Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: sLn1FS5RgvfLihGv1S0c6D8rSme2ABYnflu3BVMHVoM=
Subject key identifier: 4A:8A:44:F3:DF:32:78:A6:DF:60:88:A6:0B:3A:A2:25:CB:F1:FB:E9
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 01A0D3F06B5A4E7A9D9C4BFEF4450D922B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 08C9
Signing time: Thu 24 Sep 2026 15:02:23 +0000
Manifest this update: Thu 24 Sep 2026 15:02:23 +0000
Manifest next update: Fri 25 Sep 2026 15:02:23 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: O58EOYEkyhhnHVwZCnos/DGZu3ahlT8iSLwZmWWr+3I=)
2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:6b:5a:4e:7a:9d:9c:4b:fe:f4:45:0d:92:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Sep 24 15:02:23 2026 GMT
Not After : Sep 25 15:02:23 2026 GMT
Subject: CN=4a8a44f3df3278a6df6088a60b3aa225cbf1fbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:35:9d:ed:10:f8:7d:12:8c:40:5d:cc:dd:
af:45:c7:02:2b:f5:44:e0:5e:f8:70:11:b4:03:f4:
5b:e4:80:ce:32:04:55:2d:61:7d:b5:16:c6:38:02:
8b:57:4a:58:85:22:80:f9:c0:91:7f:af:35:b5:af:
5b:d8:ce:a5:e6:35:86:f0:ab:25:b7:2c:e5:4e:7f:
65:25:aa:ec:69:e6:1f:cf:0b:d1:bc:cc:09:6b:fe:
52:1e:d0:b8:97:f0:50:9f:77:70:42:b5:6f:4f:06:
f7:c6:42:72:43:61:af:0a:f2:6c:5b:57:0a:60:5e:
0e:c1:07:60:aa:42:8c:57:af:e8:d0:b3:1b:72:3f:
0e:30:09:d8:50:5f:73:70:d7:ad:2e:92:53:fa:84:
b2:3d:7a:d2:4a:7e:15:ff:ac:aa:0f:fa:f8:d7:8e:
1d:ab:66:09:87:17:4e:bf:3c:61:18:68:44:61:04:
b1:a2:bf:1c:29:87:41:95:31:bd:b7:33:97:8b:53:
0f:4f:6a:2e:8d:cd:51:24:c0:cb:54:f7:0f:e1:a3:
e2:49:9a:ce:2c:f1:9f:74:32:d2:4a:6c:ec:f9:71:
f6:5c:ce:1f:36:aa:2f:99:db:9c:b6:a4:8c:67:fb:
2c:c7:ca:9c:7d:33:3c:ae:45:24:71:f1:e0:93:a6:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:44:F3:DF:32:78:A6:DF:60:88:A6:0B:3A:A2:25:CB:F1:FB:E9
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8f:ca:32:06:22:48:0c:34:a4:08:69:12:5a:c4:5b:82:7b:
41:ac:7b:b3:37:f1:00:ff:68:d2:94:8f:72:3f:52:40:a7:4b:
d1:cc:3b:76:e8:d8:42:43:b5:f4:78:7a:69:bb:87:f4:6b:50:
c9:dd:e5:d6:99:63:3d:10:26:b7:de:0c:e1:b3:a9:54:21:53:
58:14:c1:3e:1b:25:c3:ec:a7:a3:7f:bb:75:4a:10:9c:2a:a7:
49:5a:fb:ac:45:f3:b1:10:62:81:60:9f:9e:81:ff:11:d4:60:
5a:d4:03:a7:45:f2:0e:7e:bb:5b:a5:d7:f8:c3:ae:c6:df:1a:
49:ca:81:52:48:9c:23:ef:ee:6e:d9:09:e9:ef:02:f3:a7:89:
88:98:07:ee:94:d6:4d:8f:28:b2:9b:89:c0:16:a6:f6:4e:4e:
d5:88:9d:b9:1a:82:16:65:ff:ac:e6:94:a0:ca:ce:af:f7:12:
c0:a5:77:cc:7c:9e:56:89:f7:e8:cb:60:7b:88:f9:a0:b9:8d:
7b:40:40:96:2a:7e:f5:51:c1:69:ff:4c:b5:d5:cd:82:41:5c:
d7:d0:dc:f6:e3:de:9f:31:fc:9e:aa:b3:10:0a:cf:84:92:52:
39:1a:25:b6:d0:49:49:c0:89:ba:e7:e5:51:17:0b:fa:c1:26:
23:b5:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:28 2026 by rpki-client