Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: 04XpBukkefeo1SgYXRJxglh+o6gc8bSwrKCb5R61jl8=
Subject key identifier: 75:07:7F:04:0A:49:BF:FE:08:A6:FD:08:DA:B0:44:01:68:60:B1:7C
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 01A08CE8CD52068D562BF8A44E36CD28854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 084A
Signing time: Thu 10 Sep 2026 20:01:02 +0000
Manifest this update: Thu 10 Sep 2026 20:01:02 +0000
Manifest next update: Fri 11 Sep 2026 20:01:02 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: q7XxueZwKUlHVSPtmv2zXDZNlZTKhoDr3ZuOMSvTbS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:cd:52:06:8d:56:2b:f8:a4:4e:36:cd:28:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Sep 10 20:01:02 2026 GMT
Not After : Sep 11 20:01:02 2026 GMT
Subject: CN=75077f040a49bffe08a6fd08dab044016860b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:e7:29:03:59:4b:fa:e3:da:87:8d:47:0f:
c8:74:f4:41:2a:55:b2:b0:fe:e7:40:d0:59:fd:4c:
1d:dd:a6:45:9f:c9:e5:2e:88:76:ec:f6:03:2e:1b:
37:77:88:18:a7:5c:da:df:41:44:c9:5a:ca:6e:c6:
8a:51:56:43:dc:4b:7c:8c:3a:55:09:b6:0a:b2:a5:
fc:c3:53:57:b3:8f:f0:64:e8:bf:e2:3f:36:d4:42:
24:16:f4:d3:5c:23:19:84:25:2c:fd:c0:3f:ab:00:
7b:ee:10:d1:6b:5e:f3:7f:d0:3b:ce:0e:b0:8d:61:
cf:d7:85:0c:02:f9:2b:3b:eb:6d:02:db:90:74:6b:
34:f3:fb:e0:74:3d:2d:77:1d:e3:27:65:29:1d:81:
a0:20:1b:b8:4a:b5:ab:70:79:17:6e:20:45:64:c7:
ce:4f:05:33:88:46:8e:06:2c:b4:0c:ac:f7:c1:aa:
70:50:7f:17:df:4c:bb:1c:c0:4b:6c:e0:7f:08:8b:
b9:f4:00:6a:b9:96:3c:ca:ef:98:3d:1a:7d:a6:53:
9f:7c:ef:7a:3f:91:b6:c4:9d:ac:52:03:7d:33:c0:
62:0d:89:1f:54:93:66:8c:68:44:61:cc:3f:7b:04:
60:da:1c:e3:17:3f:6e:42:7c:f6:ba:6d:74:d1:5b:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:7F:04:0A:49:BF:FE:08:A6:FD:08:DA:B0:44:01:68:60:B1:7C
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:7f:e8:22:79:d1:6b:21:28:e4:00:c9:4e:91:9a:e9:4e:
8f:83:0f:93:94:30:73:bf:94:a2:6d:d9:b1:e8:b8:39:d8:89:
93:8f:5d:1f:4c:82:c2:a7:e5:ce:59:f9:dd:7c:94:47:ce:8c:
13:1d:aa:8f:8d:9e:4b:c3:85:57:fe:7a:89:39:af:1c:ea:0f:
81:6a:b3:d5:fc:ff:9e:e0:8b:3c:ef:ba:ff:b8:db:c8:55:00:
2d:12:8f:8a:5f:d4:eb:6f:86:04:a0:66:fb:53:04:95:8c:09:
af:50:62:9a:f2:8c:5d:95:6e:f2:60:14:c4:e1:37:a9:69:d3:
d0:94:39:dc:0a:fb:b2:c3:62:74:1b:a0:c8:b1:aa:3f:74:ef:
5d:43:a1:4c:83:a2:3f:ab:91:6d:72:c3:7f:f0:3f:3a:e3:69:
2f:12:1a:89:de:a1:64:90:9a:e5:2a:64:a8:f8:b3:0e:5e:73:
11:45:9e:50:35:28:96:80:21:ce:34:93:d5:0c:99:50:f9:ff:
3b:c1:cd:19:5f:54:5e:9b:07:cc:52:38:03:a6:18:bf:3f:03:
32:e1:46:6b:95:93:c1:e8:be:e1:b6:2e:99:03:e4:ae:ca:17:
af:8d:f1:97:c3:54:e9:39:f5:11:ee:f6:0c:78:84:61:5f:06:
0c:2d:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:39 2026 by rpki-client