Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: c5sxcn8TvLGoYVURIct+udmbLKTCWTGLcrMbiuYLoKE=
Subject key identifier: 37:19:BA:77:54:79:6F:98:68:5A:80:8A:CC:23:53:52:FF:5E:58:8D
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 01A0D315317B55BC5933449DD49AAEE068BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0ACF
Signing time: Thu 24 Sep 2026 11:02:56 +0000
Manifest this update: Thu 24 Sep 2026 11:02:56 +0000
Manifest next update: Fri 25 Sep 2026 11:02:56 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: rTINJd5L3lE9zU4qcK1NusebxAdbSwqNYzpS9+59t8w=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:31:7b:55:bc:59:33:44:9d:d4:9a:ae:e0:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Sep 24 11:02:56 2026 GMT
Not After : Sep 25 11:02:56 2026 GMT
Subject: CN=3719ba7754796f98685a808acc235352ff5e588d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:d0:79:89:00:85:97:27:ed:54:a2:d4:22:
5d:6a:ee:26:fb:31:f1:19:5f:f8:52:f2:99:08:6d:
a6:08:f1:37:78:48:03:19:16:4b:18:a1:96:88:bb:
ba:61:87:4c:e0:a7:d6:dc:f1:38:91:1f:b9:14:33:
03:fb:20:b1:5b:b0:5a:11:88:17:b4:55:ae:f1:ce:
31:8b:85:5c:a2:38:37:c0:31:cb:4f:94:a5:5e:da:
e3:a7:f0:de:d8:d7:c7:46:11:61:0a:99:7a:3f:f1:
84:23:55:ea:e8:a7:25:75:12:db:de:7e:7d:9b:e3:
67:7d:d7:4a:74:03:00:5a:7f:db:71:ef:d2:33:84:
9e:86:0a:3e:88:e6:29:26:78:8d:dc:2f:56:56:96:
22:7e:86:5e:c4:8d:59:1d:c1:e3:dc:ac:ad:e1:b5:
34:6e:1a:d4:85:ab:3c:ae:60:20:a1:49:84:06:d0:
14:94:36:8e:ea:0b:d4:ed:eb:d4:cd:91:84:91:eb:
90:20:c9:d0:6d:6e:dd:90:db:61:ec:ff:6d:79:ce:
47:43:8e:be:0f:2c:0d:c4:b1:ef:e9:42:bc:1d:3f:
0b:c8:dc:9e:44:28:63:bf:cf:be:a3:3d:8c:35:78:
74:0d:4f:6b:30:92:14:c2:4d:7f:9e:e3:8c:7e:ae:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:19:BA:77:54:79:6F:98:68:5A:80:8A:CC:23:53:52:FF:5E:58:8D
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1f:0c:fb:bd:6d:a3:05:9a:fa:d8:96:ba:de:df:a3:70:06:
3b:da:ee:0e:c5:89:f3:fe:2b:cb:94:58:e1:5c:a6:0b:69:0e:
f9:f7:f4:25:ff:aa:bc:ed:d0:8b:13:29:e4:f9:87:69:28:5f:
e2:ee:ff:8f:e5:d7:4e:f2:ad:16:85:20:bb:23:7e:a2:e3:f5:
e3:9c:73:4f:68:54:11:06:05:28:8f:3d:0e:1b:33:d8:dc:49:
e0:50:e3:6e:84:37:7c:0d:56:a8:ba:01:4f:e8:18:93:b8:ea:
b0:48:63:29:16:60:bb:dd:9a:47:4b:1f:cf:2e:7b:90:a3:0b:
d0:37:6f:00:a1:a3:4c:8c:15:cc:65:ba:2e:a8:95:11:1f:7a:
5a:58:3a:1e:1f:df:1b:81:f3:21:54:f0:89:f4:c0:d9:69:74:
29:00:6c:de:b1:2d:fd:42:ef:94:b7:0b:de:95:bf:f4:dd:a6:
a1:8f:b3:48:ff:b9:2c:24:f5:5f:b9:11:c5:c3:6d:bc:26:fd:
3c:5a:1f:9b:05:cc:18:f5:a6:74:b8:8a:25:4b:c9:ec:d8:e8:
ae:95:36:bc:89:60:5f:dd:9c:5f:33:0a:a1:ee:7d:63:fd:78:
42:15:3f:bc:95:d8:51:ef:ce:0a:cc:e6:e7:53:aa:30:c8:ee:
a1:dd:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:54:27 2026 by rpki-client