
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: W3woZ+7G4qrh/guqx4gMnnNreboOFrMRpFHu7YZcR34=
Subject key identifier: F2:62:33:15:8A:0B:3A:44:99:DD:26:3E:0D:F3:7C:A6:50:67:A9:73
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01A0DA5F90500D448A2220D5A834807AD47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 1366
Signing time: Fri 25 Sep 2026 21:01:30 +0000
Manifest this update: Fri 25 Sep 2026 21:01:30 +0000
Manifest next update: Sat 26 Sep 2026 21:01:30 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: UfZOxKG4TVD7Mh57RSjXOrJGoUgEDGesoW127eg+nT8=)
2: VK5J5QXmsEfKr-yeuBSA7pgMRS0.roa (hash: QEOQEZoGmfNdE7eYFQFsPYIivVEyHZdR3wVt3CbFPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:90:50:0d:44:8a:22:20:d5:a8:34:80:7a:d4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Sep 25 21:01:30 2026 GMT
Not After : Sep 26 21:01:30 2026 GMT
Subject: CN=f26233158a0b3a4499dd263e0df37ca65067a973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:03:8e:91:27:2a:00:c0:09:73:af:c0:f9:
77:93:9e:b2:0e:d2:5a:38:05:28:f9:83:23:db:28:
09:4f:2c:5a:16:91:1b:30:7c:2e:19:7e:d1:d9:af:
cb:c4:e1:f4:d8:02:68:f3:f5:e0:ae:d2:06:4c:9d:
e2:1c:cd:af:6c:3e:8d:c6:04:c4:a1:f4:03:3c:40:
3c:a5:bd:2d:d4:1d:bd:82:a1:5a:2f:21:e1:f9:a4:
2e:d0:1d:64:47:5c:7f:4a:92:55:8f:8a:b1:c5:95:
8f:b7:6f:e5:7f:77:e0:3c:6d:f1:3a:2a:57:27:05:
23:f5:95:8d:a0:f7:e1:58:89:20:ce:50:cc:62:36:
20:a0:66:59:6e:33:f7:b9:4f:93:f4:2b:46:c4:a0:
9a:5c:9a:1b:51:d8:8a:96:60:39:0a:02:bc:08:bf:
97:b4:37:0d:31:e2:bf:21:75:12:1d:97:56:51:ba:
25:a5:e9:66:09:c2:ee:dc:8b:49:e0:51:ac:88:c5:
e7:9c:c0:a1:28:f5:ef:bc:21:f6:b8:ae:c3:5e:b7:
12:bd:90:2c:8f:f9:13:b0:81:d1:d5:3b:e9:8d:d6:
40:0d:3b:0a:3f:bd:47:a7:78:64:9e:f0:ef:1a:5d:
6e:bb:28:61:52:2a:0f:85:eb:5e:da:1b:fd:bc:b4:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:33:15:8A:0B:3A:44:99:DD:26:3E:0D:F3:7C:A6:50:67:A9:73
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ce:86:3b:22:2d:ad:8a:46:1c:b7:9a:8a:d3:d0:31:73:87:
5e:44:7d:d0:6a:40:b1:7b:c9:17:78:72:ca:b4:2c:b3:97:b2:
c5:c1:e4:ee:da:7e:2e:5c:6b:8c:43:78:d6:61:d9:c4:0e:08:
dc:9d:1f:4f:f8:30:09:08:3f:e0:f4:3e:82:e4:ca:44:a7:28:
e2:d5:56:eb:13:51:3c:2a:cb:9e:45:75:16:fb:d2:eb:0e:90:
d8:fe:97:4f:77:a3:a6:ab:ef:3e:5f:56:75:90:e9:56:20:83:
6f:38:81:15:8a:a0:cf:81:52:7b:71:b4:3f:ba:be:18:e7:c4:
3e:0a:9e:2b:24:64:a5:10:f5:e9:4a:2e:70:14:ba:a1:b5:3f:
17:ff:15:b8:ee:17:a0:5b:ee:90:f9:f3:5c:e6:01:01:3f:ff:
e1:15:05:92:82:f2:07:4f:84:f1:aa:a4:3e:52:df:a9:fa:85:
28:9c:02:09:a4:8f:c4:18:bf:2b:b3:9d:d1:01:07:d1:32:5e:
2d:a7:3b:77:ce:ee:79:4f:7f:bd:06:6a:a0:1e:0d:10:29:ce:
99:2c:84:dc:32:bb:65:5d:e2:5e:26:96:fa:0e:42:51:56:25:
1a:79:e7:98:07:18:b4:b3:d3:46:3b:ff:fb:1e:49:ac:85:66:
6a:2b:3e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX5BQDUSKIiDVqDSAetR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDU5M2IxYzg3YjgxNzM5ZWM0MTkxMDI5NWJmMzg1ZjJj
OWE5OTIwHhcNMjYwOTI1MjEwMTMwWhcNMjYwOTI2MjEwMTMwWjAzMTEwLwYDVQQD
EyhmMjYyMzMxNThhMGIzYTQ0OTlkZDI2M2UwZGYzN2NhNjUwNjdhOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPQDjpEnKgDACXOvwPl3k56yDtJa
OAUo+YMj2ygJTyxaFpEbMHwuGX7R2a/LxOH02AJo8/XgrtIGTJ3iHM2vbD6NxgTE
ofQDPEA8pb0t1B29gqFaLyHh+aQu0B1kR1x/SpJVj4qxxZWPt2/lf3fgPG3xOipX
JwUj9ZWNoPfhWIkgzlDMYjYgoGZZbjP3uU+T9CtGxKCaXJobUdiKlmA5CgK8CL+X
tDcNMeK/IXUSHZdWUbolpelmCcLu3ItJ4FGsiMXnnMChKPXvvCH2uK7DXrcSvZAs
j/kTsIHR1TvpjdZADTsKP71Hp3hknvDvGl1uuyhhUioPhete2hv9vLQZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJiMxWKCzpEmd0mPg3zfKZQZ6lzMB8GA1UdIwQY
MBaAFPLVk7HIe4FznsQZEClb84XyyamSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTIt
OWI4ZDY4ZWU4N2ZjLzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MzkxYTYtZGQzZi00OTMzLTlkYTItOWI4ZDY4ZWU4N2Zj
LzEvOHRXVHNjaDdnWE9leEJrUUtWdnpoZkxKcVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM6GOyIt
rYpGHLeaitPQMXOHXkR90GpAsXvJF3hyyrQss5eyxcHk7tp+LlxrjEN41mHZxA4I
3J0fT/gwCQg/4PQ+guTKRKco4tVW6xNRPCrLnkV1FvvS6w6Q2P6XT3ejpqvvPl9W
dZDpViCDbziBFYqgz4FSe3G0P7q+GOfEPgqeKyRkpRD16UoucBS6obU/F/8VuO4X
oFvukPnzXOYBAT//4RUFkoLyB0+E8aqkPlLfqfqFKJwCCaSPxBi/K7Od0QEH0TJe
Lac7d87ueU9/vQZqoB4NECnOmSyE3DK7ZV3iXiaW+g5CUVYlGnnnmAcYtLPTRjv/
+x5JrIVmais+0g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:00:33 2026 by rpki-client