
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: Nny4l9qInCmn+Iq3VzI6y5xyiNtOg01lQX7whWmVlI4=
Subject key identifier: EF:9E:75:2C:63:7D:AA:A6:35:66:06:5D:D1:BD:40:63:4D:08:52:08
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 01A0DB3B421214FFA2BC43B5098399814CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0730
Signing time: Sat 26 Sep 2026 01:01:28 +0000
Manifest this update: Sat 26 Sep 2026 01:01:28 +0000
Manifest next update: Sun 27 Sep 2026 01:01:28 +0000
Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: D06rhmleysnSukR94Fi5Fx+1H/sS4jYJXGAcukjMv2c=)
3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:42:12:14:ff:a2:bc:43:b5:09:83:99:81:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Sep 26 01:01:28 2026 GMT
Not After : Sep 27 01:01:28 2026 GMT
Subject: CN=ef9e752c637daaa63566065dd1bd40634d085208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:12:63:6f:32:4d:a9:01:a7:1b:85:2a:ca:
2e:96:15:e8:61:ce:ad:2b:69:eb:82:83:48:e4:55:
57:dd:6a:15:fd:90:bd:87:43:ea:dc:00:0c:19:fa:
ca:8d:41:3e:0f:ac:50:09:9e:a5:7b:7b:d3:fd:10:
c1:93:c9:f5:5b:00:43:26:0c:89:14:1f:83:d2:df:
e7:ad:f9:39:3d:e3:89:d1:9c:2c:a7:57:45:bb:b1:
23:01:2c:86:82:cd:df:c5:f0:fb:17:68:94:d2:1f:
ad:0b:40:a9:ed:b9:54:3a:9e:ea:87:70:c5:a6:65:
16:5b:47:5c:bc:f2:f5:e3:a6:cc:7a:d2:1f:2f:98:
e1:1b:08:7b:12:62:b1:b1:76:3d:7f:31:b0:ee:30:
fc:5c:00:73:9f:b4:b3:7a:5d:48:69:b7:ff:9d:9c:
a1:ea:b1:05:31:a2:0d:7d:14:d2:88:ff:57:31:a6:
d2:17:1c:39:ba:90:e6:f5:8c:b4:24:88:ae:12:3d:
2d:1d:a0:08:ca:da:1e:dd:68:9f:79:ea:80:5c:62:
4c:df:30:cf:43:95:21:54:3b:10:d8:6e:6c:07:a8:
4a:ab:0b:53:06:86:17:fb:9d:d8:3f:7f:32:81:11:
6b:d3:6e:48:56:32:d8:45:ca:9a:de:32:15:18:85:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9E:75:2C:63:7D:AA:A6:35:66:06:5D:D1:BD:40:63:4D:08:52:08
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:ed:a9:70:37:49:32:62:d4:6d:f5:3b:a4:77:15:32:0c:
7c:56:31:9d:f9:4f:e7:bf:64:52:f8:f7:cb:28:78:f9:29:cf:
ea:68:4a:87:dd:c1:b4:86:52:e2:f7:99:ae:1f:a0:54:4b:2e:
1c:7a:82:93:8f:b3:c9:23:df:e2:9b:be:fe:94:67:ef:cd:12:
ae:26:cf:7f:11:bd:42:63:8e:c3:19:eb:51:c2:2c:9c:37:23:
b5:ef:8b:47:5a:ed:38:4b:21:70:2c:ad:d2:77:a6:de:fd:93:
67:17:ea:3d:0b:a1:e4:24:33:fc:b7:79:03:b0:56:f4:ef:68:
08:81:e1:1a:04:c3:d1:fa:13:5e:7a:b6:b7:49:d4:13:bf:39:
a7:a0:d2:0f:ae:65:c9:bf:48:0d:ce:56:e1:65:a6:a5:44:fe:
66:01:82:e2:66:81:98:6e:fe:23:ef:71:d4:f8:36:92:36:3b:
39:6b:51:b2:97:9d:2c:11:e7:73:3f:60:ff:df:f4:cd:aa:28:
af:84:c2:0a:37:98:9a:c3:86:e8:91:e8:a3:29:8f:a4:7a:b3:
64:83:43:93:5b:da:a4:48:2a:60:a8:53:c4:f3:b7:23:e4:0c:
da:bc:04:db:7b:54:05:92:3a:51:2d:77:45:65:cf:b9:cd:72:
6d:a4:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:45:28 2026 by rpki-client