Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
File: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft (raw, json)
Hash identifier: qICws4bpumWNTI0s/ymBOo/AjGx85zR+5XgF0XfDhJo=
Subject key identifier: AD:4B:59:E1:60:D1:9A:F9:23:D1:42:0C:0A:89:DA:69:84:8C:67:36
Authority key identifier: F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
Certificate issuer: /CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Certificate serial: 01A0D19212E93DEE87685D552783FA82A269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
Manifest number: 9A
Signing time: Thu 24 Sep 2026 04:00:06 +0000
Manifest this update: Thu 24 Sep 2026 04:00:06 +0000
Manifest next update: Fri 25 Sep 2026 04:00:06 +0000
Files and hashes: 1: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl (hash: 4WwWejg4z4B024creJjxTk9+a7c7wAl0N+YiaqjKmfA=)
2: BZv-LoBRIRBTOEYKtA6kf7CvWnM.asa (hash: 6djo3sORenudDTgc+w+x6P5vO7vutX0bQrqSk11uuhw=)
3: QpyzK4A53JlVZWVV1v2jN1WPoAY.roa (hash: 16PfeuBy1FMSFoHFqQhe2PdhxV2dzUiD7Xy/ykQCYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:12:e9:3d:ee:87:68:5d:55:27:83:fa:82:a2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Validity
Not Before: Sep 24 04:00:06 2026 GMT
Not After : Sep 25 04:00:06 2026 GMT
Subject: CN=ad4b59e160d19af923d1420c0a89da69848c6736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:03:9c:ed:89:57:64:3e:52:53:08:64:78:
6e:95:35:db:f6:71:e6:43:3c:3b:2a:f9:8b:25:85:
b7:13:d4:ea:3c:e4:d5:92:48:86:bd:38:94:ff:8c:
0d:78:dd:80:38:e3:99:b2:eb:5c:f8:cc:86:ed:ec:
54:de:46:e1:fa:7c:ff:bc:1d:12:2e:1a:d1:bb:4a:
2f:29:26:6f:09:65:76:5b:62:f8:ce:d3:6b:a8:24:
19:82:4a:bc:71:92:89:2c:40:ba:81:30:48:da:84:
40:8b:70:9b:63:af:3c:c8:82:84:97:6d:fd:50:e2:
65:1c:de:c1:6c:13:a5:80:3d:3c:0f:64:19:f3:33:
a2:46:cd:ff:01:54:50:eb:bb:a7:ff:93:bd:db:0b:
db:48:6b:9c:01:e0:cf:f0:52:e9:60:ed:09:ee:26:
0e:c0:92:ea:e3:a6:86:1c:fa:e6:69:dd:ce:44:4c:
c5:97:1e:7d:0c:3a:72:90:d5:5a:48:db:c3:a2:82:
a7:db:d9:76:19:6d:f2:67:8d:4e:d8:81:01:a9:e3:
15:2c:5f:91:e4:0c:09:9c:7d:0d:bd:dd:c5:b7:b2:
b7:a0:40:ee:60:af:af:b8:a5:21:37:28:b8:72:2f:
20:6a:5a:4f:d3:e3:2a:6f:81:b1:55:3d:4b:72:40:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4B:59:E1:60:D1:9A:F9:23:D1:42:0C:0A:89:DA:69:84:8C:67:36
X509v3 Authority Key Identifier:
keyid:F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e0:4e:00:09:72:80:33:a2:73:b7:13:56:55:b1:c9:ef:f9:
2c:0e:c1:b2:e6:ed:2b:1d:91:f0:a0:a9:c0:2b:d9:30:78:bb:
94:2f:fd:cf:e0:e9:b9:fe:85:4d:76:8c:f7:fe:59:f6:22:8d:
ef:14:ef:a1:fc:d0:b2:5e:90:a5:f4:6f:5a:50:1c:d1:37:30:
46:f2:23:16:58:bb:1a:e6:9e:d2:41:f6:4c:7b:56:3c:52:19:
57:2d:87:cd:4e:ee:10:c9:c1:d4:1a:ce:1a:84:16:58:1b:89:
15:85:d7:f9:04:a1:90:b9:08:c9:ff:cc:d7:c5:05:4a:0d:02:
84:02:5c:ea:14:8b:7b:63:9a:42:95:78:93:85:3e:7a:83:af:
eb:58:b7:ee:9e:3a:92:ee:7c:ac:06:18:5e:07:b7:3e:b7:37:
3d:0a:24:3a:73:84:9f:3e:b1:af:64:e8:27:da:eb:b5:33:46:
77:25:67:02:fb:72:bd:bc:35:6f:31:d4:ea:19:6a:94:8c:35:
d5:9f:9d:92:27:fe:f1:5c:c7:8a:db:4b:1f:07:48:c2:8d:2c:
05:fd:24:44:93:c0:31:68:03:7b:56:73:98:f5:86:3c:92:7c:
2a:c3:06:ae:70:c3:ce:35:c7:2b:94:0f:d1:d1:87:00:81:fb:
10:cc:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:27:27 2026 by rpki-client