Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: OP8lZuNat2EuSEyWtjp36NVgnBuXBAjdGrjsl0FMzQk=
Subject key identifier: E5:98:BF:CB:DC:85:7C:34:99:C4:E2:48:87:18:B9:0E:7D:68:C9:B6
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 01A0CD7E7274E487605CF04663D9F5102838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0E78
Signing time: Wed 23 Sep 2026 09:00:11 +0000
Manifest this update: Wed 23 Sep 2026 09:00:11 +0000
Manifest next update: Thu 24 Sep 2026 09:00:11 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: 2UdSusUQx3z/rGHEF9+JmgseVSl8/XJR7lTEyCBAyt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:72:74:e4:87:60:5c:f0:46:63:d9:f5:10:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: Sep 23 09:00:11 2026 GMT
Not After : Sep 24 09:00:11 2026 GMT
Subject: CN=e598bfcbdc857c3499c4e2488718b90e7d68c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:69:31:cb:64:89:54:bb:a5:fa:56:ac:9c:c4:
00:c2:b1:96:55:eb:b3:60:db:96:2b:72:22:fa:81:
be:79:ad:93:e5:35:f3:9b:18:a5:bd:1c:03:87:e6:
bb:a7:56:4d:7f:60:32:50:d5:45:8b:f9:70:28:2b:
22:bd:ce:a9:02:06:64:c9:a5:68:52:7c:98:9a:fd:
b2:91:d0:25:1a:75:9b:dc:8b:62:52:a2:aa:a8:6d:
da:2d:ab:07:ec:4f:28:16:46:2e:3d:79:07:fd:7e:
7d:b6:d1:73:70:e7:54:bb:d9:58:09:96:26:34:15:
a4:0b:18:a8:b8:e6:7f:07:5e:54:73:b4:dc:24:8d:
96:13:1e:ce:5c:9c:03:94:48:08:4f:ce:aa:00:0e:
df:dc:d9:db:ae:96:b8:24:0a:87:93:1a:e8:29:70:
7c:1d:53:e6:6e:6e:df:a3:31:9f:ed:82:b3:94:40:
da:99:be:be:f8:59:43:d6:30:f6:a9:48:69:5f:0e:
74:48:04:39:1c:23:a9:5a:ca:b8:aa:56:e2:f1:8a:
2c:bd:ff:94:22:fd:13:41:1b:6a:d6:c8:6d:eb:eb:
26:21:9f:60:59:0b:6a:6e:8a:00:59:4f:e4:ab:26:
c6:21:0e:3b:9c:68:14:72:22:5a:6f:c5:db:ed:e4:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:BF:CB:DC:85:7C:34:99:C4:E2:48:87:18:B9:0E:7D:68:C9:B6
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:09:40:3f:24:f8:2d:0c:95:e1:7c:38:5a:8c:c0:98:64:e8:
0a:52:fe:8f:17:8e:aa:8b:c1:f3:fd:3f:21:4c:b1:5f:4c:44:
ef:e0:52:eb:a5:a3:aa:c7:19:32:35:26:b8:ab:43:07:0d:33:
6d:e2:d9:34:39:d2:4a:03:94:61:5c:df:92:0b:f7:36:a9:8d:
ae:42:31:e7:cf:38:50:64:21:d2:72:b9:a3:36:0f:51:6f:11:
cd:37:f8:d6:8b:20:08:40:3c:a9:86:28:ed:d5:b3:53:49:f8:
c9:ae:62:b6:09:0f:59:1e:4e:a2:9b:33:63:72:94:34:5b:b7:
cc:1c:36:e1:09:45:d3:98:be:e5:cc:68:1d:c7:aa:96:9c:df:
02:9d:47:1b:1e:ea:5a:47:27:6b:36:e4:32:9e:06:11:31:28:
6b:17:c6:1c:e4:64:5a:5c:0a:ba:81:75:ca:9e:f9:86:93:0c:
6f:ea:5d:3a:7f:d8:6f:d9:36:53:2b:61:63:7b:17:3b:bd:a5:
45:78:3b:01:f0:45:7e:3a:77:14:32:0b:ce:b6:d8:90:c1:ff:
6a:ee:2d:a9:6a:b9:2e:bc:ba:da:43:1c:48:0a:9a:82:aa:cf:
32:06:21:7e:57:06:b2:20:32:1b:60:22:36:f7:3a:9b:b0:87:
13:37:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:51:24 2026 by rpki-client