
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: j6u5y4y7rIJt2AH29rh6LrNCDFT5CLYLHzihM2xm1ZE=
Subject key identifier: C6:E0:F2:1A:EB:6B:34:EE:5D:6F:51:DD:B3:11:CE:AA:8A:AA:9A:61
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 01A0CB222FDC19AC5E0D235EEB5D0DA8B0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 0845
Signing time: Tue 22 Sep 2026 22:00:10 +0000
Manifest this update: Tue 22 Sep 2026 22:00:10 +0000
Manifest next update: Wed 23 Sep 2026 22:00:10 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: KF+X0WITJX0iIyrw+GZOvQDEnNaX2F+h6I+Hbg/HpdM=)
2: NpxIGcPNSR7M7Pg5DxBw4oq6qFc.roa (hash: /JiblaBoPoe2nZBA7SVm6e0ExqOkpFSs5xrzKMIO9LU=)
3: kSpQdj4pHKFVSlXJ4ce8DARPvac.roa (hash: kZtsdvWcO2A1I+qg+DhaJ9CEvwXS8FB59+ItpXgZAT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:2f:dc:19:ac:5e:0d:23:5e:eb:5d:0d:a8:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Sep 22 22:00:10 2026 GMT
Not After : Sep 23 22:00:10 2026 GMT
Subject: CN=c6e0f21aeb6b34ee5d6f51ddb311ceaa8aaa9a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:82:0a:3a:3b:48:c4:b6:69:4d:2d:39:d9:
98:68:28:84:b0:bb:c9:ce:f1:8d:7b:f3:36:b0:71:
d7:81:db:32:7d:bd:37:3f:88:c7:16:45:28:09:2d:
60:f0:91:3e:b5:58:0a:42:4c:1a:4b:10:b0:c8:13:
81:d7:d8:67:bf:ac:d0:33:d2:f3:35:36:65:d3:12:
d3:99:ef:f5:82:ec:e4:f4:f9:da:19:30:b4:d3:f9:
82:61:e1:b2:6c:b1:f2:75:cf:a0:36:82:34:53:ed:
76:12:b6:46:e7:1d:43:03:7e:6a:6d:33:5e:16:31:
7e:a4:c7:fd:f2:48:84:b2:dc:62:53:48:dc:95:26:
23:c3:d9:3e:03:ff:c6:50:b5:b5:5f:5d:32:31:89:
85:4b:c5:ea:84:ec:f4:b3:1f:a9:7e:35:ec:f7:ab:
83:2d:45:19:90:5d:fa:1e:04:38:92:19:b0:e1:cb:
cb:c1:68:66:12:fd:9d:94:db:f0:36:8c:c2:c8:75:
0b:a9:76:17:9d:02:05:cb:d5:05:00:0a:33:fa:d4:
e8:86:cd:c5:c6:53:d7:cf:13:08:63:5f:50:1c:7e:
99:a7:ee:01:26:ea:5f:a3:e2:a0:72:0c:18:17:1a:
5e:a1:89:53:d7:cf:09:bd:f1:74:12:a3:19:f4:f7:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:F2:1A:EB:6B:34:EE:5D:6F:51:DD:B3:11:CE:AA:8A:AA:9A:61
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7c:4c:0d:ca:2e:2f:27:3f:81:d2:ea:ef:3c:fd:b9:f6:ec:
9f:48:16:3a:be:bf:c4:44:66:25:98:97:7b:40:43:7b:62:a3:
48:7d:3b:77:f5:d9:89:c4:e0:f0:65:99:58:3a:90:9b:ea:06:
e9:c5:a3:1e:9c:e4:9e:a0:71:bd:cb:8b:e0:33:4f:df:92:e9:
e6:34:69:64:ce:80:c8:2a:35:5f:5c:f3:43:f3:8f:d9:80:78:
ba:fb:c7:9c:17:44:5e:3c:8d:b9:69:17:97:93:5f:1a:81:97:
c8:d3:2e:14:e4:0f:e0:f8:4b:33:4e:d3:b7:5a:2a:bc:72:1c:
6c:fa:c7:21:7f:8e:cf:c3:c8:ff:a9:5b:ed:30:9a:13:80:05:
17:b1:6e:37:e6:56:49:e7:d0:51:23:64:76:a2:92:00:03:0b:
b8:91:c9:0c:d2:c5:55:1f:ba:36:fb:0e:61:2a:6d:6d:bd:ba:
7d:7e:01:cb:24:62:26:9b:1c:de:ba:5e:7a:af:39:6c:c3:71:
d8:b3:45:8a:26:0f:c7:fe:26:32:11:11:57:75:8a:ad:1e:85:
84:5b:f8:f4:fd:30:33:b1:c0:38:58:66:45:86:cf:33:09:e2:
53:71:e9:cc:3f:39:ba:0f:72:85:c2:97:56:97:0e:9c:68:da:
d7:f0:d2:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIi/cGaxeDSNe610NqLC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmIyZWZiNGVjMWU5YjZmNmM2ZDBiYTI2MDc0N2E5YzNl
MGFkY2EwHhcNMjYwOTIyMjIwMDEwWhcNMjYwOTIzMjIwMDEwWjAzMTEwLwYDVQQD
EyhjNmUwZjIxYWViNmIzNGVlNWQ2ZjUxZGRiMzExY2VhYThhYWE5YTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30mCCjo7SMS2aU0tOdmYaCiEsLvJ
zvGNe/M2sHHXgdsyfb03P4jHFkUoCS1g8JE+tVgKQkwaSxCwyBOB19hnv6zQM9Lz
NTZl0xLTme/1guzk9PnaGTC00/mCYeGybLHydc+gNoI0U+12ErZG5x1DA35qbTNe
FjF+pMf98kiEstxiU0jclSYjw9k+A//GULW1X10yMYmFS8XqhOz0sx+pfjXs96uD
LUUZkF36HgQ4khmw4cvLwWhmEv2dlNvwNozCyHULqXYXnQIFy9UFAAoz+tTohs3F
xlPXzxMIY19QHH6Zp+4BJupfo+KgcgwYFxpeoYlT188JvfF0EqMZ9Pc47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbg8hrrazTuXW9R3bMRzqqKqpphMB8GA1UdIwQY
MBaAFPP7LvtOwem29sbQuiYHR6nD4K3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQt
NmU5MTJkYjAyZjVkLzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQtNmU5MTJkYjAyZjVk
LzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnxMDcou
Lyc/gdLq7zz9ufbsn0gWOr6/xERmJZiXe0BDe2KjSH07d/XZicTg8GWZWDqQm+oG
6cWjHpzknqBxvcuL4DNP35Lp5jRpZM6AyCo1X1zzQ/OP2YB4uvvHnBdEXjyNuWkX
l5NfGoGXyNMuFOQP4PhLM07Tt1oqvHIcbPrHIX+Oz8PI/6lb7TCaE4AFF7FuN+ZW
SefQUSNkdqKSAAMLuJHJDNLFVR+6NvsOYSptbb26fX4ByyRiJpsc3rpeeq85bMNx
2LNFiiYPx/4mMhERV3WKrR6FhFv49P0wM7HAOFhmRYbPMwniU3HpzD85ug9yhcKX
VpcOnGja1/DSLA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:26 2026 by rpki-client