Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: 3D+jrOw1mL7O5RC9LfWYq2jOa4XHioEEiN4LZy6bS5Y=
Subject key identifier: 6E:A5:B6:30:44:31:3F:AE:75:A8:AE:C9:F0:A0:BF:C6:E9:6D:AB:EE
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 01A08AC3AAB45FC321EA6B00D47BCE51DC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 04F2
Signing time: Thu 10 Sep 2026 10:01:13 +0000
Manifest this update: Thu 10 Sep 2026 10:01:13 +0000
Manifest next update: Fri 11 Sep 2026 10:01:13 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: 44k/awQqr9OGPjFk7cJ64S2tKig9tXQjAwx7IO68OB4=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:aa:b4:5f:c3:21:ea:6b:00:d4:7b:ce:51:dc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Sep 10 10:01:13 2026 GMT
Not After : Sep 11 10:01:13 2026 GMT
Subject: CN=6ea5b63044313fae75a8aec9f0a0bfc6e96dabee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:5e:21:ee:2f:d4:25:42:b0:16:1b:ab:87:
0e:4e:1c:9e:a5:da:61:89:d4:58:1b:17:8a:12:39:
d1:73:c5:7d:5d:b4:1f:76:be:4b:c8:ba:f3:56:5d:
f4:c3:dd:b5:a9:44:1b:45:8f:d2:d4:77:16:bc:05:
24:8e:aa:8f:13:25:98:ce:d0:52:46:2a:d5:df:18:
73:af:c7:05:bd:f3:08:24:bb:48:5b:9a:f1:71:8d:
73:f7:1c:c4:49:bf:7d:45:05:66:d9:06:79:34:d9:
f8:ec:49:aa:2a:32:a2:d9:53:51:0c:5d:2d:d6:d7:
38:d6:8d:aa:21:76:de:a2:24:6a:45:21:19:c7:0d:
a8:6a:16:0e:eb:8d:01:55:b0:a8:c0:c4:ab:1c:c5:
1a:d4:e4:67:a4:fe:57:a5:67:a2:35:28:e0:c0:01:
58:82:12:21:22:58:17:cc:29:b1:2c:62:fd:ea:3d:
c3:4a:01:c6:e4:3f:f7:4a:22:47:a3:c3:c0:5e:c1:
5b:d6:3e:ee:6f:27:43:2e:a8:b8:d8:5f:e6:f2:50:
77:83:a2:5b:27:f4:e5:11:f7:ae:60:4a:72:58:06:
0f:b2:61:f8:38:a2:a8:8a:b5:83:51:63:df:40:d4:
ec:f5:f3:a7:36:dd:2e:06:f1:ab:ab:55:9c:7a:d7:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A5:B6:30:44:31:3F:AE:75:A8:AE:C9:F0:A0:BF:C6:E9:6D:AB:EE
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:af:fc:cc:e9:81:85:6a:8d:5a:1f:9d:59:9d:d0:9e:28:6d:
2e:1d:8b:07:e3:ea:88:db:0f:0e:d5:f5:c5:d6:c6:34:3d:e0:
12:54:73:2d:3e:31:d9:aa:cd:85:81:7e:da:9a:f3:cd:06:c0:
6a:f4:ad:43:c8:41:eb:cd:c9:3f:ed:54:e1:82:3b:23:09:93:
43:f1:87:c1:d2:9d:67:a7:2a:1c:7a:3e:32:f0:a7:cd:d3:70:
0e:7a:b8:8f:ca:1a:41:dc:38:23:77:1b:b4:d6:fe:48:8a:7c:
88:8d:3c:d0:20:3c:a1:f7:0e:2b:55:91:dd:57:7b:94:61:e2:
1e:d4:89:49:5c:0f:38:d6:85:cb:a4:45:39:1a:ce:c6:58:ea:
a6:2e:fd:b1:0b:7c:02:4a:ba:9e:84:b7:d9:15:9c:be:02:65:
3c:77:d3:cd:5b:7b:01:e9:0c:80:b0:05:3d:ea:06:7b:00:9f:
11:7e:e5:36:e9:71:ed:dd:a8:07:bf:ca:b0:eb:c9:9b:cb:56:
05:52:2d:a6:1d:f5:58:fd:9b:db:51:30:70:a6:89:0a:49:ee:
a4:cb:1f:d6:c7:e1:c4:b0:45:1d:a2:b3:42:32:88:27:e3:d5:
87:47:6f:d6:b0:cc:ba:d7:3b:44:0a:ea:5c:20:d8:c3:5d:c8:
32:49:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:18 2026 by rpki-client