Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: zcb0Ar8/AsaDeIGa2KSwpkB98gYSh5bhZxfxatTEpYc=
Subject key identifier: 3A:98:A3:DB:01:B4:BE:BC:98:E9:CB:60:82:58:29:5B:3D:E5:E1:60
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 01A0D0B71D63A289A00FEEDAB5503BD14EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 00:00:56 +0000
Manifest this update: Thu 24 Sep 2026 00:00:56 +0000
Manifest next update: Fri 25 Sep 2026 00:00:56 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: /BnIrsPXJmXmqwN9B0MQew7ABKXveXs9P6jO8MxH0ro=)
2: SulUeNH4yTw4wuibtQPCkvrNimE.roa (hash: /lThE7QiTo8Pw3w2T2Wjjtw5V8Pd4Y+WCHuTrGI19CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:1d:63:a2:89:a0:0f:ee:da:b5:50:3b:d1:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Sep 24 00:00:56 2026 GMT
Not After : Sep 25 00:00:56 2026 GMT
Subject: CN=3a98a3db01b4bebc98e9cb608258295b3de5e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:de:15:da:0b:20:84:0f:5c:8f:6b:69:2c:
67:52:cd:d3:58:b2:4a:e5:91:d5:00:86:f9:04:05:
a7:07:37:2a:a3:dd:f2:e7:3a:20:46:f2:20:96:87:
f8:6a:0d:7b:72:17:e7:71:51:1b:a0:e8:ce:e0:ae:
11:f6:b0:bd:45:46:ea:c6:f5:6e:7e:ec:92:9e:f0:
2a:e0:5f:59:e9:8b:47:39:c9:d4:a1:2f:62:cf:80:
b5:43:f5:fa:eb:cc:a6:7c:e4:ec:6d:d6:5e:b2:52:
56:e6:7b:2a:12:95:92:00:a4:9e:ee:b7:3a:32:a2:
c3:14:a1:a7:eb:d4:2b:72:f7:20:be:e0:9e:b9:13:
83:7c:a1:fc:a3:8d:a1:5d:b8:ee:e9:b1:4e:f8:a8:
f7:45:35:fb:2a:4c:47:72:37:00:07:5f:0a:07:a0:
58:88:44:bc:6a:ff:cc:72:68:e7:f1:c9:d0:09:05:
5d:61:1c:56:cb:d8:78:c0:c1:51:dc:8f:9a:5e:14:
63:b4:af:45:bd:8c:10:ed:0a:c5:b9:5c:8e:c3:a8:
4b:c7:da:3e:82:56:78:0d:e4:a8:e7:a0:d3:bc:cb:
4c:bc:e1:0b:aa:7e:81:e6:32:39:02:29:04:d4:49:
e0:d2:4a:dc:80:6a:73:24:6f:86:83:08:0b:17:ea:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:98:A3:DB:01:B4:BE:BC:98:E9:CB:60:82:58:29:5B:3D:E5:E1:60
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:fe:0b:e5:d5:24:95:b8:2a:d1:8b:b6:67:ba:4d:ae:cd:
fb:17:04:6a:1f:92:a0:04:e7:81:1b:e0:67:36:b5:a5:e7:d7:
3f:62:a3:20:2d:7f:6d:23:9d:b7:ef:81:32:e1:16:54:08:80:
76:fe:7e:c9:e8:81:a9:1e:c6:9e:16:e4:e4:0d:4c:87:67:24:
a6:86:37:c3:8d:38:15:d1:bd:c4:ad:27:e9:d4:bc:1b:cc:0e:
14:64:31:e9:62:dc:e4:3c:68:6a:65:c2:5a:20:22:23:41:54:
cf:0c:3b:4d:fd:91:4a:aa:07:a9:72:ed:64:14:18:63:ad:00:
1f:84:5a:c3:3f:f7:46:be:de:ff:8d:41:22:4f:6f:26:de:73:
5b:92:98:23:9a:d8:55:18:37:40:4c:d6:65:88:e0:5c:6a:2a:
c9:ae:a4:e9:e8:22:f2:4d:df:b6:13:bf:62:ac:ec:ff:d6:54:
e8:2c:de:93:d1:30:a2:70:8c:44:eb:8c:98:a4:ab:20:4d:a7:
ba:2d:5f:3d:52:dc:19:11:2e:d1:15:f6:de:2f:59:ca:ba:07:
71:ce:2d:ab:52:c8:3b:66:a6:12:24:45:f1:6e:76:f2:3f:a7:
37:cd:c2:46:b5:cb:ba:54:d7:f1:bd:16:8a:fa:b9:ed:5e:ad:
16:7c:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:19:17 2026 by rpki-client