Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: D/XAdNjHSSDhyIoqWa+ZP7MdBZQvXi8mzYoCNtBYnPg=
Subject key identifier: 2F:CA:6A:9D:AC:A7:45:A0:D8:13:80:37:C6:A5:78:8A:B8:47:EF:3C
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 01A0E28719AE698F7169028984ABDBF12011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 0850
Signing time: Sun 27 Sep 2026 11:01:39 +0000
Manifest this update: Sun 27 Sep 2026 11:01:39 +0000
Manifest next update: Mon 28 Sep 2026 11:01:39 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: HAetXYNklSjJxb79K4LpgUXF5egXzPZETcZOQAn7Mks=)
2: AbRiyCHHLVlOy73Va3XhnwR_DLo.roa (hash: 6HenLNVbET8UrcTGANmzLr3/H2ChFNxxswPM4qVTvAU=)
3: YQi9tzZ0G5ZlpUErj9axARGt8Yw.roa (hash: /X3sIc5ZFo2gUG94yP/VTEOSrey/8xQ6E8EZZPcUybk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:19:ae:69:8f:71:69:02:89:84:ab:db:f1:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Sep 27 11:01:39 2026 GMT
Not After : Sep 28 11:01:39 2026 GMT
Subject: CN=2fca6a9daca745a0d8138037c6a5788ab847ef3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:47:95:11:e3:63:5d:d7:63:fc:f5:43:c2:
0d:84:c4:c0:99:54:cf:5a:09:cc:5b:fa:e6:a1:c0:
24:93:fb:ef:6f:62:b2:ec:42:8e:11:7f:57:f2:14:
be:b8:92:90:c0:d6:ce:86:1c:18:a8:94:cf:1b:5b:
db:c1:3d:b0:5a:d3:51:01:10:fb:ad:d0:63:12:13:
76:28:e1:bb:87:24:b5:fd:bb:3c:df:e4:d3:63:77:
92:d5:12:ef:44:2e:39:b6:61:c9:14:85:23:bb:66:
7a:09:bc:a0:6b:1c:e0:97:53:05:48:b9:29:0e:16:
05:76:02:ad:e9:3a:88:c9:58:a4:9f:65:e7:46:d0:
3c:7b:98:aa:4b:a0:9a:e9:ec:05:85:d9:13:a3:33:
bf:4a:e1:b7:32:4a:17:70:c9:e8:90:ca:6a:7a:a8:
40:6b:40:4e:e8:c4:1a:8d:87:5a:96:c2:09:0e:6b:
91:52:c9:5b:81:ee:0e:7f:94:89:c1:03:90:d9:19:
fc:68:a7:69:c9:1d:0f:34:cc:d0:80:54:df:d4:6f:
f4:dc:bd:a5:bf:43:b8:ea:d4:c4:aa:4c:d5:b9:d6:
04:8d:04:71:a8:4c:9f:65:d2:0a:30:d8:89:54:1a:
5c:96:f7:6b:a0:ec:f7:a3:de:48:f1:32:4b:dd:24:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:6A:9D:AC:A7:45:A0:D8:13:80:37:C6:A5:78:8A:B8:47:EF:3C
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d0:10:ab:33:3f:ac:39:46:24:39:93:93:15:b5:e2:74:cb:
27:8e:46:b1:0e:7d:98:2a:89:16:3d:1b:a8:54:c8:51:db:0f:
e2:dc:23:d1:8c:cd:b7:8b:1e:24:c9:4b:6f:f9:12:c8:f6:0c:
b3:e9:f6:a6:ae:90:4a:93:0b:8b:76:73:2d:e6:28:40:ba:b6:
f8:2c:3e:98:6a:08:36:bb:29:42:94:e9:2b:01:ec:fc:ec:d9:
92:18:e9:4e:a1:00:82:c5:02:36:1b:5b:8c:49:3c:c8:94:bc:
57:87:0e:9b:87:85:36:b6:29:87:8f:a0:f3:a1:bd:cc:db:19:
a4:ac:52:3b:f8:b9:1c:95:3c:fd:47:b2:5a:3d:d6:67:d9:79:
c9:fa:34:b1:fd:b0:6f:67:91:8b:e5:d6:05:e4:23:dd:2f:4d:
50:20:7e:f5:9d:96:bf:59:ca:14:15:d6:2a:13:a5:78:24:cd:
63:f0:46:70:0d:fb:27:cd:21:0e:5f:5e:89:c3:81:c5:54:99:
47:28:12:7a:27:4c:11:69:fe:74:f0:24:9a:5d:2d:fe:81:fc:
12:fa:58:f7:e3:28:55:66:9e:56:8c:9a:18:78:95:94:b8:05:
be:66:a3:3a:c0:33:ef:0a:8b:c3:bc:cd:ab:a7:0e:3a:4a:ae:
f0:5d:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:40:35 2026 by rpki-client