Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
File: 8lizqXQbQx177NZChrnmvODpddo.mft (raw, json)
Hash identifier: oLJCWK4SgV9wDYqfce6bf+hcJTZ3L9h5u3YEIieBgfc=
Subject key identifier: 86:32:24:AB:95:44:51:1A:EB:7D:D4:E2:C7:AD:87:AA:68:FC:3D:5E
Authority key identifier: F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
Certificate issuer: /CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Certificate serial: 01A129C3AE8036100D95EE6112D49FC2E55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
Manifest number: 1A69
Signing time: Sun 11 Oct 2026 07:00:52 +0000
Manifest this update: Sun 11 Oct 2026 07:00:52 +0000
Manifest next update: Mon 12 Oct 2026 07:00:52 +0000
Files and hashes: 1: 8lizqXQbQx177NZChrnmvODpddo.crl (hash: yFtPMx0ip7cap6tZmyhKwEwmNu/Xivpo6e8UAg+h5zs=)
2: 9vmezDMgMLAYgubj0dZwQBpw7Zo.roa (hash: QLo0rxDXf9m7rqbC9zynXdEyUGpcYsQ8wFalcr82vIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:ae:80:36:10:0d:95:ee:61:12:d4:9f:c2:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f258b3a9741b431d7becd64286b9e6bce0e975da
Validity
Not Before: Oct 11 07:00:52 2026 GMT
Not After : Oct 12 07:00:52 2026 GMT
Subject: CN=863224ab9544511aeb7dd4e2c7ad87aa68fc3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2e:7a:7b:36:8c:d5:a5:55:a3:0d:b8:af:8b:
6e:e0:d0:c2:5c:4b:b9:44:f2:e0:4d:2b:5e:f8:34:
28:f1:56:ca:e4:ae:ea:65:a2:ad:3a:ad:57:1a:9b:
70:0c:98:34:03:c0:47:74:db:d7:a5:63:23:5f:e5:
68:52:8b:07:a7:ca:b5:96:e3:e4:8d:3b:eb:56:24:
58:19:8a:36:02:3d:b5:10:9b:a3:84:74:a5:ff:89:
aa:f2:47:95:33:b4:24:8b:85:65:39:54:10:a8:e1:
c2:24:44:d8:31:5d:0b:19:b0:ec:f3:53:2e:5a:84:
7f:5e:a2:3f:11:b5:a1:c0:53:91:50:6d:3e:eb:2f:
e4:b3:34:a9:3b:95:a0:c0:5b:a3:c5:7e:db:3b:a1:
0e:82:62:6e:c4:a4:92:87:80:f3:47:a7:78:b1:f6:
29:3a:34:4b:33:2e:f4:c5:88:fd:54:fa:e9:38:94:
5e:16:10:77:17:7d:b5:9b:4c:2e:10:59:8a:14:69:
ca:50:6e:2b:b2:8e:f3:5a:50:bc:b1:ea:6c:13:e4:
ed:67:ae:48:c2:51:31:eb:97:4c:01:dd:7e:b2:a8:
f7:4f:78:b7:c2:f9:e0:c5:be:35:51:56:7e:07:72:
34:83:cb:d4:69:d8:b3:7e:4c:d1:32:73:44:b2:9c:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:24:AB:95:44:51:1A:EB:7D:D4:E2:C7:AD:87:AA:68:FC:3D:5E
X509v3 Authority Key Identifier:
keyid:F2:58:B3:A9:74:1B:43:1D:7B:EC:D6:42:86:B9:E6:BC:E0:E9:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lizqXQbQx177NZChrnmvODpddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/095d5f-2693-4182-9397-cda94fb796d1/1/8lizqXQbQx177NZChrnmvODpddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c3:8b:54:89:24:d0:9e:49:82:e8:30:2a:25:68:70:8e:f1:
67:79:f5:95:6e:4e:ac:e4:8d:4a:ab:fb:fb:a8:2a:7f:e9:fd:
f8:b5:f5:0d:9e:48:a5:dd:e9:24:36:38:c6:b1:ee:13:46:37:
83:61:ee:67:cd:b1:2a:be:78:20:26:5f:94:65:1a:c6:c4:86:
37:f3:ee:58:86:40:73:06:d5:ad:8c:73:e8:8e:8a:e4:dd:5b:
2c:74:73:ae:0e:8a:f9:e0:42:4c:6c:4f:0f:d1:20:a8:89:a1:
5c:f2:13:a9:6d:c6:5c:95:96:b3:41:cb:db:d5:8c:93:df:76:
8c:2e:d8:f5:f1:55:50:f3:ea:1c:f6:11:da:0b:32:a6:98:ed:
2f:30:d2:a4:ae:13:a1:7f:b8:96:b3:a3:90:ce:26:12:68:d7:
71:e2:21:c2:c0:17:58:73:3a:36:0d:c1:8b:83:04:7d:e3:23:
5b:1f:1a:c4:e1:66:54:ad:0d:44:82:7a:94:eb:44:ea:d4:30:
03:28:95:13:e9:1e:93:98:d5:ef:13:45:50:c4:59:69:a6:19:
72:90:3f:1c:52:54:ef:52:38:97:a1:98:f1:4f:3b:6c:0c:cc:
e8:8c:94:1d:62:7e:d2:c3:bf:04:14:31:a8:f5:01:8e:04:05:
19:c6:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:03:39 2026 by rpki-client