Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: Gn2OWFhrjmkq8W7Tg5taSfHZ5FIKA3RrXPa14hN3qWM=
Subject key identifier: 03:0A:A0:FC:09:A3:32:DF:FD:CB:56:72:34:A5:A3:F2:74:69:A0:95
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 01A12053616656FA7DC18C4ED89DF4D72BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 109C
Signing time: Fri 09 Oct 2026 11:01:37 +0000
Manifest this update: Fri 09 Oct 2026 11:01:37 +0000
Manifest next update: Sat 10 Oct 2026 11:01:37 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: lkzRxctKiNtvCAMl3bHoLFcqiBeGaOBr7r8Q0+3UMpk=)
2: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
3: x6466fQhbf0bvZhCEEjWRTSFjns.asa (hash: uPbZxtxNDUvoYFgrUv2BzHCtpuKoUHtdiB98m/GeDD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:53:61:66:56:fa:7d:c1:8c:4e:d8:9d:f4:d7:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Oct 9 11:01:37 2026 GMT
Not After : Oct 10 11:01:37 2026 GMT
Subject: CN=030aa0fc09a332dffdcb567234a5a3f27469a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:83:60:d3:d0:40:60:8e:bf:7c:f2:56:d6:
bc:ee:05:9e:90:28:71:9f:50:aa:71:0a:f7:06:69:
2a:9b:39:52:ef:3e:54:fb:42:22:ee:3d:6c:4d:6e:
af:12:fe:dd:38:f3:9d:d1:f4:4c:a3:9a:04:dc:bb:
64:67:69:7d:cb:6d:dd:bf:1b:99:60:fc:57:4b:c8:
65:cd:07:05:55:91:8c:ce:83:a4:c6:e2:e4:72:c3:
24:40:8d:cc:d1:b5:64:a0:4b:3b:53:7d:c0:32:71:
ed:a1:b6:40:27:0c:34:fa:f1:34:9d:92:ec:f4:41:
b3:d8:ae:b4:38:82:94:6b:e8:ba:8c:ad:01:4e:56:
f0:76:0c:ce:7c:48:2b:b7:0b:5b:85:70:84:31:76:
4c:22:9d:d9:6e:30:b2:ff:8b:d0:49:b8:4f:3d:32:
1e:55:e3:de:8a:90:e2:0b:33:39:64:1b:5b:0c:8c:
a8:b2:a1:08:6f:8d:cc:04:32:6e:ae:fd:d0:71:9c:
ac:22:92:1a:b9:40:88:46:10:8f:68:5b:8b:60:04:
4f:fa:6c:20:e3:8d:be:72:e3:3a:f0:40:65:f3:14:
88:09:b7:00:9a:9e:5d:ea:e8:75:f9:81:34:17:43:
ee:9c:86:95:9f:37:92:44:0a:4e:ff:54:99:48:93:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0A:A0:FC:09:A3:32:DF:FD:CB:56:72:34:A5:A3:F2:74:69:A0:95
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:27:14:03:81:97:15:9d:7d:c0:37:e3:8f:7b:17:55:10:
d1:25:0f:f2:fb:6f:fc:d4:bf:42:b1:b1:94:47:6a:8f:2e:4c:
e4:a7:09:f5:99:71:97:39:38:5a:44:98:a9:97:71:fd:75:2a:
1d:e6:d6:d3:f0:01:1e:69:d2:a2:92:3c:b5:2b:77:18:6f:a8:
ee:fb:b4:ca:2c:8a:18:26:7c:0c:30:e9:28:02:d3:28:34:51:
d4:65:3c:13:e5:0c:05:d5:49:66:e8:dd:d1:62:cb:16:93:15:
7c:ed:2d:62:f1:07:59:66:54:92:39:1a:72:28:f8:08:17:19:
f1:cd:95:93:12:ef:75:3a:20:49:1b:72:f0:7b:c3:d2:e4:5d:
3b:41:55:35:32:47:da:22:b9:30:13:68:6e:0f:2a:22:6d:1c:
21:bc:02:b0:79:d0:c5:34:bb:c8:dc:06:c3:ff:5e:e5:a8:37:
ab:4c:3a:f1:a6:67:8a:61:df:86:3b:ea:cc:bb:38:62:95:86:
4a:cd:00:4b:8b:37:c6:ab:e5:62:e5:d3:1e:5b:e8:46:12:9e:
07:b7:3f:76:7d:55:68:d9:31:7b:01:04:c8:ef:da:59:06:a8:
89:f9:24:3d:05:a2:07:18:ec:f0:78:33:ac:3b:a8:60:0e:91:
8e:5f:da:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:17:43 2026 by rpki-client