Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: kFBQT6/5nm4a2Y0ziTfphsD1ocNirTjknz2xRlETMgA=
Subject key identifier: 1E:19:FB:27:6B:A1:9C:AC:C8:D6:FE:A8:74:A5:1A:A9:A9:1A:5F:A6
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 01A0CE243682B6F5115F424E04180BFDC953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1763
Signing time: Wed 23 Sep 2026 12:01:14 +0000
Manifest this update: Wed 23 Sep 2026 12:01:14 +0000
Manifest next update: Thu 24 Sep 2026 12:01:14 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: JzTb6NcvbPlRzo9KgFRbSEXdVGdiasaMipZzcI0mjt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:36:82:b6:f5:11:5f:42:4e:04:18:0b:fd:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Sep 23 12:01:14 2026 GMT
Not After : Sep 24 12:01:14 2026 GMT
Subject: CN=1e19fb276ba19cacc8d6fea874a51aa9a91a5fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:f7:d2:05:57:d6:6b:96:ff:5c:d4:fc:8a:
8f:85:29:ac:ba:e6:92:f1:42:be:c4:14:cd:81:86:
e7:c9:55:a9:31:31:d6:8b:dc:7e:f6:a4:e8:51:5e:
cc:e6:37:36:9f:0a:35:17:3a:46:7f:3b:30:df:6b:
a5:75:7b:cb:77:72:d2:38:83:57:e1:e1:72:22:69:
9a:d2:b0:6a:d4:18:e9:83:e5:ae:ce:ef:21:f6:2f:
96:72:9f:a2:2a:e2:59:c4:ed:d5:5b:21:2b:3a:dc:
7d:75:c2:c1:02:61:b8:6e:9f:27:37:54:81:06:87:
18:79:8e:30:e2:1e:30:0a:85:17:96:90:0a:ba:b2:
10:65:51:0a:88:40:5f:36:db:28:ab:41:c4:08:ea:
08:c7:44:a8:55:af:40:65:e9:2b:8b:87:10:29:b0:
8c:36:e8:f0:c4:28:ed:91:af:9d:d7:ff:9b:80:00:
25:93:81:f4:31:de:1f:16:dd:6a:20:d4:6f:5f:0d:
c0:53:47:62:9b:55:8d:00:13:8e:b3:90:6f:69:c7:
db:fb:25:d0:75:18:d7:87:5b:3f:fd:31:10:7a:09:
ae:d6:e6:19:eb:eb:67:c7:e7:93:71:af:66:a8:e1:
09:51:4a:f9:12:6a:78:40:ad:16:d0:a0:78:4f:ce:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:FB:27:6B:A1:9C:AC:C8:D6:FE:A8:74:A5:1A:A9:A9:1A:5F:A6
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:87:05:42:b8:0d:c2:bb:6f:f5:4a:cf:a7:ee:af:31:87:4b:
ac:c2:24:9d:81:81:b7:60:3e:6a:96:37:ff:6b:65:9d:48:5f:
1b:39:b1:2c:90:40:90:46:4a:79:f9:4e:76:56:71:49:8f:8c:
ce:9a:e8:c3:dc:1c:ef:74:35:ed:29:49:ea:ce:f7:e1:c1:56:
42:74:41:58:a3:a9:f9:d8:36:bb:3d:de:2a:20:8a:dc:3f:f2:
60:d2:97:a9:d2:eb:5f:1c:4a:0f:cd:cf:ae:2a:07:19:7e:f1:
a5:7b:2d:08:98:b8:e1:d6:69:16:cd:1f:78:d6:ec:89:3c:02:
4f:89:84:77:55:50:8c:32:50:09:3a:ff:ec:e8:82:1c:77:4e:
5d:47:2d:83:b5:cc:b7:16:77:e0:60:9f:58:3d:c8:e0:c6:76:
ae:b6:13:30:8f:67:d1:60:37:2f:b4:ab:c9:dd:7d:5f:48:dc:
6e:f7:70:81:50:8c:5b:5f:8a:0b:7c:c5:97:92:33:f0:85:af:
8b:02:47:46:fe:15:13:c9:cb:1d:67:3b:ab:d3:33:5e:51:d3:
b0:7d:d1:84:5d:8f:7a:dc:7a:d9:a6:ae:fc:41:19:e5:17:de:
aa:77:a4:3d:b8:90:7a:5c:db:70:b8:d2:26:af:d7:0e:70:5e:
5c:ac:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:13 2026 by rpki-client