Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: T+O8xqZVgYuI2s067w5YHUjYjfgsY5liG5n54eEc0XI=
Subject key identifier: 85:AF:3B:C0:80:EC:18:5F:E2:CB:D8:71:B0:AA:74:49:31:BE:67:EF
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 01A0D3F04AFF5C82B8B10F830E5AFB5821C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 15:02:15 +0000
Manifest this update: Thu 24 Sep 2026 15:02:15 +0000
Manifest next update: Fri 25 Sep 2026 15:02:15 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: khFaVIQfjqIPGMcKFAiSDXOo2qvHoo2sSPkGR9tse3E=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:4a:ff:5c:82:b8:b1:0f:83:0e:5a:fb:58:21:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Sep 24 15:02:15 2026 GMT
Not After : Sep 25 15:02:15 2026 GMT
Subject: CN=85af3bc080ec185fe2cbd871b0aa744931be67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:97:21:eb:22:34:a2:9c:7c:3b:ef:02:42:
16:ed:f3:ce:51:59:f7:16:26:bb:b3:1d:c8:00:7c:
91:c8:fb:13:3b:18:c4:ae:91:c9:e5:7e:88:db:ff:
a4:e7:b3:c7:5a:ef:b6:8e:d0:35:d0:e8:6e:ba:a1:
9a:b5:3a:7f:b6:4d:78:94:9e:5d:98:51:2a:19:7e:
b3:d2:28:b6:33:b8:05:6a:bf:58:46:03:93:a8:f7:
a1:e6:21:d6:c3:48:e4:2d:10:87:f5:4e:aa:5f:90:
c5:2a:1a:8d:ec:71:9d:6c:0d:3a:6f:ec:4c:86:b5:
ee:1b:2f:1b:c9:79:4c:62:38:61:b6:b6:51:c4:f0:
86:f8:cc:aa:4a:af:37:0e:f0:0f:4f:4a:98:c1:a0:
2c:ae:40:8d:70:02:af:35:9b:e0:e4:38:7b:f2:98:
62:1d:bf:9f:16:1b:e3:78:bd:85:56:1c:a8:0a:ee:
86:e3:a8:69:26:9e:89:c6:60:2d:11:77:83:53:74:
95:e3:93:b4:8a:48:01:d3:e9:12:07:b6:23:b5:d6:
16:c9:af:de:68:57:ee:08:56:e5:45:ec:4c:bb:e9:
c9:e4:05:37:d8:4e:43:41:74:62:13:8d:1f:6f:1c:
be:17:be:2e:38:7d:24:c6:64:17:2d:21:ee:79:88:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:3B:C0:80:EC:18:5F:E2:CB:D8:71:B0:AA:74:49:31:BE:67:EF
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1f:e9:1f:1f:d7:f5:93:1f:d0:04:54:7e:de:53:9f:fe:fc:
dd:b7:41:db:3f:5b:d8:e5:51:51:7c:2c:a6:9f:cb:ce:17:5f:
b4:6c:96:25:87:1a:a4:28:dd:4f:1e:11:48:9f:33:ad:d3:23:
b1:18:fa:a8:28:c6:0f:6a:c2:04:68:be:31:62:99:95:dc:8e:
81:4e:d3:c7:b0:11:a7:8e:12:be:9a:10:df:a3:da:7c:9f:a4:
f3:e5:92:dc:e7:df:ae:64:90:5c:69:a1:74:d9:39:6d:8c:79:
45:07:88:48:0c:40:63:70:ae:1a:e6:92:40:b8:7f:49:97:f7:
b4:a7:28:07:3d:f5:28:80:71:50:f8:50:79:a1:49:0e:21:78:
ee:d5:11:e3:76:e1:7f:32:ae:c6:69:0d:e7:c5:c7:50:8d:ed:
c4:63:e5:c4:74:31:00:90:ef:7f:78:e8:fe:e5:4f:84:eb:e4:
26:00:f5:94:b3:8b:3d:34:64:a9:49:6c:5f:21:b4:52:ed:63:
88:1c:89:24:5d:a0:84:6d:80:ad:60:3f:b7:1e:78:b7:d7:81:
d0:5d:74:b3:9f:3b:a7:1a:b5:29:ef:49:9a:42:26:c0:c5:8a:
6d:46:8f:25:7b:1a:26:7e:c4:eb:4a:68:91:99:28:fb:64:6e:
31:14:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:06:38 2026 by rpki-client