Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
File: D-82fFyflKoZ4jakdq40Iby-8sg.mft (raw, json)
Hash identifier: T8sGcvNS2T0BbyhabNNNCK96g5eGIt/S/nkINNOgwHE=
Subject key identifier: F6:10:BD:79:12:6B:49:D5:80:1C:AF:3C:E1:3C:8B:05:02:C1:1B:60
Authority key identifier: 0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
Certificate issuer: /CN=0fef367c5c9f94aa19e236a476ae3421bcbef2c8
Certificate serial: 01A0D2A65036C066DC7541A98363781BE474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
Manifest number: 14
Signing time: Thu 24 Sep 2026 09:01:49 +0000
Manifest this update: Thu 24 Sep 2026 09:01:49 +0000
Manifest next update: Fri 25 Sep 2026 09:01:49 +0000
Files and hashes: 1: D-82fFyflKoZ4jakdq40Iby-8sg.crl (hash: fsybU0FejZBX/9KNpe8f7uJA5ojYr4xs5HsMvHFayaE=)
2: cfdScoVbfGnm8PrQAjjSVihBdBE.roa (hash: u2u6g2f7zgS6dtrxtWCLCAPHY0gP0gHN1Z+mzxulnYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:50:36:c0:66:dc:75:41:a9:83:63:78:1b:e4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fef367c5c9f94aa19e236a476ae3421bcbef2c8
Validity
Not Before: Sep 24 09:01:49 2026 GMT
Not After : Sep 25 09:01:49 2026 GMT
Subject: CN=f610bd79126b49d5801caf3ce13c8b0502c11b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:7a:dd:53:eb:fb:01:d5:cf:df:3b:46:c1:
9b:9b:96:9c:dc:64:a0:a8:b5:92:10:b4:31:84:f4:
c1:4f:e1:b9:e0:e6:26:63:86:a8:37:54:19:41:45:
86:2f:c7:0f:29:7d:43:b8:ff:eb:2c:b4:b2:a7:fd:
84:b6:f9:25:0a:11:48:19:f1:89:20:a1:61:ce:7b:
6a:cf:d5:62:52:df:46:f0:c5:82:d7:27:96:4c:42:
e4:60:93:9b:f2:a1:4d:80:a3:03:cc:73:f4:3a:6d:
d8:be:a8:55:cd:98:9a:e4:8f:9a:44:fe:46:c4:90:
a1:97:1d:ae:d0:15:7d:87:63:df:22:8f:14:25:a5:
b1:54:a4:03:e5:61:80:0c:b8:e5:f0:9d:59:ee:1f:
f0:54:f7:6a:7a:d5:94:b5:bc:b9:16:bd:72:47:d1:
6a:4a:5a:7e:93:1e:5a:cc:d5:77:aa:a2:f5:56:cd:
3f:6b:15:e6:dc:1a:83:ba:19:6d:8e:ad:28:ea:61:
4d:46:c7:81:75:a7:80:35:8b:e6:d9:b4:d3:eb:ea:
03:87:fb:b6:ef:f4:23:be:e1:a5:d6:ac:58:3f:30:
38:d8:b2:f2:03:98:82:ef:0b:04:28:1a:20:1f:f8:
53:62:0e:4f:32:54:e9:92:f4:c7:85:0d:a0:1d:11:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:10:BD:79:12:6B:49:D5:80:1C:AF:3C:E1:3C:8B:05:02:C1:1B:60
X509v3 Authority Key Identifier:
keyid:0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a9:3a:2c:77:22:27:3d:78:80:cb:4b:9c:c8:b7:3a:75:7c:
a8:ae:cd:d5:ad:7a:dd:50:e7:d5:9b:64:5e:92:bb:bf:6d:64:
7f:32:3f:40:9c:2f:9c:63:73:74:1a:f5:50:ca:cf:31:5f:75:
65:e6:bb:09:01:ae:fc:ea:3e:bd:e3:06:f3:67:8e:93:33:ca:
ad:87:a5:2f:01:67:c8:89:13:40:08:19:12:10:e1:40:78:cf:
fd:2d:b9:bb:84:a4:b0:77:2c:52:43:e6:19:69:b8:40:06:88:
2a:21:15:f2:2e:4d:43:2d:23:20:ed:09:9f:d3:ff:30:1d:4b:
64:8e:55:04:4e:54:77:67:dd:64:a9:d4:ca:19:ea:c4:2b:91:
70:43:34:4e:f3:e4:d2:01:69:b0:2f:77:a1:ee:22:55:2a:73:
81:21:b0:0f:06:24:1f:59:cc:cb:b5:72:17:58:5d:99:37:d7:
6b:8d:df:be:a8:d4:f7:f6:cd:ac:a7:ae:3d:36:cc:e6:52:77:
3b:66:d8:95:3c:e9:e5:1c:6a:a0:07:18:aa:e1:1e:9a:4f:25:
d4:6b:00:b7:b2:88:78:14:37:d9:e8:34:67:a3:37:bb:c7:0b:
a7:09:f1:a7:18:90:12:d9:9b:57:39:a8:03:3f:86:4d:58:46:
4f:17:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:07:12 2026 by rpki-client