Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: I/BWyBscr8cGzfmTZBKPxYmOUKGVNT0/kmUJIQ+pAJE=
Subject key identifier: FB:95:B2:98:25:7C:25:11:6E:48:F5:58:6E:8E:66:B3:FC:C1:3D:5C
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 01A0D494542DFB34E20FE059B9ADF8456961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 09ED
Signing time: Thu 24 Sep 2026 18:01:25 +0000
Manifest this update: Thu 24 Sep 2026 18:01:25 +0000
Manifest next update: Fri 25 Sep 2026 18:01:25 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: sNz4zOFcL4UQmGFzUxjU7Vta2hoZZLkHp+nmtxbdGl0=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:54:2d:fb:34:e2:0f:e0:59:b9:ad:f8:45:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Sep 24 18:01:25 2026 GMT
Not After : Sep 25 18:01:25 2026 GMT
Subject: CN=fb95b298257c25116e48f5586e8e66b3fcc13d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:e7:15:66:7b:09:fc:66:31:ca:5e:08:ff:
7a:31:92:5b:c3:2e:14:25:16:c5:c2:ba:1d:05:e0:
72:5e:d8:a1:cd:c7:97:d8:ff:9f:d3:a8:05:95:77:
ad:d4:d8:ec:8d:8d:46:e7:06:0f:9a:d6:90:73:bb:
23:fb:f8:c1:9d:e5:ce:e2:e1:07:a9:e5:7c:eb:95:
e9:34:2f:e4:29:75:37:ad:9c:8a:b6:4c:76:58:ac:
4f:db:42:4b:e2:de:f9:5b:91:99:c1:18:d6:38:61:
a6:91:48:a1:fb:33:17:b0:8a:8f:6e:74:e7:d6:5d:
c1:dc:5e:96:20:73:34:6e:53:70:e8:b7:80:6f:28:
9e:46:55:11:17:8c:cb:73:e9:89:fc:bf:86:61:5c:
39:9a:7e:f1:77:df:0a:dd:3b:93:5d:a7:2f:a6:7b:
b4:8f:2a:a4:54:d0:13:02:63:03:c3:f2:e5:cb:8f:
53:ba:96:a8:fc:02:fc:db:b8:aa:d0:ef:47:9c:47:
d0:2b:9f:1e:8e:a7:53:db:9c:05:48:12:5e:e6:7d:
a4:30:87:3a:3d:6b:8e:8e:d6:f8:a3:a1:31:04:a1:
d5:45:f5:65:a1:7c:17:cc:c6:8e:2d:39:c9:f6:34:
1b:89:cd:5c:3c:94:ad:c7:49:c6:60:41:61:85:ea:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:B2:98:25:7C:25:11:6E:48:F5:58:6E:8E:66:B3:FC:C1:3D:5C
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:09:1b:62:6d:98:06:d9:bf:4a:17:26:59:c4:1d:7f:76:
d8:6f:3f:66:60:41:3b:74:6b:32:37:9e:1a:68:d1:82:21:f8:
6b:42:74:de:98:af:cf:d2:82:20:a5:b6:16:e5:21:b0:94:a7:
47:d8:95:0d:ba:7b:05:d7:de:0e:42:7e:fc:e0:df:1d:b8:18:
ee:f0:fc:fa:ae:35:50:e8:2b:c1:a3:4a:09:0e:1d:44:a6:7e:
d3:db:d3:9e:64:7d:df:1f:3c:87:e7:44:62:10:53:de:de:64:
7c:0b:10:38:e0:ed:a6:dc:2f:29:90:3e:73:32:45:51:8d:a0:
6f:c6:2d:58:49:35:be:4d:c1:0a:31:4a:68:c3:e6:68:8e:02:
fe:20:21:69:d3:35:ac:62:9e:78:fb:d4:7b:59:7f:88:b0:87:
11:55:91:07:2c:1d:ab:db:8b:41:95:7e:9a:fd:26:89:c6:b6:
87:e0:85:ea:8e:9c:9c:fd:e3:8c:5a:06:cc:1f:b4:53:d9:fd:
74:1f:b6:3f:c3:6e:ae:25:98:fd:41:b2:98:d2:15:4b:d2:26:
e4:20:0b:64:0d:40:0d:e3:a0:50:29:12:df:d6:e1:f4:67:ca:
7c:e2:1f:d4:9c:01:44:03:62:66:c8:6a:6f:58:03:1f:85:21:
ef:22:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:09 2026 by rpki-client