Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier: Q6GKV144cJGDstzJUiCHagHeajNdkEeHc6mh4Ltntj4=
Subject key identifier: 71:DF:02:C5:BB:B6:E4:2B:10:30:80:9E:67:E2:40:C8:0B:8C:10:E3
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial: 01A0D56FC2DD6BF350F3C5BBAE2123C9DCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number: 1A01
Signing time: Thu 24 Sep 2026 22:01:06 +0000
Manifest this update: Thu 24 Sep 2026 22:01:06 +0000
Manifest next update: Fri 25 Sep 2026 22:01:06 +0000
Files and hashes: 1: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (hash: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8=)
2: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: 87B3+LuPQ0tQHCwRbEAzCcGqE+VwSKpBVIGej3nuZPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:c2:dd:6b:f3:50:f3:c5:bb:ae:21:23:c9:dc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Validity
Not Before: Sep 24 22:01:06 2026 GMT
Not After : Sep 25 22:01:06 2026 GMT
Subject: CN=71df02c5bbb6e42b1030809e67e240c80b8c10e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:9c:d3:44:1b:ac:d3:aa:67:a7:2f:97:e6:
66:3f:11:4e:96:d6:94:92:0f:ad:ca:62:5c:ff:6b:
6c:f1:8b:87:fb:7d:30:be:37:fc:2f:7d:8b:11:d2:
56:7a:1f:fa:da:6f:09:14:a2:50:e3:fe:93:cd:93:
cf:ad:5f:74:c1:ba:d2:0f:55:6b:bf:61:ad:29:8e:
06:71:5d:16:ef:7e:e1:02:fb:77:e2:84:08:47:57:
f8:d5:ab:bf:d1:14:bf:95:90:14:57:05:e3:1b:9d:
0b:73:f8:e5:01:bc:b7:55:9d:59:16:06:72:4f:94:
74:50:87:b8:9c:f5:e0:76:94:0b:30:2e:93:c8:fc:
af:d7:53:f3:d0:f0:26:f8:7b:7b:43:09:85:a8:2b:
68:af:bd:54:d7:b7:e7:89:2f:12:c8:df:bc:d6:3b:
04:37:3a:ac:4f:14:36:b2:c2:f9:c6:a1:03:9b:90:
3c:d4:de:7d:df:14:c5:97:bc:3b:b9:e2:cd:63:40:
c0:ac:9f:1d:fb:39:93:11:04:c0:81:12:ae:ab:f2:
74:40:90:9c:9c:95:cf:a7:67:ee:9a:fc:89:f6:8b:
79:20:d7:56:2f:c7:58:f2:f4:b0:7c:64:85:30:3e:
2f:89:54:3f:7a:e4:92:67:2d:39:af:d5:f1:8f:0b:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:02:C5:BB:B6:E4:2B:10:30:80:9E:67:E2:40:C8:0B:8C:10:E3
X509v3 Authority Key Identifier:
keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:43:2f:90:56:d8:53:7c:3e:8a:f5:16:b4:69:df:44:dd:20:
1f:38:a6:0f:da:6b:b8:85:6f:dc:52:f5:44:d6:44:64:9d:b7:
c1:ba:a9:03:9e:65:45:41:0f:c3:a6:3d:b3:18:e8:51:a4:7f:
7c:cc:3a:17:35:ed:e4:22:0f:ec:5a:30:65:6e:8e:1b:5d:2c:
72:80:ab:79:da:13:1e:96:99:b9:4c:ce:40:af:a8:93:4d:a0:
2e:61:9a:b7:25:b6:86:93:87:d3:dd:f5:4c:1e:dc:90:53:24:
d8:d0:ca:c3:ad:c3:43:13:e4:eb:e7:95:4a:71:5a:3a:54:89:
d6:40:f1:b7:b8:91:90:bb:aa:0d:01:53:ea:2e:d3:07:12:02:
ed:12:a4:7a:99:50:6b:4e:e9:f3:e3:c3:c6:15:f3:32:b0:5a:
91:76:49:73:3f:75:76:c0:f4:36:c1:df:58:8f:68:f2:4d:72:
94:e5:89:22:86:1f:3e:09:e6:76:81:0f:0f:3e:c0:fd:f5:69:
7a:7c:2d:07:9e:f0:c4:a0:9c:6c:28:51:52:ad:65:04:2f:a1:
9f:f2:b6:5d:b2:30:b0:b8:a3:77:89:6a:8c:1d:9c:c7:02:ec:
da:05:b2:09:6f:d7:cf:54:7d:e6:e4:f4:4e:d1:7e:84:ca:6e:
0a:d2:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:56:56 2026 by rpki-client