Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: fsYRYzeWe/OQ1limBB4/VQThvViR1fYjcnIsXrEaNmw=
Subject key identifier: 61:85:8E:83:67:5B:B0:16:65:37:85:B5:30:6A:DD:3D:CA:3B:95:36
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 01A0D01237642352FFADE16AA47CC4350F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 21:00:49 +0000
Manifest this update: Wed 23 Sep 2026 21:00:49 +0000
Manifest next update: Thu 24 Sep 2026 21:00:49 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: QP0vp3aUDUX0viGJ7we8nAC4rMQXjEwLDICsAWTsXAc=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:37:64:23:52:ff:ad:e1:6a:a4:7c:c4:35:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Sep 23 21:00:49 2026 GMT
Not After : Sep 24 21:00:49 2026 GMT
Subject: CN=61858e83675bb016653785b5306add3dca3b9536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:19:6c:5d:28:7a:f0:9b:2f:6f:b8:65:b0:
c8:d0:d2:da:6a:d8:fb:e1:d6:31:48:db:67:8a:00:
24:28:de:f5:41:04:81:4e:ad:22:e9:2d:42:a2:80:
6d:28:07:3b:52:56:c7:c2:0c:a5:29:5e:ce:96:75:
3a:b9:61:50:26:fa:58:9e:bd:e9:91:d4:80:bc:1e:
12:a8:f5:84:52:7d:f2:c8:7b:7e:62:b1:47:0e:fd:
6b:8d:e1:eb:96:45:67:dc:10:cb:92:09:03:fe:22:
c4:a2:91:cc:dd:66:b6:3b:46:a7:a4:fc:b8:aa:83:
85:08:8b:cf:e6:47:65:e4:b8:da:11:78:19:6f:98:
69:4e:71:80:85:41:4b:9f:82:d7:a6:b3:53:61:04:
ed:f2:56:a2:1b:b1:43:6c:3d:fb:c6:30:7e:a6:c8:
07:82:1a:c0:b8:5d:2b:4a:2f:e3:f3:79:c4:1a:41:
48:66:60:7c:52:97:bd:a2:8d:0d:6a:2f:fd:ab:fd:
cf:9b:f4:7a:0c:34:16:33:4d:13:8f:75:7e:3e:39:
52:ad:13:29:58:d3:b8:fa:b4:2e:ac:c4:55:12:0d:
7a:28:97:5e:74:d3:59:c5:9b:e8:4a:f0:30:3f:ab:
97:26:b6:de:bf:30:19:0a:8f:e5:a7:7a:78:49:05:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:85:8E:83:67:5B:B0:16:65:37:85:B5:30:6A:DD:3D:CA:3B:95:36
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:45:15:0a:54:cc:2c:7c:89:c7:cd:31:09:c4:1c:68:99:d8:
b5:c4:3f:19:e5:2c:d6:ba:3f:18:aa:98:6d:8b:75:9a:ed:05:
48:7e:18:7c:0d:48:44:58:d5:d5:25:e9:87:23:11:cc:31:a2:
06:d4:a8:a3:51:84:d2:9c:a3:90:d9:00:45:d0:4e:b1:b2:ff:
25:55:6d:21:61:eb:0a:23:45:cd:21:ec:b2:75:55:ff:fd:b8:
35:00:c1:18:70:2f:f3:b3:a3:a2:d6:8d:1c:ee:a6:7a:ab:18:
9a:19:ca:ed:e4:b8:ab:72:c3:8f:2f:d4:7b:66:3b:a2:3b:9c:
4d:6c:02:38:0d:ab:c6:38:25:29:0a:ea:14:62:9f:cf:ab:a9:
a4:3b:9f:0a:74:bc:a9:96:bb:1f:d1:ef:e6:fb:64:e3:c0:6f:
1e:25:b3:dc:11:e6:b5:cf:65:ac:25:19:92:ae:71:70:cd:80:
11:91:03:9f:ec:44:07:10:fb:ae:ca:a5:ba:40:3b:0c:04:aa:
5d:c2:d7:88:5c:e3:0d:ae:52:ee:88:e5:a9:08:8b:54:c6:30:
bf:b5:34:03:3f:2e:b2:2f:21:77:7d:6d:16:e6:50:af:c4:9c:
e6:40:53:70:a9:48:40:fb:4d:2e:74:36:25:fc:e0:7c:8f:bf:
74:22:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:09:39 2026 by rpki-client