
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
File: 8vQKwelzpu2pWuj5lPOipGwwGlE.mft (raw, json)
Hash identifier: cP84EfQALIkHiihNJO8gy+lV6Hh3Tx/XCrsBUr+S/O8=
Subject key identifier: AB:FC:7F:08:BB:5B:FC:81:B8:93:2D:D6:CE:12:BA:D3:76:D0:72:BF
Authority key identifier: F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
Certificate issuer: /CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Certificate serial: 01A0E13D3A04D47131C278EDEA8F10E8B0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
Manifest number: E9
Signing time: Sun 27 Sep 2026 05:01:21 +0000
Manifest this update: Sun 27 Sep 2026 05:01:21 +0000
Manifest next update: Mon 28 Sep 2026 05:01:21 +0000
Files and hashes: 1: 8vQKwelzpu2pWuj5lPOipGwwGlE.crl (hash: wlxRjLbO9by5VSUwQ5RpHfpOldb1NG5+xa+P6jFhfrA=)
2: 9eIznmkQ1i1wObSFJhgIo07kbEs.roa (hash: PRIHTF2R61srx/cf5f84GRd6EYSqTtmRTfxJne6LAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:3a:04:d4:71:31:c2:78:ed:ea:8f:10:e8:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f40ac1e973a6eda95ae8f994f3a2a46c301a51
Validity
Not Before: Sep 27 05:01:21 2026 GMT
Not After : Sep 28 05:01:21 2026 GMT
Subject: CN=abfc7f08bb5bfc81b8932dd6ce12bad376d072bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:63:93:4f:94:8b:5e:62:3f:af:65:28:9b:
16:35:a5:a8:16:21:39:67:16:8a:2b:f4:9d:da:73:
90:22:ea:52:75:2b:aa:76:03:7a:5b:35:04:df:7f:
d5:b2:28:fd:fa:6b:23:f3:c7:e8:93:36:b7:de:e6:
ef:2c:31:88:f1:4c:2b:78:53:cc:6f:47:bc:ae:df:
1d:4a:ff:98:c6:56:e3:07:e1:94:78:97:be:50:a5:
52:2d:fb:a0:7e:10:79:04:01:be:9e:e9:ce:63:ff:
22:ce:a1:31:63:6c:a3:dd:aa:c3:5d:4c:4e:57:44:
51:6d:6f:f0:67:31:24:1c:d5:25:fb:9c:69:3d:1d:
02:75:48:63:6d:20:e6:66:25:22:98:14:e6:a2:28:
27:ce:c3:c6:ec:b1:67:b6:eb:27:58:97:10:e4:60:
b7:27:3d:88:1f:c2:db:bb:70:7e:54:ed:03:65:b3:
3d:f2:6f:d2:75:0c:a4:97:99:c1:b6:cf:f9:fc:18:
33:c3:42:85:78:10:71:de:dd:7c:61:12:de:7c:46:
2b:9f:31:f5:8f:54:8f:6f:c2:3a:83:09:de:5e:21:
37:1c:69:28:4f:46:36:82:79:79:a6:3b:f7:13:26:
35:bb:ef:8f:ee:15:92:1b:0d:60:aa:41:27:68:cd:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:7F:08:BB:5B:FC:81:B8:93:2D:D6:CE:12:BA:D3:76:D0:72:BF
X509v3 Authority Key Identifier:
keyid:F2:F4:0A:C1:E9:73:A6:ED:A9:5A:E8:F9:94:F3:A2:A4:6C:30:1A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vQKwelzpu2pWuj5lPOipGwwGlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f6dc3b-adc7-4229-ad82-b70fc6aa915a/1/8vQKwelzpu2pWuj5lPOipGwwGlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:30:a2:b0:2e:2c:78:16:a8:55:84:72:5e:8b:72:f9:9e:
08:3f:41:61:48:9c:3c:be:53:93:3f:4e:ef:3a:91:9f:bf:d1:
1a:03:18:6b:fe:75:34:1b:f2:97:8a:f3:16:9d:64:4d:ac:ce:
fa:17:9c:68:38:95:bb:43:11:da:cd:0e:51:db:55:07:ec:25:
e2:41:78:66:21:7f:29:67:d0:75:eb:57:21:4f:b8:92:8b:f9:
20:5a:2a:be:55:10:db:c4:b1:90:8a:50:02:da:f6:15:77:7f:
81:ab:e1:15:9b:d3:eb:5b:ba:bb:c4:4d:fe:19:ad:1a:b5:24:
92:c6:6b:9c:8a:1b:94:4e:b3:71:1e:60:6f:32:70:9e:ed:99:
09:76:fa:b7:9c:bd:e8:96:f2:70:41:bf:01:c7:61:c4:21:b5:
99:47:ba:d6:de:dd:12:9f:f9:7b:cb:71:0c:a4:5b:37:ce:62:
e6:70:89:38:22:ac:62:7a:29:47:d0:80:23:e6:7c:cb:ca:b2:
6a:43:2b:7e:c8:50:29:77:64:bd:3d:71:5f:83:75:b7:84:e5:
41:d9:2e:4a:fb:5b:b3:91:73:6e:2d:4a:dd:68:5f:d3:0c:8b:
eb:41:fb:d3:50:2d:97:44:aa:72:b4:42:49:d5:6e:c5:e2:28:
9e:df:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:28:38 2026 by rpki-client