Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: JleQj7Bs7h13YjacL65+Wc8N9vad82chEZ0DmBEzs8w=
Subject key identifier: 42:5B:AA:DB:C7:AC:25:C4:57:7F:EF:98:1B:6A:10:B3:3D:68:0D:AF
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 01A0CFDACF4EBD2B876CB0AE3694E3FCAAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 08E4
Signing time: Wed 23 Sep 2026 20:00:18 +0000
Manifest this update: Wed 23 Sep 2026 20:00:18 +0000
Manifest next update: Thu 24 Sep 2026 20:00:18 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: H+Ux/2VmbSaimsxUmsbaxozHSL1hagfVghHcazCBeVM=)
2: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (hash: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:cf:4e:bd:2b:87:6c:b0:ae:36:94:e3:fc:aa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Sep 23 20:00:18 2026 GMT
Not After : Sep 24 20:00:18 2026 GMT
Subject: CN=425baadbc7ac25c4577fef981b6a10b33d680daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:f8:eb:8d:1e:4c:0e:71:2e:6b:6c:b7:b5:
57:5c:5d:5f:86:43:6b:db:ee:15:89:91:34:b6:8d:
24:8f:f5:43:26:70:00:c2:bb:be:52:9b:5c:e8:ab:
75:d8:fc:e6:94:78:d2:d3:6c:44:52:3f:a4:f4:1e:
4f:28:0c:67:0c:75:c3:d8:fa:20:1d:95:c0:af:b1:
97:3e:d1:d8:c1:0c:5c:b2:a2:11:d3:61:6f:f0:42:
f3:c1:c1:47:97:08:08:e0:b0:e6:9c:60:e2:73:5c:
f5:9f:8d:29:08:ae:04:63:ca:f6:ad:89:c9:d2:90:
c9:ac:44:f9:8d:7f:c4:40:69:1e:56:d8:08:66:ea:
72:3c:bf:22:f5:04:8f:03:4b:3b:e3:e5:60:d7:ca:
63:4d:33:bf:a3:88:8f:5b:8c:38:fc:82:67:47:c3:
c0:6a:d2:45:29:40:9f:03:af:fc:59:64:d5:c4:3e:
5e:99:56:d0:cd:c0:c3:a4:58:71:fb:5a:d2:52:58:
d3:f6:1f:b5:cc:56:b1:3d:e4:b7:3d:bd:43:0b:bc:
7c:40:7d:7a:02:6d:7f:bc:22:ab:2b:a1:ca:d2:0f:
7e:0f:e6:04:3d:a8:5d:e2:19:c8:2d:ab:ed:5d:d4:
af:44:13:38:88:04:c9:54:fd:33:be:9e:63:f3:2b:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:AA:DB:C7:AC:25:C4:57:7F:EF:98:1B:6A:10:B3:3D:68:0D:AF
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:75:dc:87:2d:58:f1:b6:d0:26:b4:a1:67:82:bf:d2:9f:
ee:7b:86:a1:b6:82:4b:15:65:6d:fb:ac:fe:78:b3:83:34:26:
52:37:34:e0:53:b6:0c:2c:fa:ba:b9:ce:86:e4:a9:79:e1:b2:
c2:67:26:32:86:f1:98:52:88:23:fb:34:cd:c0:7c:0c:64:ce:
9d:36:86:00:ba:68:e6:82:6f:cb:d8:91:16:00:aa:70:06:e6:
f7:d8:63:24:c1:7c:7a:67:3b:b9:6e:59:7c:0d:54:a6:ac:b1:
b2:5a:16:9d:74:f1:b3:45:f4:ce:b0:d3:f3:dc:dd:dc:d1:3d:
35:0e:e1:46:ff:85:8e:9b:d8:d9:dc:f3:50:6d:36:74:b7:d5:
db:d1:91:2b:fb:7b:01:f8:23:a9:a1:0d:20:8e:ad:61:c0:89:
fe:b1:f9:63:c1:c2:c0:96:e5:c7:35:df:9a:ab:13:7a:20:e3:
ce:aa:3e:ab:a7:fa:ce:8c:29:b7:a3:1c:b9:01:d2:55:d5:e3:
10:cf:9f:fa:eb:40:ca:03:1b:2e:7b:2d:25:7f:bc:53:26:ef:
07:c0:c6:19:7d:23:e6:3f:e7:b8:d5:ac:b5:97:18:f6:56:ff:
0d:8d:99:1e:91:13:af:3c:30:0a:3e:0e:8a:7f:fc:ec:e7:cc:
72:f5:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:33:45 2026 by rpki-client