Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: xKU5HeJa6ILYVb/ESMLg0P4F68SxrMz0uIBTkAtD8PU=
Subject key identifier: 6C:9D:C3:75:94:02:80:A6:D5:BA:DD:1B:08:4A:F6:7D:3C:FD:FB:E8
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 01A0CA7E0843DCD38616DA8D69D6C1370F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 0A4C
Signing time: Tue 22 Sep 2026 19:00:52 +0000
Manifest this update: Tue 22 Sep 2026 19:00:52 +0000
Manifest next update: Wed 23 Sep 2026 19:00:52 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: KumRnqa7EpjAFUCwZ91Z0EY5SifQAUKIG0nMrPhWkFQ=)
2: MOE6KwN-epUQMdljICsn17Njfbg.roa (hash: iNc+kg2dbOxkcfPRJ+ToFioDzAzKbLX2bomVYrhE+a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:08:43:dc:d3:86:16:da:8d:69:d6:c1:37:0f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Sep 22 19:00:52 2026 GMT
Not After : Sep 23 19:00:52 2026 GMT
Subject: CN=6c9dc375940280a6d5badd1b084af67d3cfdfbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:fe:7c:75:20:f3:1a:5d:4e:11:82:da:5f:
3f:c9:e8:e5:96:46:30:a4:b4:d9:62:fd:55:86:71:
da:73:24:f9:2c:44:aa:68:e1:54:c4:7d:d6:e4:08:
0c:8a:6e:10:12:5b:9d:44:7f:1f:58:de:4b:e4:a3:
f2:a8:a1:39:4b:0f:8f:a4:cd:53:31:9e:4a:e1:99:
ad:92:24:b9:f8:f6:c1:1c:6d:ed:9a:3f:0c:e4:37:
30:18:42:57:ec:de:dd:db:6c:70:86:cf:48:a7:27:
5a:82:17:d6:a9:2b:5f:99:18:15:e0:b7:85:ca:ab:
66:22:ab:02:70:1c:36:f5:7a:c6:14:ce:6a:e6:d9:
b6:f8:eb:7a:90:de:16:85:a7:d7:c0:2e:5c:8e:33:
31:d4:76:12:b5:56:e0:8b:c3:d3:69:5a:89:04:85:
e3:23:a0:e3:c4:5e:b9:2c:9b:04:e8:94:e9:97:e2:
39:68:bd:76:80:98:29:fa:3a:54:f5:57:c3:63:af:
13:95:3b:48:c8:84:24:60:6e:11:dc:df:16:8f:94:
bb:ea:3f:37:ae:f4:25:f2:7d:76:81:b2:5f:79:a3:
2b:dc:ef:fd:4d:4a:a4:cb:98:bf:37:e8:01:50:92:
cc:42:46:13:50:4b:89:fe:d6:71:83:71:ba:26:47:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:C3:75:94:02:80:A6:D5:BA:DD:1B:08:4A:F6:7D:3C:FD:FB:E8
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:bb:a7:bd:2d:c3:a1:77:4c:f0:e7:90:7f:09:1a:15:36:
63:4e:4a:3b:e0:a3:51:48:bb:56:36:e0:63:c9:d9:17:0a:af:
c4:59:26:66:79:1b:d3:c3:fe:84:15:09:63:37:c4:68:33:cc:
23:0d:eb:f7:02:aa:c1:5c:d4:e9:f6:df:86:e9:62:c4:06:d6:
73:b8:ab:bf:67:a0:7b:95:63:a5:54:c3:5b:ae:4c:e8:5f:6a:
88:4c:3a:7b:17:8e:ff:ba:d2:af:ad:ad:6c:42:71:36:33:a0:
bb:25:b1:a7:98:02:4b:51:f6:05:20:13:c3:73:4c:8b:ac:ee:
24:9d:44:7f:87:9b:96:ee:2c:d6:a5:46:3a:38:b9:c0:e2:81:
0c:64:78:30:83:ad:82:b6:99:22:26:6f:7a:0a:8a:35:db:55:
a9:ea:ea:03:ca:2b:4b:0f:86:9a:38:ec:12:a2:7b:ce:2e:91:
1a:4a:91:f7:59:a4:78:f1:76:38:01:18:c3:78:54:ee:cc:98:
6e:39:18:5e:71:73:aa:24:06:b4:a5:b6:52:0e:ac:13:b5:83:
e0:a9:ca:2b:fa:8b:a7:74:f2:b1:e3:3a:2c:fd:c0:75:27:90:
29:0a:94:b0:0b:27:b5:64:ec:2b:33:62:00:60:13:6b:38:b8:
10:f6:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:15:54 2026 by rpki-client