Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: nSbfpH8VadbHHGP9vp/GGj/E60d2BLRmbhbVEK8989g=
Subject key identifier: 7B:CD:C1:F6:45:25:2E:9A:6D:09:E7:17:6D:D9:A5:CF:F7:F5:96:6D
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 01A1CA44556E655EA985184828764233FF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 109F
Signing time: Wed 11 Nov 2026 11:00:38 +0000
Manifest this update: Wed 11 Nov 2026 11:00:38 +0000
Manifest next update: Thu 12 Nov 2026 11:00:38 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: 3qtI9ewHVRizS6NfFbfJqWn8xGAT9FCuDjLliNOv1TQ=)
2: epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa (hash: Aa6u3inS9dGYjD1jBcsF2Mf4ginAblBytDS0JIhmA9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:44:55:6e:65:5e:a9:85:18:48:28:76:42:33:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Nov 11 11:00:38 2026 GMT
Not After : Nov 12 11:00:38 2026 GMT
Subject: CN=7bcdc1f645252e9a6d09e7176dd9a5cff7f5966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:ae:1c:f3:85:c6:20:42:58:26:2c:ec:cc:
0b:a1:85:19:a9:57:de:83:00:6c:36:3d:c3:84:83:
11:5b:d2:14:e4:7c:a9:12:6d:ed:95:5b:5c:89:ba:
0f:d1:7a:4e:58:14:dd:98:c5:b6:61:01:e9:54:4c:
2c:ce:cd:c5:ea:45:6a:0f:21:ea:e6:24:00:a2:d5:
05:70:4d:84:50:da:5f:0e:bf:16:9a:f1:dd:0b:79:
58:03:39:2b:96:c6:c1:69:25:28:3c:51:0c:9a:c1:
ea:73:a2:cf:ce:a1:d5:7e:9c:a0:02:50:e4:e8:aa:
3f:a3:da:54:73:a4:d2:09:70:65:bf:53:3b:c9:75:
e7:d4:9d:3f:ce:2b:cd:cc:39:76:c7:94:b4:b3:0d:
4d:27:ab:91:d4:12:fd:cf:64:88:30:a2:a7:98:4d:
be:2f:b1:4b:37:dc:4f:99:be:20:c6:21:91:59:af:
f9:d5:58:fd:8b:31:80:23:2f:07:90:72:7c:46:bf:
48:ac:6a:c8:03:02:60:78:11:a9:b9:4e:b8:e6:49:
98:e6:09:1b:ea:f3:63:d8:03:2b:6d:25:db:63:45:
9f:41:42:ed:71:b6:87:87:a5:d3:a7:f4:80:04:72:
8d:e9:ef:71:e8:a5:b5:bd:65:10:90:17:97:67:83:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:C1:F6:45:25:2E:9A:6D:09:E7:17:6D:D9:A5:CF:F7:F5:96:6D
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:62:62:12:a2:dd:82:4a:3a:e6:b4:a4:e4:13:ab:23:ee:e4:
24:cf:c6:02:78:a5:db:bf:7d:b3:17:92:94:18:71:06:bd:c0:
ee:ca:83:84:b4:e8:71:62:5c:66:98:5f:25:4b:2a:6f:b6:6e:
fc:70:bd:28:9d:95:c2:42:ae:b6:98:88:2f:72:27:4a:f2:49:
79:2b:96:05:a1:db:d1:c9:f7:89:07:93:79:dd:4a:1a:21:f2:
73:22:41:4e:61:09:48:6e:ee:08:08:11:4e:4f:5f:de:cb:d9:
5d:04:f6:43:0d:7d:ec:30:b3:a8:57:89:8a:e5:ed:20:64:99:
45:b9:3f:6f:c2:a8:2b:83:4d:56:64:af:ed:9e:b0:7b:4c:fc:
97:c2:39:12:1f:3d:3f:42:52:d8:77:f0:d3:50:44:eb:91:34:
21:a7:03:fd:82:e9:68:92:0d:9b:64:89:1a:5f:95:a0:a8:52:
66:52:ba:48:b5:3c:66:90:cd:e5:ba:74:d5:0f:ad:1f:51:2d:
8b:f9:68:dd:3e:21:19:73:86:b7:d3:b3:2d:b6:ea:86:ae:8e:
cc:7d:24:db:f4:90:14:9c:e1:72:6c:4f:dd:d9:eb:88:7b:e0:
a5:6e:e0:5f:e7:45:df:c4:19:ac:a3:29:8f:ea:b5:66:b3:62:
0d:4e:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 15:37:45 2026 by rpki-client