Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: GgnvYYSll2EDrSJ84MccwSwP6OBOOPHZDSlyrOtnAQI=
Subject key identifier: 95:7F:C8:1C:9E:EE:23:F1:99:78:9C:00:E4:25:BE:08:03:3B:72:96
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 01A0D012B5617C3B5FDC1C10334FBB0774B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 21:01:21 +0000
Manifest this update: Wed 23 Sep 2026 21:01:21 +0000
Manifest next update: Thu 24 Sep 2026 21:01:21 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: yhT5jmoJHtZXXaK7xKDEewTHamLNqAkenFiz+C/XwXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:b5:61:7c:3b:5f:dc:1c:10:33:4f:bb:07:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Sep 23 21:01:21 2026 GMT
Not After : Sep 24 21:01:21 2026 GMT
Subject: CN=957fc81c9eee23f199789c00e425be08033b7296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:50:61:57:0f:60:05:29:c8:0f:d2:4e:f7:
b5:ef:01:6d:84:aa:ce:4e:4c:77:0a:ab:a3:2a:60:
74:2e:11:e0:70:5b:08:88:f1:f3:7f:cd:29:a2:ca:
1a:83:23:e9:e3:17:92:00:76:24:a6:a8:02:2f:bc:
5e:a9:79:2f:99:70:cf:60:e9:6c:5d:5c:e3:a5:33:
bf:53:78:3a:f7:1b:85:22:59:ae:42:fa:db:c7:40:
13:b5:72:26:a3:4c:40:e6:8e:b1:5a:7a:75:a9:37:
3d:e5:1a:cb:b1:b2:7d:b4:fe:b7:dd:b8:4c:e3:c3:
27:17:53:7e:f7:4f:90:00:fe:5b:d7:85:5a:73:d6:
e4:ea:5e:51:1e:31:0a:57:1d:24:5f:78:55:a9:5c:
29:bc:05:84:79:3e:b8:f7:2a:f2:52:3f:22:a9:6a:
42:ad:8e:b0:3a:55:aa:68:48:37:26:13:cc:8e:99:
1e:a8:57:3e:15:e4:08:8c:84:84:5c:b4:a1:ee:2a:
35:0c:f0:11:46:45:b4:0f:35:9a:47:fa:a6:b5:ea:
a4:47:1a:39:09:2b:a6:df:28:2b:3e:d8:1c:20:ae:
ef:7f:35:1a:20:b4:fa:3a:60:f1:22:9c:9f:95:ba:
f8:13:a0:f8:62:d9:1a:a6:a3:00:d3:d2:c0:bc:5a:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:C8:1C:9E:EE:23:F1:99:78:9C:00:E4:25:BE:08:03:3B:72:96
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8f:de:e3:b9:6d:49:8b:1e:65:33:41:32:2d:37:28:12:36:
1e:31:e9:4f:ab:4e:64:ec:02:b7:4d:f6:b7:d6:cd:34:d2:71:
df:da:00:8c:68:14:1a:98:b2:b5:b8:1e:90:2e:f5:53:36:8a:
9e:7b:74:47:ef:32:34:ed:e9:f3:b0:63:47:e4:1d:81:3c:bc:
82:78:88:c6:32:9c:c7:cc:e4:30:fd:96:9c:b8:70:60:48:f6:
4d:7b:2c:6c:61:82:20:77:95:9c:2a:a9:13:91:ac:e8:2c:86:
c2:3c:01:e1:db:e8:57:5a:30:20:20:d1:31:14:39:ba:6a:0a:
6b:15:e9:14:f9:9e:0a:77:9c:a7:48:0c:42:13:6e:94:89:75:
5e:f1:18:28:c6:8b:b8:6a:a0:90:c3:b5:4d:25:1f:de:04:1a:
0b:88:d5:35:38:ad:ec:af:c8:d7:5d:45:50:40:e6:80:c8:b0:
bb:6d:17:e1:10:56:8d:f1:61:e3:36:2b:ee:1f:f3:8b:a1:80:
c7:8c:71:86:b5:61:3f:88:98:b4:65:e3:10:39:3a:42:ee:b5:
ef:f6:a7:90:af:20:7c:c6:37:c2:e8:5a:7b:54:1c:07:48:ca:
5c:af:e8:3b:33:fb:20:f2:6b:c7:b3:78:30:09:9e:39:a3:4b:
d3:96:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:41 2026 by rpki-client