Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: Jh4bCaHCj0C4vWpVF9OS9dwrEkaHEUUyqfNQjK07KWU=
Subject key identifier: 00:F6:9B:DB:B0:1D:6C:46:42:0F:6B:05:E0:2E:AB:68:0D:ED:DD:5E
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01A0D0ED7B7AC93D5DB45793EF3CD2E6D459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 08D5
Signing time: Thu 24 Sep 2026 01:00:19 +0000
Manifest this update: Thu 24 Sep 2026 01:00:19 +0000
Manifest next update: Fri 25 Sep 2026 01:00:19 +0000
Files and hashes: 1: 6TxN43R2n4f6_lmQ2Hpf5ACYWTA.roa (hash: H1Tpf8B6yk+21S4AcVHmhmY0uxxPu+V39L+M+Ee8RSU=)
2: da64birjCL1XOPzp_ziknWIOF3Y.roa (hash: QMnviuNiCANn1NxPMK2JmFlgecXmL0gQbTXvBPWsqD4=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: 9zX0/Q85EmJqocJDx/QVadSH8hye9HTrw6XET/YydEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:7b:7a:c9:3d:5d:b4:57:93:ef:3c:d2:e6:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Sep 24 01:00:19 2026 GMT
Not After : Sep 25 01:00:19 2026 GMT
Subject: CN=00f69bdbb01d6c46420f6b05e02eab680deddd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:69:f4:d1:a0:2c:d0:3c:b2:85:74:d9:34:b9:
a1:98:e1:73:65:2b:ed:54:05:9c:c0:c8:56:c2:fd:
c7:20:4f:4b:6d:52:e8:b6:f8:b8:e1:b9:45:03:e9:
4c:bb:08:b5:ce:5b:93:7c:2b:c9:6d:a0:43:de:34:
97:02:ae:45:db:46:7e:d6:25:45:42:f9:08:43:51:
80:0b:f4:70:a9:6d:af:96:39:9e:0c:83:e6:69:97:
cb:d5:86:73:e2:b6:a4:b2:7b:76:0e:f2:72:1c:77:
dc:c5:3b:65:3f:cf:51:a4:fe:c2:cf:1b:aa:9a:b1:
06:ca:e2:05:67:cf:15:67:a3:42:31:3d:75:4d:3a:
5a:06:dc:5e:d3:7f:99:42:f1:68:ff:59:c1:c4:83:
b9:d2:de:1b:a5:fb:c6:d7:14:be:27:18:fc:0a:94:
0c:78:eb:ae:1a:e7:d3:53:83:5d:eb:a8:b1:75:50:
8a:9e:1b:87:28:27:9e:cd:7e:2a:40:c1:aa:79:c2:
79:cd:98:8d:32:3c:2e:1b:a8:31:8a:9e:d5:c9:fc:
7c:11:f2:c3:d5:12:09:c9:2d:3f:43:20:87:23:ca:
66:e0:89:92:43:e2:51:a3:e1:4f:16:1e:92:4e:be:
7a:37:26:7d:74:42:61:cf:c7:8b:20:53:a5:ae:db:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:9B:DB:B0:1D:6C:46:42:0F:6B:05:E0:2E:AB:68:0D:ED:DD:5E
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:05:49:75:7b:78:85:fd:d2:14:1f:5e:b2:b6:c3:e9:59:36:
cb:8a:b2:f9:39:37:88:9a:4a:97:d1:64:1f:6d:ca:e5:80:c9:
af:0d:6c:18:08:78:2b:19:f8:5c:65:69:36:be:0d:f7:89:aa:
51:70:f2:ed:7b:0a:cc:16:bd:31:38:3e:1d:3a:a3:e3:74:80:
94:79:d8:d3:8f:ae:f9:98:16:4a:9f:fd:3e:0d:83:ec:8a:34:
7e:af:9e:08:64:df:f7:df:a9:b5:ac:39:9c:23:71:d8:91:12:
02:0c:50:6f:54:d3:05:62:86:55:9b:f4:f5:10:d9:5c:f7:ba:
87:71:e5:9e:01:15:c5:d3:c0:42:7d:a5:fd:85:f9:de:e0:92:
78:f5:2d:52:5a:9c:a7:80:94:f8:b3:cb:97:31:14:cd:76:4a:
46:4f:25:59:a4:d9:e7:49:28:5f:d9:28:99:36:b3:50:9a:04:
cd:79:f7:f4:1b:27:d0:28:4a:74:c3:23:ea:4a:c1:7c:2d:64:
ad:ac:33:1c:e8:3e:3e:c0:08:57:b1:d7:46:8a:a7:1c:50:bf:
1c:82:88:44:65:6b:c4:f8:d2:5a:b3:cc:9c:78:3c:c9:7a:07:
08:93:64:d8:87:d6:15:24:55:68:21:aa:66:22:82:73:4b:c1:
96:f8:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:00 2026 by rpki-client