
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier: Tj9I7bNop0yVfFHl6xvrlyZXvgkojScbzPermJcp0bs=
Subject key identifier: 1B:F5:94:3E:D8:6A:DA:A9:D6:74:3C:3F:6B:E3:CE:1B:D7:CD:79:4E
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01A0CB59BE5C979D5F8B43ED738013729656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number: 1B6F
Signing time: Tue 22 Sep 2026 23:00:51 +0000
Manifest this update: Tue 22 Sep 2026 23:00:51 +0000
Manifest next update: Wed 23 Sep 2026 23:00:51 +0000
Files and hashes: 1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
2: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
3: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
4: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
5: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: 0zcEGhHrKb2t6XuMvUR9qSlWTA1QLtIQWC+cKPnlWMU=)
6: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
7: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
8: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
9: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
10: DoJEYt97N23eBvsMcnIOY6ZNcLQ.roa (hash: c3vfVLlIrAY1SyBEM3blDE+VN4LQBi0IdvidL1hF+CY=)
11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
15: KZa0_YbQudyugjKyiPylUaqa8cM.roa (hash: a784ru0dQdWa0IZvtgp9kIyG4IBuCvFCniVmgSRiiKk=)
16: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
17: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
20: cxK58b8OqyweEEX7ZSzNThByzJ4.roa (hash: ksTlPnVTNF8gujtMt/7QmPYDNk3NsHykT5fC5mx0yFE=)
21: derjq_a2xULSiq0hLt8SXBP15vM.roa (hash: OWg/eoTyibIEUVgKcv4tF2DTQ0GhFdaM6Rv6pIMddZ8=)
22: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
23: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
24: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
25: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
26: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
27: p0F1Di07cfHgVtNuzv6FJ4iFClI.roa (hash: 9lY1NiQxftdsmh+IAe0uysjcwZzDj+ipCzGUQqD681I=)
28: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
29: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
30: yfGuO_RiAeAX-4VWDDK9O80bQVk.roa (hash: wbUMpspJWNO4G0cReSr6miT8s7Y5qAH8rRHGKlw0D/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:be:5c:97:9d:5f:8b:43:ed:73:80:13:72:96:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Sep 22 23:00:51 2026 GMT
Not After : Sep 23 23:00:51 2026 GMT
Subject: CN=1bf5943ed86adaa9d6743c3f6be3ce1bd7cd794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:bb:44:cc:98:3f:e4:49:18:e2:ab:33:b8:
45:9e:94:54:4d:dc:fb:0d:6d:5c:84:27:7b:03:c7:
55:c3:d0:b3:df:e6:34:44:e3:3c:69:96:16:51:ac:
ea:a1:95:ab:f2:19:91:1a:0f:44:d1:46:5e:73:28:
86:8f:fd:b9:dc:57:14:81:33:d8:66:ff:ee:8b:7a:
e2:eb:2b:35:0f:c1:60:73:ab:0d:80:5a:86:fb:37:
1c:2e:43:11:85:59:64:59:d6:bf:00:2f:e3:7c:5a:
f2:f0:13:4c:34:fa:5f:94:d9:23:34:e6:98:f8:c9:
45:1e:21:84:e7:39:fb:66:4e:69:de:a4:d5:b3:5f:
3e:3c:63:19:b5:4d:1b:46:25:b2:90:1e:f3:ea:92:
46:46:01:73:bc:02:7e:ba:21:c0:6f:9b:48:aa:3f:
37:17:e9:6f:d3:50:02:83:f1:68:bf:7d:70:66:e8:
db:54:a2:55:ca:b2:2e:11:da:96:6c:c6:d4:ea:d2:
b4:a2:e9:f9:0f:18:65:ee:96:39:43:a4:3d:0e:b0:
e9:39:3a:79:20:f1:51:9a:ae:60:a5:07:14:22:82:
dd:11:ea:f7:66:58:63:0a:ec:53:85:61:53:e1:e8:
89:93:60:49:0e:49:14:b9:23:1a:40:d2:ae:52:9a:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:94:3E:D8:6A:DA:A9:D6:74:3C:3F:6B:E3:CE:1B:D7:CD:79:4E
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:bd:23:29:6f:13:30:fd:b7:ef:52:c5:a2:8e:56:ab:ea:
35:03:4e:ce:b6:f7:af:91:4e:b2:3f:87:af:2f:0e:d0:88:6c:
42:60:be:71:b7:a4:71:24:01:98:2e:2f:4b:7f:14:ca:fe:20:
27:8f:ec:a7:94:e3:80:ee:cf:a8:83:86:03:41:53:bb:74:4d:
fb:ed:4c:f2:fc:5c:28:8c:5c:3f:cc:8a:3f:1c:08:97:16:7f:
fa:15:08:1e:7d:28:0b:22:5b:db:8a:c8:35:a3:3c:42:33:de:
b8:b3:67:cd:8d:0b:4a:30:32:c5:75:4e:6e:85:71:f8:71:81:
04:3a:9d:4a:2c:65:01:d2:83:20:f0:1b:fc:29:42:8e:c4:b1:
fe:2c:02:e9:e8:b3:e6:2e:90:94:4e:ce:f0:d4:90:3a:ee:1f:
9e:d2:76:17:60:9a:3d:9a:5a:71:fd:b0:90:c2:a3:d6:9b:14:
70:17:ca:ee:a5:00:3b:ec:79:32:62:f5:e5:68:83:41:3f:38:
d4:91:52:93:5d:3c:76:85:a3:5c:cb:c1:31:e2:62:e3:3e:f5:
ae:0c:89:27:36:c4:58:09:1b:99:bf:47:f8:d8:fa:b2:22:06:
24:1e:08:e5:3d:5f:b7:db:f4:cc:96:74:bc:65:c7:9f:f5:d9:
6c:41:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:11:19 2026 by rpki-client