Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: djqDnxcfeqL3WuzMnxrrZvxiLIPOk0TAbUwPniQSLi8=
Subject key identifier: 06:28:A7:E1:AB:4A:D3:6A:DF:21:BF:60:F6:BF:16:D5:3F:C7:01:5B
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 01A0CE91C9DF0D08766337B1109D36C22984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 1A7A
Signing time: Wed 23 Sep 2026 14:00:55 +0000
Manifest this update: Wed 23 Sep 2026 14:00:55 +0000
Manifest next update: Thu 24 Sep 2026 14:00:55 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: yQ1HPkKt+cr618TtR/D0hm59l+MRkmdXYJzI5xsCcOs=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:c9:df:0d:08:76:63:37:b1:10:9d:36:c2:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Sep 23 14:00:55 2026 GMT
Not After : Sep 24 14:00:55 2026 GMT
Subject: CN=0628a7e1ab4ad36adf21bf60f6bf16d53fc7015b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:c7:24:a9:27:ce:e0:8d:d4:7d:c8:b8:44:
3a:b3:e0:32:68:28:47:cd:30:8d:be:94:2b:0a:a5:
8b:3e:b2:e0:58:d3:3a:91:92:94:df:81:ab:63:80:
e4:d6:14:82:ec:13:bf:8f:f1:ba:11:96:2a:77:a6:
1c:08:fa:23:c3:00:77:6e:95:f8:39:2b:d9:8c:90:
70:a9:2d:ef:cd:93:d7:ad:67:21:4c:7a:e7:e6:1b:
f0:93:ce:38:e5:0e:69:a2:e4:13:f5:b9:06:ad:53:
d2:59:84:c3:ae:f8:6b:e1:51:ef:51:6b:0a:8c:1c:
07:1f:a6:06:f5:76:00:13:1a:81:64:77:0c:eb:91:
4e:39:72:c5:ff:a3:cb:40:67:ac:7a:de:a1:ca:69:
42:ba:e2:67:cf:26:c2:25:95:3d:be:5e:f0:d6:4f:
e7:52:b4:3c:c4:67:bc:40:21:10:ec:43:77:45:05:
ee:33:06:5d:6f:16:c7:39:88:12:1e:44:91:57:63:
ff:e7:c8:e8:b2:17:83:de:e8:51:d4:53:50:96:0d:
27:44:a0:5f:cf:53:8a:de:be:a9:94:1e:d1:58:38:
f1:8c:03:e6:f4:fa:5f:15:b5:9d:81:1c:00:56:3f:
51:8b:92:97:97:50:ef:b6:7b:ea:58:19:44:55:14:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:A7:E1:AB:4A:D3:6A:DF:21:BF:60:F6:BF:16:D5:3F:C7:01:5B
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:14:33:80:8e:1d:58:6b:8e:27:68:92:1d:d4:82:8c:c2:
3f:a1:80:a4:cb:20:b8:f2:ae:19:7b:e7:82:ab:42:38:c0:de:
b2:78:b3:be:db:02:bc:fe:1c:95:da:d4:55:98:1a:b1:6a:cc:
b7:12:5d:cf:79:ac:76:c4:53:ba:04:89:bb:19:8f:32:ff:6b:
ed:39:e1:a7:5e:e1:c1:dc:26:b1:55:43:8e:52:bb:24:e5:60:
eb:f1:74:6e:93:92:e1:e0:9b:7e:34:28:9e:79:50:17:34:7e:
9f:f5:8c:47:e2:f2:5a:5a:a5:34:15:9e:67:ae:71:0f:0e:0a:
0b:06:3f:0f:49:3f:32:47:ad:a1:35:2d:6b:d7:a7:11:40:45:
16:2d:03:93:af:ea:42:a7:e5:3e:a2:24:f0:70:41:c7:77:8b:
ee:57:39:1b:18:21:2d:e5:4b:cf:06:4f:03:d0:be:d8:00:4e:
3e:dc:63:e6:27:15:6e:ef:b4:e3:d8:be:d0:09:f0:76:4a:87:
04:36:6a:1b:b7:5a:f7:99:90:67:24:d2:2c:0a:d0:f9:02:8f:
a6:42:24:9b:6c:c3:c2:67:e7:08:eb:f6:5e:bc:33:66:3d:9e:
5d:e6:2f:99:3f:8a:8f:17:38:1a:39:ec:6d:70:37:b3:1f:71:
4e:55:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:47 2026 by rpki-client