Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
File: 8y9z8kbvlI4fyqLREJmhHw25PLE.mft (raw, json)
Hash identifier: tLLnxLTZL0+dxHJ0pu0I5Si5x1dwE5lwCu8kRFP9EWE=
Subject key identifier: 2D:B1:FB:E9:05:89:65:77:C4:F6:FD:3D:10:51:24:EB:A9:06:BF:34
Authority key identifier: F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
Certificate issuer: /CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Certificate serial: 01A0D9BA77B6DD889054A9222D54A369AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:11 +0000
Manifest this update: Fri 25 Sep 2026 18:01:11 +0000
Manifest next update: Sat 26 Sep 2026 18:01:11 +0000
Files and hashes: 1: 8y9z8kbvlI4fyqLREJmhHw25PLE.crl (hash: Lyea1lTwR01L6SEsQitrwDMGFr5J7VvE2cOTmzz+QS8=)
2: N0qfhIoD2R78tt-S-0BE02w8qdI.roa (hash: BbytL5rDaSUla5jzbfMP2OrBKQbWEV4Nh133OWiJSgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:77:b6:dd:88:90:54:a9:22:2d:54:a3:69:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Validity
Not Before: Sep 25 18:01:11 2026 GMT
Not After : Sep 26 18:01:11 2026 GMT
Subject: CN=2db1fbe905896577c4f6fd3d105124eba906bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:97:a9:50:38:7c:c4:5c:11:da:37:94:be:
14:03:9e:d0:52:9a:2a:3d:53:29:15:ef:76:d4:59:
91:10:f4:dd:b1:67:e2:e0:0b:a8:be:63:39:eb:b4:
a9:17:6f:4c:cd:60:8a:07:39:9d:43:91:82:35:5f:
f1:2d:17:09:48:a0:02:0e:c9:63:e2:a7:75:4a:48:
68:93:a8:6e:69:e2:ea:29:1c:f5:6f:61:dd:4c:8f:
17:be:b2:74:2b:c5:2b:88:f8:53:05:87:71:be:2e:
a8:d9:d4:d0:1a:8a:8e:a2:51:72:e9:a1:5f:79:44:
10:26:52:a8:f5:dc:4f:e5:3c:07:7d:dc:77:76:31:
33:17:b2:f0:e5:97:dc:9f:1b:44:9c:2d:d4:23:02:
b7:fc:d2:a6:3d:b7:13:a4:ef:ed:f2:8c:8e:49:7c:
e9:be:41:c8:af:0f:90:b2:75:4d:f6:07:14:d0:ac:
33:c5:e4:ae:c8:c2:ff:52:38:54:69:b1:f7:bc:21:
15:e6:74:88:51:3a:d9:49:c8:bd:c1:8f:c6:dd:5e:
6e:29:97:2a:dd:cd:42:0f:2b:a5:4c:6d:20:84:75:
e7:a9:44:81:70:bc:b1:de:f0:eb:f7:6e:55:4e:52:
1b:13:18:6d:0a:aa:54:52:f4:ca:05:8d:d7:ca:30:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:FB:E9:05:89:65:77:C4:F6:FD:3D:10:51:24:EB:A9:06:BF:34
X509v3 Authority Key Identifier:
keyid:F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:00:57:9c:c1:1b:97:f6:cd:bf:12:02:cd:27:68:a3:12:c1:
47:85:35:5c:bb:4f:54:bd:28:df:e8:d0:7e:ec:02:d7:15:1d:
c5:27:28:48:0c:3a:13:f6:5d:10:46:25:60:1b:5a:2b:8f:60:
80:30:7f:67:4f:cd:8b:2c:66:55:11:cf:bc:d5:8a:74:30:53:
a4:92:86:78:2c:ff:3c:6b:ae:8c:c7:3b:e0:14:e8:13:fc:32:
eb:ae:18:d9:86:e3:cb:31:69:d7:86:cf:8e:ab:1b:a2:f4:e6:
8b:6c:d8:7c:37:8c:1d:3b:56:91:b0:5e:a0:a6:fb:22:b7:ac:
1c:01:b1:7b:30:ac:9b:1a:49:3b:1f:b6:24:da:02:d7:18:01:
34:c3:ff:ec:f6:e9:af:98:4c:de:ed:d5:a3:90:b2:d0:36:8c:
e0:5c:dd:54:dc:4b:9f:40:39:e8:ef:bd:78:79:84:81:49:7f:
42:84:12:af:f2:08:7f:ac:92:e6:95:bd:9d:39:ad:67:a9:33:
d3:73:45:1c:df:c5:eb:ee:96:6e:ae:4c:d4:57:b5:b1:b2:a8:
86:9d:b6:36:7a:a8:87:03:6d:22:62:ed:dc:52:54:42:1d:0d:
69:ad:43:9d:0e:4c:fb:2b:12:6f:67:60:e4:18:48:2e:b9:11:
43:33:e8:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZune23YiQVKkiLVSjaaplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmY3M2YyNDZlZjk0OGUxZmNhYTJkMTEwOTlhMTFmMGRi
OTNjYjEwHhcNMjYwOTI1MTgwMTExWhcNMjYwOTI2MTgwMTExWjAzMTEwLwYDVQQD
EygyZGIxZmJlOTA1ODk2NTc3YzRmNmZkM2QxMDUxMjRlYmE5MDZiZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAOXqVA4fMRcEdo3lL4UA57QUpoq
PVMpFe921FmREPTdsWfi4AuovmM567SpF29MzWCKBzmdQ5GCNV/xLRcJSKACDslj
4qd1Skhok6huaeLqKRz1b2HdTI8XvrJ0K8UriPhTBYdxvi6o2dTQGoqOolFy6aFf
eUQQJlKo9dxP5TwHfdx3djEzF7Lw5ZfcnxtEnC3UIwK3/NKmPbcTpO/t8oyOSXzp
vkHIrw+QsnVN9gcU0KwzxeSuyML/UjhUabH3vCEV5nSIUTrZSci9wY/G3V5uKZcq
3c1CDyulTG0ghHXnqUSBcLyx3vDr925VTlIbExhtCqpUUvTKBY3XyjB7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2x++kFiWV3xPb9PRBRJOupBr80MB8GA1UdIwQY
MBaAFPMvc/JG75SOH8qi0RCZoR8NuTyxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgBXnMEb
l/bNvxICzSdooxLBR4U1XLtPVL0o3+jQfuwC1xUdxScoSAw6E/ZdEEYlYBtaK49g
gDB/Z0/NiyxmVRHPvNWKdDBTpJKGeCz/PGuujMc74BToE/wy664Y2YbjyzFp14bP
jqsbovTmi2zYfDeMHTtWkbBeoKb7IresHAGxezCsmxpJOx+2JNoC1xgBNMP/7Pbp
r5hM3u3Vo5Cy0DaM4FzdVNxLn0A56O+9eHmEgUl/QoQSr/IIf6yS5pW9nTmtZ6kz
03NFHN/F6+6Wbq5M1Fe1sbKohp22NnqohwNtImLt3FJUQh0Naa1DnQ5M+ysSb2dg
5BhILrkRQzPo8w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:56:49 2026 by rpki-client