:9d:fe:
3e:51:82:ac:89:5b:6f:a2:2a:bb:e4:8f:f6:83:ec:
23:9f:96:11:ef:15:af:26:68:42:bf:f3:cc:e6:97:
15:24:4f:0f:b9:07:a7:d4:a9:5c:a2:90:de:84:67:
ba:be:d9:1e:ff:88:2f:0d:47:2f:2c:70:7d:23:82:
73:93:99:e8:87:ad:54:12:27:ea:1f:b2:6c:1a:74:
ba:2e:ac:f9:9e:bf:46:dd:b4:ba:01:40:b0:71:68:
73:cc:4c:24:63:f4:b9:83:cd:c7:98:13:e1:35:02:
9b:8e:c6:d9:85:25:62:5f:ae:49:4e:3c:50:4a:0e:
9b:90:8e:8f:c9:ac:d1:a8:0e:0a:2a:98:3a:7d:d6:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:AE:4C:A1:1F:2D:98:C1:1D:77:97:B8:4E:39:50:B8:55:EE:58
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:d2:a8:64:0e:67:78:f2:46:28:7e:9e:30:db:88:00:4c:
ff:eb:1e:a7:d1:d7:d0:e1:ae:d8:ea:0d:a9:73:9c:8f:3b:be:
d9:d6:3a:da:30:8f:23:3b:ab:be:de:6e:38:29:e9:6a:40:a2:
11:b7:13:6b:e7:84:80:9f:17:eb:11:84:3d:a2:71:c2:69:58:
31:e3:11:1d:8b:ca:7e:d1:cd:6c:d8:42:30:e8:4e:55:77:91:
44:29:2f:a1:0e:9d:55:bd:54:10:f7:cf:1b:89:c1:4c:a2:a2:
43:b1:3c:f5:9b:62:6e:3b:f0:9f:f1:7d:4d:f6:fb:24:94:83:
53:18:aa:c6:f5:22:b0:4c:66:ff:df:40:ef:34:7d:88:94:54:
56:26:c5:97:35:2d:bc:74:7a:4d:c2:34:4d:a7:27:00:b1:13:
db:e1:26:2b:7d:b5:6d:53:11:4e:51:cb:e3:da:ce:9e:88:2e:
a7:4b:15:5f:ba:29:5f:a3:2d:33:ef:91:90:2e:38:b6:e4:66:
9e:f9:5b:4b:7c:53:9c:11:44:e1:27:18:65:36:49:7d:44:60:
6c:be:0f:13:4c:8b:bf:e4:93:14:ac:83:2e:9f:09:71:24:b3:
fa:ba:ef:ea:7a:d7:be:0a:1f:df:30:e1:93:4c:17:2e:2a:44:
a6:de:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:52 2026 by rpki-client