Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
File: 8UOb0DqCBvrN-S-zIOAlBUVivLc.mft (raw, json)
Hash identifier: 5M5uJaA8NoxVReTG0uy4R3mm13YQcnuxAgcBBaAnxVw=
Subject key identifier: DC:53:75:A6:9A:71:03:CF:70:A1:9B:AC:0F:CB:1E:D8:46:49:7E:77
Authority key identifier: F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
Certificate issuer: /CN=f1439bd03a8206facdf92fb320e025054562bcb7
Certificate serial: 01A0D83B6A04096A01C208013394AA761CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
Manifest number: 0142
Signing time: Fri 25 Sep 2026 11:02:47 +0000
Manifest this update: Fri 25 Sep 2026 11:02:47 +0000
Manifest next update: Sat 26 Sep 2026 11:02:47 +0000
Files and hashes: 1: 8UOb0DqCBvrN-S-zIOAlBUVivLc.crl (hash: tHN5ZytGZUp3TG4oHItM/Clr2f9yd/WiqSX8XMENTe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:6a:04:09:6a:01:c2:08:01:33:94:aa:76:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1439bd03a8206facdf92fb320e025054562bcb7
Validity
Not Before: Sep 25 11:02:47 2026 GMT
Not After : Sep 26 11:02:47 2026 GMT
Subject: CN=dc5375a69a7103cf70a19bac0fcb1ed846497e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:c8:e0:4b:bc:03:64:57:18:9d:9d:37:83:
a3:0a:1d:bc:a8:7c:9c:c2:09:a0:df:0a:69:49:ee:
ab:41:bb:bc:6f:a9:eb:da:89:40:f6:bb:74:75:13:
5c:e9:79:b0:89:1d:c9:f2:66:ec:e4:a7:c5:03:36:
74:e3:e2:9c:6c:51:fc:63:d5:79:65:d8:8e:e0:e6:
49:1a:f4:36:7e:64:6c:0d:66:2a:b5:f9:1b:03:71:
30:d0:24:ea:61:e3:f6:ae:b4:b1:30:16:be:4d:54:
fb:63:b0:6a:31:db:8b:4e:51:d2:19:3f:b6:4f:e0:
2d:d2:a2:5e:b0:2b:d8:eb:68:c8:c4:63:20:fe:28:
b5:df:96:28:59:98:07:e7:0c:90:da:d5:a0:aa:a7:
24:19:2a:ac:d4:a3:f0:9b:9f:9c:73:6f:0e:1e:bc:
b4:e0:29:1d:be:7b:a3:ca:62:86:e1:75:c3:6a:c5:
87:e6:d8:e7:d2:a0:62:a9:0a:27:8e:a8:be:9f:ec:
fe:2c:69:02:0d:68:e5:83:c4:3f:e5:e9:ea:14:97:
84:ca:8f:90:d6:66:78:16:7d:9a:f7:d7:b7:76:0b:
66:c6:61:a9:b6:47:55:04:a7:1d:8c:2f:39:3a:42:
b6:0d:5e:3a:7c:9e:1f:e3:5d:b4:1f:b8:f7:0a:84:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:53:75:A6:9A:71:03:CF:70:A1:9B:AC:0F:CB:1E:D8:46:49:7E:77
X509v3 Authority Key Identifier:
keyid:F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e3:df:13:2b:19:39:8a:5f:7e:e3:06:0d:25:24:95:38:b1:
e0:da:8a:0f:ce:c1:0b:74:f1:c8:ae:0d:11:22:c4:fd:6d:d2:
b1:53:9d:26:9d:82:86:a3:42:98:0d:7e:7b:d0:62:96:00:a7:
