Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: xZBdpMBEYNOeNyOwSAwH2UUleDUo+Ckvy02ZQhKA1l4=
Subject key identifier: 9B:8F:C3:BE:F1:14:87:7F:68:34:65:83:B9:AF:36:5E:CC:63:82:48
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 01A0D1C9798605342BCFF17911D5DA15CDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0E39
Signing time: Thu 24 Sep 2026 05:00:36 +0000
Manifest this update: Thu 24 Sep 2026 05:00:36 +0000
Manifest next update: Fri 25 Sep 2026 05:00:36 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: xnTGQVY2cIDCWqrE4P2yQnIANAwv+p+Q7SjVnYQSWOc=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:79:86:05:34:2b:cf:f1:79:11:d5:da:15:cd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Sep 24 05:00:36 2026 GMT
Not After : Sep 25 05:00:36 2026 GMT
Subject: CN=9b8fc3bef114877f68346583b9af365ecc638248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:7d:34:69:75:ec:d5:2f:15:42:43:87:62:
49:76:1a:ad:c9:5b:be:e9:b4:f6:1c:9a:df:d5:a0:
f4:ad:f1:d9:65:05:64:5e:c7:07:b2:31:35:0f:73:
94:99:fd:69:8c:c4:76:42:f8:81:df:e7:29:04:b6:
21:3f:d8:dc:89:c5:d8:67:a9:ce:a2:54:96:b8:74:
ad:ef:66:a9:da:00:a0:6e:8f:c1:34:4f:32:34:a0:
86:24:61:a9:e3:96:59:f5:dc:04:76:01:34:8c:3f:
6b:c0:32:e0:0c:91:21:42:37:21:11:9e:98:86:b6:
47:53:e1:74:c9:03:3c:72:67:85:48:cb:b0:82:35:
84:32:24:8a:b2:3a:72:58:c1:8a:91:26:04:2e:7d:
13:dc:33:15:eb:da:68:0b:3e:5b:6d:54:7b:e3:85:
90:e7:40:86:70:62:12:ef:70:03:42:fd:83:b0:90:
20:e6:b3:6e:76:8e:37:0c:f2:38:51:6c:70:7e:ff:
7f:1d:09:c5:1a:02:87:4a:35:e8:b3:4e:3e:42:f9:
d2:8b:52:45:e1:97:b6:f1:62:72:76:6d:6a:de:19:
70:cd:dc:c3:23:65:0e:f5:ea:bd:eb:38:b9:3c:23:
19:c0:eb:82:e0:ba:4f:14:47:e5:0a:2b:43:36:fb:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:C3:BE:F1:14:87:7F:68:34:65:83:B9:AF:36:5E:CC:63:82:48
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f3:97:44:11:43:da:0b:ee:ef:47:d1:a2:b9:e3:58:ba:b8:
60:c1:c7:74:c2:dc:e8:78:40:b9:c3:25:90:22:b4:ef:02:6e:
49:57:29:38:4a:0b:95:d3:d0:a5:c7:1e:2e:3b:c0:37:9d:be:
3e:83:88:33:67:d4:3c:3e:f4:63:86:26:26:e0:4e:92:f6:45:
f7:49:c1:8f:ec:15:d6:43:9e:0b:df:59:e3:d9:23:7a:aa:89:
2f:99:32:ea:2c:bb:c0:40:87:a2:7b:a1:94:bb:4b:d2:b9:c4:
b5:60:c8:4f:31:11:52:dc:00:18:5a:59:4f:a5:57:14:e7:f7:
56:29:f2:24:13:c5:b8:a2:dd:d2:77:b5:72:09:17:0a:ba:28:
b5:25:e6:92:38:19:11:3f:3e:0b:80:d9:61:03:2a:cc:ef:17:
4d:17:42:9b:bf:71:44:cc:c1:ca:5c:43:c0:fd:c6:0b:29:49:
2b:de:fb:47:21:7a:3b:0b:01:8a:54:92:35:dc:72:27:a9:d7:
bb:00:18:2b:36:43:95:4e:8d:49:1d:30:27:6b:2e:08:8c:10:
f5:8f:03:93:8d:2d:a6:a8:74:31:53:01:82:69:ce:a6:03:37:
5a:c1:87:64:0d:61:5b:90:39:27:42:c2:fa:d7:7a:f0:8c:a1:
b9:83:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:03:50 2026 by rpki-client