
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: X8Ob07qO9ypUr0RyaXZ8BdZN1GBZXsi7cJv274ALs9Q=
Subject key identifier: 6A:94:28:D0:25:FD:A6:0E:62:02:1D:86:20:90:D8:F6:9E:2A:EC:59
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 01A08F0E1CC92C5170FB79FFECE12677ECB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 19DB
Signing time: Fri 11 Sep 2026 06:01:01 +0000
Manifest this update: Fri 11 Sep 2026 06:01:01 +0000
Manifest next update: Sat 12 Sep 2026 06:01:01 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: q0afQ2OpAnO9BW0GnwhWOIhdhNfA9nRrF+A4fthYZok=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:1c:c9:2c:51:70:fb:79:ff:ec:e1:26:77:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Sep 11 06:01:01 2026 GMT
Not After : Sep 12 06:01:01 2026 GMT
Subject: CN=6a9428d025fda60e62021d862090d8f69e2aec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:0a:09:c6:99:ae:44:a3:e9:f5:7d:64:e3:
54:a2:a3:72:40:de:9e:f9:4b:16:13:3c:6c:3b:ea:
6d:6e:8b:bc:9e:ed:5f:21:f6:82:24:57:d8:cb:43:
3c:cd:8e:4a:ca:5e:05:a8:ff:39:73:f1:96:33:96:
7f:92:34:de:e9:d3:05:fc:0b:df:9c:63:d2:6a:77:
7e:8f:51:09:7f:b9:1d:ca:85:6b:93:b3:29:54:2b:
dd:e2:12:53:67:58:e5:98:9f:1f:4f:af:6f:d3:a5:
81:47:68:6e:cb:6c:5e:ff:9e:48:7f:72:5c:32:bf:
bd:b1:c5:49:c5:26:ec:7f:04:7c:8c:b5:69:c3:41:
b3:fa:97:af:e7:65:7f:10:50:21:c9:df:20:b7:a1:
22:da:f5:39:4f:bf:09:18:74:ae:cf:33:6f:3f:65:
ec:1e:fe:c6:09:95:a5:8d:11:1a:93:fc:6e:6c:4e:
2e:2e:b5:e0:22:76:45:ef:a0:d5:e2:fe:3f:a7:d1:
f8:ef:9b:75:7b:93:ab:1a:a5:74:ff:5e:5c:8e:8c:
1a:dc:3c:95:d5:28:49:f2:65:44:2e:f0:0a:da:e6:
6b:8d:99:6f:98:48:99:16:01:11:b8:8b:0a:d1:e1:
ee:2a:d2:d6:af:c9:6b:3a:6d:4d:cd:5e:28:95:8d:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:28:D0:25:FD:A6:0E:62:02:1D:86:20:90:D8:F6:9E:2A:EC:59
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:df:f9:f0:1e:96:90:0d:fa:41:c5:8a:7e:af:57:ba:b4:
24:97:e7:7f:a9:5d:fd:21:07:97:7a:fa:3c:ba:f9:59:2e:36:
d8:2b:61:48:fb:f9:d1:d9:b1:f5:80:5f:f1:e6:70:e4:c6:60:
01:7c:3f:a0:e7:a0:1b:22:ac:86:1b:7e:7b:0d:cd:48:81:3c:
22:59:bd:ec:46:60:b8:94:ba:4c:ec:fa:d7:05:d6:ab:3f:8d:
1c:c9:fb:cd:87:fc:03:31:a6:21:2f:b8:a2:50:06:a0:65:4a:
22:87:0c:92:64:11:ab:82:ba:84:64:18:ad:c8:7b:fb:5f:c4:
0e:a2:f5:48:17:c4:52:de:4f:99:78:85:7d:50:d2:88:30:af:
f8:6d:69:fe:a9:21:a5:f9:f1:ff:1e:2b:a4:2a:8a:95:eb:f6:
bd:b7:bd:c8:da:1d:7c:9c:a5:9f:69:11:61:6e:32:6b:3b:34:
18:dc:e1:d5:b3:2e:66:45:a0:90:ab:7a:c8:a5:d3:de:a9:a9:
7a:f2:72:d1:ef:7f:39:f9:b7:aa:5e:2f:19:1f:33:4b:2c:42:
8a:d8:28:4e:dd:4f:8a:2b:bb:8c:e3:4a:c5:7b:f0:15:be:0b:
bf:f7:fa:0f:9f:8d:df:1a:9b:08:e2:f7:01:7d:b9:59:a3:f2:
0b:f0:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:40:10 2026 by rpki-client