Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
File: 8HHkN5gsw0b26BfKZIknI-21QZo.mft (raw, json)
Hash identifier: TtHTVbaeYsV4mspwCfhArnvlPkoplYDKtTmyhvOoS6U=
Subject key identifier: 72:EE:2E:C3:2B:D9:C0:EA:DA:38:CC:92:7E:B8:8E:CA:2A:6C:D7:48
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 01A0E7778B7F354938525EA6E5D4159AF112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
Manifest number: 13D9
Signing time: Mon 28 Sep 2026 10:02:46 +0000
Manifest this update: Mon 28 Sep 2026 10:02:46 +0000
Manifest next update: Tue 29 Sep 2026 10:02:46 +0000
Files and hashes: 1: 4dTiivW_bvCIIr9OKslRJ2ttAH0.roa (hash: nywsABEuvSZWyJVu4fBV0raW88OjCnUfbkwJDiN85oo=)
2: 8HHkN5gsw0b26BfKZIknI-21QZo.crl (hash: NnHbGEUeFSCanJK2SyjFqC3BsjhuUAp+nE482zIpaDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:8b:7f:35:49:38:52:5e:a6:e5:d4:15:9a:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Sep 28 10:02:46 2026 GMT
Not After : Sep 29 10:02:46 2026 GMT
Subject: CN=72ee2ec32bd9c0eada38cc927eb88eca2a6cd748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:3f:9b:d9:57:04:6e:0c:59:e3:5e:c4:21:
f6:d3:a8:25:3b:73:3b:71:1f:ac:06:e6:93:65:47:
89:41:4f:d9:af:36:53:6d:6c:81:5c:70:9f:17:4a:
ff:5d:4d:7f:2e:7f:d5:30:ab:23:99:09:0a:a8:6c:
d4:1a:0a:4b:ee:92:71:21:20:07:eb:6e:8d:e9:c8:
81:20:41:ec:5a:e9:94:e8:9a:ec:3f:3b:67:2a:3b:
81:c0:92:b5:89:c4:ac:ea:b4:72:8f:ca:13:47:d2:
ff:df:59:58:33:43:0e:89:6d:10:ba:84:47:14:0c:
f7:5b:f9:10:dc:d7:dc:df:59:72:42:e2:69:ac:6b:
48:8d:0e:9a:6b:02:70:98:a7:41:cd:a7:c9:13:a4:
bc:a4:2e:e2:f0:37:0d:b7:21:71:7c:b8:07:71:d4:
86:d2:f5:bb:62:42:7a:d2:ef:3b:2e:a3:eb:35:a1:
b3:6b:5d:58:7d:62:1f:34:7c:f0:65:c0:5c:8c:ce:
d7:68:6b:c8:df:5f:82:af:f0:ee:e6:04:de:34:73:
a7:e8:fc:a7:60:a9:e4:0b:03:3a:f7:c9:1e:0a:da:
61:90:69:8f:43:e4:8b:d5:2e:48:89:b3:89:ba:88:
67:9d:a7:98:46:7d:a7:44:0c:db:14:d0:4a:46:15:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EE:2E:C3:2B:D9:C0:EA:DA:38:CC:92:7E:B8:8E:CA:2A:6C:D7:48
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:44:89:51:31:b5:99:6b:06:d7:6b:bf:e6:d6:cd:26:25:c3:
f1:22:f3:34:ac:fc:cd:39:f8:75:e5:ad:de:96:a8:3b:ff:8b:
e4:40:a5:b0:e1:9b:bd:5f:59:c3:1e:d8:47:9f:a7:f3:36:2d:
53:61:79:11:ab:e8:6c:24:d5:4a:d6:3f:cc:f8:0d:75:4a:57:
c9:8b:5a:3d:2b:db:5d:bb:0d:8a:4f:f9:38:6f:41:c3:cc:1c:
76:5c:46:94:3d:34:92:03:0d:0c:8c:96:a5:23:07:88:01:22:
88:3a:5d:53:ba:12:af:73:2d:6f:95:a3:cc:ce:d9:ae:66:1c:
bf:ba:75:95:d1:59:28:9f:07:69:9a:3a:ae:87:8a:55:53:d0:
c0:07:5b:bf:aa:7d:d5:c6:f0:fb:94:91:48:6d:45:b8:68:d3:
8d:1c:7e:19:6f:a5:60:44:20:2d:25:ef:23:4f:41:cd:63:79:
4a:8c:2c:ea:ac:5a:f5:6b:7d:b4:03:8f:34:b8:86:ba:9f:99:
46:57:1a:2d:9f:68:d2:1f:bf:e9:21:68:13:0d:97:12:d5:29:
0f:ee:c8:58:41:2b:27:f2:97:c6:d9:5b:71:c3:44:5b:a1:c7:
08:90:9a:96:ff:b1:85:ba:03:07:74:57:19:22:87:d0:2c:0a:
9d:e4:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:22:23 2026 by rpki-client