86:21:68:4d:32:38:26:f5:17:99:56:e9:f2:1e:bb:ec:fd:34:
58:30:8b:64:3e:6d:4b:50:5a:11:6a:14:6f:43:67:82:ff:58:
69:d2:97:69:0e:55:1f:e8:86:8e:5c:c3:87:16:6e:69:11:f5:
2b:ea:72:cf:20:52:e9:e8:d2:aa:42:d7:2e:06:cd:7d:90:76:
f9:da:b2:47:46:47:a0:31:a1:eb:65:9a:b0:01:fa:51:f5:93:
45:38:3d:57:5d:c7:0a:d1:50:d1:ff:75:63:cc:a7:1c:24:83:
bc:4c:83:39:c4:f9:a2:7b:77:65:4a:91:86:92:0c:71:ad:50:
53:6e:56:20:e0:d7:01:f0:9f:d9:ed:1d:bd:55:78:44:56:f6:
97:59:94:fc:c0:92:0d:d3:4b:35:fc:29:2f:98:bb:46:dd:9e:
fa:ac:69:b3:12:a6:73:4b:cb:6b:06:cd:77:7c:76:05:70:52:
88:41:7d:7d:a5:59:5e:36:96:06:d0:f7:69:84:ba:59:c4:e2:
27:3a:98:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO2oECWoBwggBM5SqdhygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDM5YmQwM2E4MjA2ZmFjZGY5MmZiMzIwZTAyNTA1NDU2
MmJjYjcwHhcNMjYwOTI1MTEwMjQ3WhcNMjYwOTI2MTEwMjQ3WjAzMTEwLwYDVQQD
EyhkYzUzNzVhNjlhNzEwM2NmNzBhMTliYWMwZmNiMWVkODQ2NDk3ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLI4Eu8A2RXGJ2dN4OjCh28qHyc
wgmg3wppSe6rQbu8b6nr2olA9rt0dRNc6XmwiR3J8mbs5KfFAzZ04+KcbFH8Y9V5
ZdiO4OZJGvQ2fmRsDWYqtfkbA3Ew0CTqYeP2rrSxMBa+TVT7Y7BqMduLTlHSGT+2
T+At0qJesCvY62jIxGMg/ii135YoWZgH5wyQ2tWgqqckGSqs1KPwm5+cc28OHry0
4CkdvnujymKG4XXDasWH5tjn0qBiqQonjqi+n+z+LGkCDWjlg8Q/5enqFJeEyo+Q
1mZ4Fn2a99e3dgtmxmGptkdVBKcdjC85OkK2DV46fJ4f4120H7j3CoRlQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxTdaaacQPPcKGbrA/LHthGSX53MB8GA1UdIwQY
MBaAFPFDm9A6ggb6zfkvsyDgJQVFYry3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVPYjBEcUNCdnJOLVMteklPQWxCVVZpdkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODlmZmEtZjA0Mi00NWJlLThlMjQt
NjNhMzNiMDQzNmQ2LzEvOFVPYjBEcUNCdnJOLVMteklPQWxCVVZpdkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODlmZmEtZjA0Mi00NWJlLThlMjQtNjNhMzNiMDQzNmQ2
LzEvOFVPYjBEcUNCdnJOLVMteklPQWxCVVZpdkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOPfEysZ
OYpffuMGDSUklTix4NqKD87BC3TxyK4NESLE/W3SsVOdJp2ChqNCmA1+e9BilgCn
hiFoTTI4JvUXmVbp8h677P00WDCLZD5tS1BaEWoUb0Nngv9YadKXaQ5VH+iGjlzD
hxZuaRH1K+pyzyBS6ejSqkLXLgbNfZB2+dqyR0ZHoDGh62WasAH6UfWTRTg9V13H
CtFQ0f91Y8ynHCSDvEyDOcT5ont3ZUqRhpIMca1QU25WIODXAfCf2e0dvVV4RFb2
l1mU/MCSDdNLNfwpL5i7Rt2e+qxpsxKmc0vLawbNd3x2BXBSiEF9faVZXjaWBtD3
aYS6WcTiJzqYWw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:19:08 2026 by rpki-client