Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: gB9nv2HoVstvCUXZWhW2DO0E1e/q3y7lRAdhTo930CQ=
Subject key identifier: AC:52:25:14:F3:9B:D4:A9:44:AA:A6:49:97:57:F8:23:7B:C0:F8:10
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 01A0CA0FBC6C04D2566C253BE3A159D28C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 0B07
Signing time: Tue 22 Sep 2026 17:00:23 +0000
Manifest this update: Tue 22 Sep 2026 17:00:23 +0000
Manifest next update: Wed 23 Sep 2026 17:00:23 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: w0aT4bz4pfMPXmrV7iGO6EkNxGENZOfL0ZlTta4Z1bU=)
2: CbmENpJLaG0YX9_Gx0vq5uAUoqE.roa (hash: 6zLFAdu+7Zk1blKU97MMoM4dLWkBF7BLSH6EDDgIK/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:bc:6c:04:d2:56:6c:25:3b:e3:a1:59:d2:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Sep 22 17:00:23 2026 GMT
Not After : Sep 23 17:00:23 2026 GMT
Subject: CN=ac522514f39bd4a944aaa6499757f8237bc0f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:28:ea:d5:74:6a:5c:44:c5:94:d7:43:02:
68:ed:a3:d4:57:8a:a1:84:64:e0:65:46:f7:da:12:
69:cb:88:02:08:76:89:1f:2f:4e:9c:8c:fa:85:05:
13:4a:19:c6:4a:94:4c:cd:33:2d:59:c4:82:55:cd:
7b:9f:ba:a9:d0:8f:bb:d6:ba:00:a4:c2:a4:44:15:
0e:a9:de:0f:85:30:b9:90:6f:31:73:46:8e:2e:2e:
e5:94:7f:3a:cd:04:49:77:f2:15:e5:5a:d4:c5:8d:
b7:13:49:8b:62:fe:63:74:18:69:43:b8:0a:93:df:
7f:1c:99:eb:b6:98:2d:65:ef:f9:bc:09:b5:c9:f1:
29:6d:fd:22:7a:0a:86:96:08:a2:a9:b1:a9:19:74:
4b:5f:09:42:08:32:41:31:12:7e:15:49:50:19:db:
02:58:b2:f9:38:16:4f:60:21:05:be:f3:da:22:49:
62:ec:c0:e7:bc:1f:ca:2c:7b:6c:9c:1f:cf:1e:b1:
8e:77:5d:76:5a:4f:e2:89:13:d6:d8:77:1c:98:9c:
cf:52:af:9a:b4:38:d7:83:39:fa:df:c9:e5:60:8b:
6b:73:6d:93:aa:fa:c9:1b:67:48:16:ac:4c:56:0a:
33:73:ce:6f:13:29:1c:1d:4b:7a:06:3f:ed:ad:43:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:25:14:F3:9B:D4:A9:44:AA:A6:49:97:57:F8:23:7B:C0:F8:10
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:d6:7a:ac:45:ad:00:bc:be:8f:6e:44:87:ef:28:7a:00:
aa:5b:14:d0:d6:c9:f6:54:f5:a5:15:d6:15:d4:c3:ff:71:fd:
14:34:a2:98:6f:ee:fc:b5:60:05:c2:21:94:4d:a5:e6:a1:89:
00:06:b2:ae:21:8e:14:e9:a9:2b:65:1e:3c:00:57:70:f0:90:
fd:54:99:9e:03:86:b4:44:93:82:b0:fe:e4:b5:e7:7d:28:67:
3b:e7:4b:7d:23:d5:af:df:c9:30:68:77:fe:aa:e1:ee:f3:b6:
ca:0e:e2:0a:93:fe:5d:2b:aa:44:67:5a:e2:32:2a:ef:a3:f3:
56:bb:9e:92:54:ba:98:f7:5d:fe:28:82:0a:83:db:b9:38:19:
54:6c:db:b6:55:5b:70:df:eb:93:79:2f:f0:33:44:fd:03:c0:
da:8d:3b:91:12:24:e2:17:f8:fc:7d:ca:ca:94:e1:e6:b1:85:
75:00:a7:c5:d2:fc:04:39:19:88:20:27:44:13:ac:87:64:88:
98:4f:87:b5:53:48:31:a7:1b:6a:9f:8e:e3:ab:43:09:0c:63:
c3:e0:a4:1c:0a:9c:0f:60:a8:4a:f9:ff:66:58:c2:22:88:9b:
0a:88:0a:15:32:2a:7f:f3:b6:77:ad:d8:74:77:ee:5f:0f:f3:
5a:a1:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:48:43 2026 by rpki-client