Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: M2OZhaR8p4EGwuxveowSTgu01MgIiV9KcIFk+/yi6/U=
Subject key identifier: B8:3E:C9:A7:E7:69:5E:00:7D:DC:36:32:DA:2B:7A:F6:27:3F:A5:7A
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 01A1401602A7B6FA7463E4F4D90FE1617F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 179E
Signing time: Thu 15 Oct 2026 15:02:26 +0000
Manifest this update: Thu 15 Oct 2026 15:02:26 +0000
Manifest next update: Fri 16 Oct 2026 15:02:26 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: h8qfBrax2EbRRn4BOqOGi3iq4y7k5vwMzJrQr2oxYWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:16:02:a7:b6:fa:74:63:e4:f4:d9:0f:e1:61:7f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Oct 15 15:02:26 2026 GMT
Not After : Oct 16 15:02:26 2026 GMT
Subject: CN=b83ec9a7e7695e007ddc3632da2b7af6273fa57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:be:ce:70:ed:75:db:c8:82:6e:78:9b:67:
da:3b:ce:69:95:ac:66:42:05:d7:d5:d9:06:62:1d:
ae:95:b3:b3:6e:58:30:31:00:a6:a8:ec:7a:74:e8:
34:21:23:e6:32:12:f0:6c:5a:ac:1c:b4:69:59:b3:
8c:0e:15:42:66:50:eb:b7:84:78:5c:30:1b:84:46:
ca:10:bb:9c:a1:34:22:dc:db:94:b5:11:07:f4:81:
7a:44:c8:16:84:4f:36:07:90:ea:b6:a9:1d:ee:6d:
e9:79:5f:7f:9f:28:30:c5:83:e4:46:02:02:2a:00:
33:44:a5:36:70:20:8a:14:bb:b2:76:cd:95:5c:b3:
aa:08:da:40:e0:6e:42:d2:7e:5f:af:f3:c8:83:2d:
c5:a4:98:14:08:00:f5:53:5f:5b:f2:be:b4:55:4a:
05:1f:1c:ee:dc:bd:5b:3c:ba:ed:57:4e:9c:f2:fd:
b5:fa:3c:01:df:ee:c8:1b:5c:57:a9:58:f0:bd:a5:
fd:df:0d:eb:88:ad:07:b6:3f:fa:39:99:36:d5:be:
0c:02:11:89:c6:b7:19:fc:da:e4:a2:06:84:b1:19:
05:8f:75:b7:60:fe:f8:13:bf:5a:de:bd:84:c7:81:
78:9a:36:8d:48:8e:2a:35:c0:13:2b:09:89:e8:b1:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:C9:A7:E7:69:5E:00:7D:DC:36:32:DA:2B:7A:F6:27:3F:A5:7A
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:ec:d5:5a:d2:74:be:0f:c2:1e:af:e8:92:b1:33:cc:0e:
42:cd:21:77:ef:59:dd:41:b3:70:ad:c2:89:92:66:ce:79:87:
12:ac:eb:57:1c:f0:8f:d6:5e:9f:62:a0:1b:94:0e:48:4b:8d:
70:c1:33:2e:2e:15:da:9c:39:3e:32:cc:56:0f:d1:66:3f:20:
ea:43:48:2a:f4:64:c0:c8:4f:f3:10:fc:ec:cf:77:d7:80:16:
18:ff:4b:16:f8:25:f8:61:ef:0a:b7:4f:b2:03:cf:12:ea:c1:
a4:86:d3:af:f0:8d:15:ec:1a:9a:2f:1b:12:93:ab:2f:3e:58:
89:98:3c:87:8e:9b:0a:d6:52:67:be:4a:42:ae:3e:1f:3f:80:
44:f6:e9:ed:16:84:37:98:b4:b8:3d:4e:36:f2:35:dc:8b:ed:
75:5d:6c:27:af:ce:c4:73:02:76:e2:08:ec:0c:30:da:44:d9:
16:86:7d:cb:bd:dc:ce:a0:09:a8:8a:cc:a7:1d:5b:36:ea:3b:
6d:f7:a4:01:9c:2a:4d:7f:75:04:6a:29:dc:b7:04:54:da:3e:
d3:dd:b9:1c:5e:d3:6f:b7:26:87:d0:7d:0d:5a:81:f4:59:cc:
fc:85:e6:ed:85:a4:89:7b:fc:70:64:4a:dd:ec:59:e0:05:3e:
52:61:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:03 2026 by rpki-client