Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: mkhADh9jKPKqT+TqhvRoxb6aA2voGb8V5P1VRJpxc4A=
Subject key identifier: 0F:A1:3A:9E:E0:1F:16:F9:81:82:D1:52:DF:11:F7:46:A7:73:6B:61
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 01A0CFA3C763110914B989FB65435D6106C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 09A2
Signing time: Wed 23 Sep 2026 19:00:12 +0000
Manifest this update: Wed 23 Sep 2026 19:00:12 +0000
Manifest next update: Thu 24 Sep 2026 19:00:12 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: ai4dkWD9Irjt+3uL4naH3KOB3iAPdSMYkNLMm27aCSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:c7:63:11:09:14:b9:89:fb:65:43:5d:61:06:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Sep 23 19:00:12 2026 GMT
Not After : Sep 24 19:00:12 2026 GMT
Subject: CN=0fa13a9ee01f16f98182d152df11f746a7736b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:06:48:59:5d:78:f6:ce:69:ca:10:e6:ea:
46:53:b7:bb:9f:fe:42:88:8d:54:90:b6:6d:08:71:
2b:a2:9c:e2:da:62:f7:5b:dd:6e:36:12:21:35:ff:
8e:4c:55:6b:88:83:ef:48:d0:e4:27:c9:d5:d6:15:
bb:70:4e:23:9e:9c:c6:15:c9:2b:c0:e4:78:b7:8e:
d7:4f:ee:8f:90:7e:0c:cd:63:89:6e:d1:0b:ee:0f:
f3:52:ef:d9:10:c1:85:28:b8:6c:b7:e8:c0:e4:8a:
ee:f3:0d:f9:7f:8f:42:4c:f5:6f:00:09:86:17:1a:
97:6d:e8:7a:9b:ea:1b:5c:0d:c1:f1:9f:d4:31:52:
93:cd:97:40:3b:87:ba:eb:4b:a0:4c:db:c2:de:e8:
06:58:5b:c0:de:81:70:16:6d:6c:0b:1e:03:c5:13:
e6:9c:82:95:9c:60:ec:ce:f8:67:bd:95:fb:c4:8a:
0b:18:18:fe:53:02:50:9b:b3:28:04:63:e9:67:8b:
93:50:22:f4:8c:30:ec:99:d3:f0:c5:16:92:2a:80:
96:18:cd:aa:b0:c7:fc:62:e8:e7:61:8e:95:e9:df:
01:21:42:1f:62:3b:44:b3:65:05:00:ff:a5:8f:69:
3f:9f:56:82:14:6f:49:86:51:99:20:87:16:da:ea:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:3A:9E:E0:1F:16:F9:81:82:D1:52:DF:11:F7:46:A7:73:6B:61
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:5b:e6:97:ea:88:54:f3:8f:3b:c6:5c:94:a0:be:aa:2d:
18:29:eb:3a:38:4f:76:85:6d:21:5c:7a:32:91:66:01:f2:83:
ad:6f:7c:1b:da:8a:73:2d:dc:04:6f:2f:81:e8:02:ea:a4:67:
a7:63:c2:77:0e:a8:bc:04:63:14:f8:53:a7:0a:7f:2d:8d:7a:
13:60:b0:c0:4f:52:cd:a7:1a:e6:05:6e:b5:a0:ff:7e:3c:fb:
b1:8a:b3:fa:9f:2e:da:af:ff:a3:e8:fe:ee:d1:bd:e7:19:28:
e2:ab:7d:9e:ba:cf:ff:e6:6d:16:66:03:6a:32:3f:b7:11:57:
3a:6b:af:9f:eb:a4:50:78:df:4c:10:2b:33:39:9c:19:6e:2a:
88:c8:1e:2f:04:dd:22:f3:8d:de:31:e4:35:e0:9f:a0:96:d4:
3e:42:47:70:d1:4b:e1:df:ce:11:b5:59:12:ad:00:eb:09:a0:
c5:38:d6:c9:de:9e:bc:d0:10:42:cb:3c:46:d3:ec:5f:e2:e6:
21:7d:ae:25:c7:af:6d:d3:19:4f:5d:3b:35:8a:48:02:3a:ee:
f3:10:bb:a2:be:0e:70:ac:f3:31:88:04:4d:fa:7b:b8:3f:52:
2f:3f:fc:98:32:5e:ac:91:75:50:64:fc:fe:8e:2b:ae:d2:10:
e9:05:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:08:23 2026 by rpki-client