Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: Q6bBWUPi4hoOLimgbgdgU6MmTKtwzsAyzXVSDrU4gSo=
Subject key identifier: 83:87:EF:C7:5E:18:C0:59:61:D1:E8:20:64:16:B7:A7:26:83:A8:86
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01A0CFA4CF8CC4F546658F42D2B46A325991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0B2C
Signing time: Wed 23 Sep 2026 19:01:19 +0000
Manifest this update: Wed 23 Sep 2026 19:01:19 +0000
Manifest next update: Thu 24 Sep 2026 19:01:19 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: OdSLM0HzU96cQoOVe5v8xo8E4aquCJnnJuWszNhstpg=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:cf:8c:c4:f5:46:65:8f:42:d2:b4:6a:32:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Sep 23 19:01:19 2026 GMT
Not After : Sep 24 19:01:19 2026 GMT
Subject: CN=8387efc75e18c05961d1e8206416b7a72683a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:47:81:b3:c0:d9:87:16:59:4c:0b:a2:ae:66:
44:0c:f1:e3:e9:53:9a:2f:d5:e6:37:9e:3b:22:dc:
d3:31:d8:c5:40:c1:0b:ec:dd:8a:3f:6a:12:41:ed:
bd:8f:68:20:e1:6a:4b:71:3d:c3:01:5a:cd:3d:f2:
3b:a2:79:7e:14:e9:28:3b:b0:f2:4e:18:a7:ab:75:
96:18:70:96:04:fd:c4:e2:ee:29:9b:36:5f:65:0a:
c5:6c:4d:73:60:c3:b5:a1:3b:d4:01:8b:75:4d:db:
ce:45:ee:5c:8e:56:a7:2e:c6:39:79:2b:ed:98:4e:
67:4a:d6:b4:03:fe:cc:c5:99:0d:7e:c5:fb:74:f8:
83:2b:d1:51:e4:8f:05:c2:bf:4d:e4:a6:ba:94:82:
d9:42:fe:92:c3:f3:a4:58:b3:cf:e9:8f:e9:ae:39:
81:84:fc:e4:54:a8:58:f1:4e:9f:30:53:29:35:c9:
db:58:c8:6a:b5:7d:96:d7:ee:1d:0e:12:ed:83:47:
17:3a:88:67:50:60:44:29:ff:74:bf:b0:f3:c4:51:
83:52:82:3b:87:bb:9d:44:1a:97:eb:3a:31:90:dd:
ff:c5:57:59:83:bb:44:74:8c:bc:f8:13:36:42:cf:
bc:4a:b7:b1:81:dc:1a:8d:f3:b7:c5:65:49:f4:95:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:EF:C7:5E:18:C0:59:61:D1:E8:20:64:16:B7:A7:26:83:A8:86
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:13:9d:fe:4f:ac:1e:48:be:99:19:02:41:ff:a9:97:37:d9:
cd:46:3c:c5:3d:ac:91:1d:f3:2f:d6:fc:c0:0d:ca:0a:0e:42:
7c:42:eb:8c:78:ac:ed:51:3e:e9:32:76:74:b1:7a:29:42:15:
20:94:4e:26:72:dd:a1:10:93:4d:e9:de:33:c9:99:07:99:bd:
eb:0c:84:1d:71:eb:fd:ef:6a:48:74:0a:4e:c2:ae:d7:19:ea:
b1:f1:51:cf:f4:9a:51:b4:fc:bc:0d:7c:94:d2:b8:10:09:6a:
3a:7f:b7:f0:ae:97:bf:da:ff:09:a8:1a:01:98:98:47:70:47:
5d:e6:38:c6:11:be:9f:01:fc:55:25:7a:ae:19:58:d1:f9:42:
76:f0:72:fd:82:61:98:87:34:37:ca:18:56:42:e6:94:25:92:
23:6a:0b:36:a6:d9:77:b7:e6:38:03:2a:c1:26:d8:2a:7c:02:
98:a4:46:01:a4:3e:5e:7c:d7:87:00:75:88:00:71:65:1c:38:
ad:e5:11:d9:8a:b0:fa:b0:42:c4:cf:7d:ac:22:12:5e:09:cc:
a9:64:b1:12:e8:d9:56:b1:42:54:7d:cd:c4:75:35:bf:78:dc:
9e:0d:22:a0:62:50:70:f3:1d:0f:7c:fe:c3:3d:33:f2:39:ac:
c3:dd:dc:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpM+MxPVGZY9C0rRqMlmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjYwOTIzMTkwMTE5WhcNMjYwOTI0MTkwMTE5WjAzMTEwLwYDVQQD
Eyg4Mzg3ZWZjNzVlMThjMDU5NjFkMWU4MjA2NDE2YjdhNzI2ODNhODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EeBs8DZhxZZTAuirmZEDPHj6VOa
L9XmN547ItzTMdjFQMEL7N2KP2oSQe29j2gg4WpLcT3DAVrNPfI7onl+FOkoO7Dy
Thinq3WWGHCWBP3E4u4pmzZfZQrFbE1zYMO1oTvUAYt1TdvORe5cjlanLsY5eSvt
mE5nSta0A/7MxZkNfsX7dPiDK9FR5I8Fwr9N5Ka6lILZQv6Sw/OkWLPP6Y/prjmB
hPzkVKhY8U6fMFMpNcnbWMhqtX2W1+4dDhLtg0cXOohnUGBEKf90v7DzxFGDUoI7
h7udRBqX6zoxkN3/xVdZg7tEdIy8+BM2Qs+8SrexgdwajfO3xWVJ9JVywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOH78deGMBZYdHoIGQWt6cmg6iGMB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxOd/k+s
Hki+mRkCQf+plzfZzUY8xT2skR3zL9b8wA3KCg5CfELrjHis7VE+6TJ2dLF6KUIV
IJROJnLdoRCTTeneM8mZB5m96wyEHXHr/e9qSHQKTsKu1xnqsfFRz/SaUbT8vA18
lNK4EAlqOn+38K6Xv9r/CagaAZiYR3BHXeY4xhG+nwH8VSV6rhlY0flCdvBy/YJh
mIc0N8oYVkLmlCWSI2oLNqbZd7fmOAMqwSbYKnwCmKRGAaQ+XnzXhwB1iABxZRw4
reUR2Yqw+rBCxM99rCISXgnMqWSxEujZVrFCVH3NxHU1v3jcng0ioGJQcPMdD3z+
wz0z8jmsw93cVw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:40:13 2026 by rpki-client