Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: Y0sVxD5ZpyND90++hNETzvDvpjdKbKql711yI7JzeXk=
Subject key identifier: 04:BB:31:52:DD:FA:3C:E7:65:F0:31:B7:72:89:A1:84:9F:87:D3:0E
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 01A180E287025EB529CFE79FA039685A6A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0B29
Signing time: Wed 28 Oct 2026 05:01:31 +0000
Manifest this update: Wed 28 Oct 2026 05:01:31 +0000
Manifest next update: Thu 29 Oct 2026 05:01:31 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: GLsp/fVWZ6a7fnMGXVzmU7GS5GTdmtL6nEd4XqJxbE8=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:87:02:5e:b5:29:cf:e7:9f:a0:39:68:5a:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Oct 28 05:01:31 2026 GMT
Not After : Oct 29 05:01:31 2026 GMT
Subject: CN=04bb3152ddfa3ce765f031b77289a1849f87d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:b6:a6:79:f9:73:d5:85:a8:0a:92:b5:54:
4d:14:ab:a4:bf:3e:c9:76:a9:88:39:86:47:3a:65:
40:cb:87:80:ea:0c:8b:57:77:ad:f5:e4:61:f0:36:
79:5e:6e:13:51:69:86:04:e0:12:ac:59:84:bd:ed:
2f:4a:bd:e4:0b:f3:2a:95:c8:ee:f0:28:ab:66:75:
25:09:f8:86:2e:fe:43:27:32:4e:3e:e7:39:2b:2e:
06:58:3d:0e:49:c9:0d:03:37:87:2f:4d:4c:60:13:
d1:6e:b1:72:d6:97:eb:e1:4e:f2:e9:50:8d:e2:38:
e4:f5:01:01:de:14:bc:32:3b:b6:ca:97:4c:30:df:
c6:d1:db:46:18:4b:d1:06:74:07:cc:6d:f0:ce:72:
8f:09:25:dc:70:82:21:c9:f5:86:cd:a6:81:d2:70:
68:e0:67:6e:86:c5:e3:09:4b:ac:b0:63:8b:b0:5d:
25:ee:af:d7:32:80:ad:f8:83:1a:48:97:e3:1f:5d:
61:75:64:5a:71:26:bc:26:29:15:f4:58:3e:22:11:
0d:3a:de:b4:14:31:e2:87:99:50:f8:ac:14:c1:db:
dd:ef:0b:22:30:66:05:b2:7e:74:28:29:8b:00:0c:
5a:40:98:de:18:87:ec:66:41:bd:19:8d:a9:8d:fe:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:31:52:DD:FA:3C:E7:65:F0:31:B7:72:89:A1:84:9F:87:D3:0E
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ca:b5:4a:ad:bb:2b:1b:e5:1e:5f:b6:43:eb:b3:fd:5f:ad:
47:63:0a:19:72:50:00:f3:72:de:2b:ef:1d:ec:64:8d:d6:23:
84:55:f4:f4:f7:17:4f:6e:f8:04:4f:98:04:14:cf:5c:8b:b2:
02:f8:dd:bb:57:ba:a2:d0:fb:81:eb:5c:d7:a3:8a:ce:81:41:
81:67:76:d0:4c:25:d4:30:2c:e9:f5:d5:23:9a:b2:c6:a5:ff:
78:83:60:70:77:f1:cf:40:4c:93:fe:c0:5b:fd:67:46:54:06:
ae:8c:c8:54:f0:d0:80:64:6f:8f:60:93:c1:de:e8:54:2b:47:
b9:5f:61:a2:42:5f:6e:01:e4:fb:c6:0d:f2:5b:21:49:19:2d:
ba:ca:5a:8f:f8:9d:8b:e4:c6:4c:b1:c8:26:a1:26:0d:10:6f:
2a:1f:d4:4a:7e:c7:76:fd:09:8e:e3:4a:84:59:e0:6f:d5:4c:
25:fe:81:d9:ca:1b:03:11:ac:9c:ff:79:77:b3:6a:47:f8:7e:
c4:ad:bd:c8:ca:9a:fa:50:39:ac:78:82:84:66:63:b4:0f:46:
c8:d6:8f:fa:e8:37:0d:6d:6f:96:8a:c4:5e:dc:e5:7d:ad:64:
ea:a2:bf:b1:e8:a7:69:e0:52:ec:7d:ef:b6:df:a4:82:aa:56:
c4:3d:b4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4ocCXrUpz+efoDloWmqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTg1OWI3MGVhNDUwZTEzYWRhODcyNGMwZWI2YmVlY2M4
ZGFhOTEwHhcNMjYxMDI4MDUwMTMxWhcNMjYxMDI5MDUwMTMxWjAzMTEwLwYDVQQD
EygwNGJiMzE1MmRkZmEzY2U3NjVmMDMxYjc3Mjg5YTE4NDlmODdkMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw+2pnn5c9WFqAqStVRNFKukvz7J
dqmIOYZHOmVAy4eA6gyLV3et9eRh8DZ5Xm4TUWmGBOASrFmEve0vSr3kC/Mqlcju
8CirZnUlCfiGLv5DJzJOPuc5Ky4GWD0OSckNAzeHL01MYBPRbrFy1pfr4U7y6VCN
4jjk9QEB3hS8Mju2ypdMMN/G0dtGGEvRBnQHzG3wznKPCSXccIIhyfWGzaaB0nBo
4GduhsXjCUussGOLsF0l7q/XMoCt+IMaSJfjH11hdWRacSa8JikV9Fg+IhENOt60
FDHih5lQ+KwUwdvd7wsiMGYFsn50KCmLAAxaQJjeGIfsZkG9GY2pjf5hfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAS7MVLd+jznZfAxt3KJoYSfh9MOMB8GA1UdIwQY
MBaAFPKYWbcOpFDhOtqHJMDra+7MjaqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUt
M2RmNDdiNjIwZDYwLzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xZjA0MGItYjMxMC00MzhiLWIxNWUtM2RmNDdiNjIwZDYw
LzEvOHBoWnR3NmtVT0U2Mm9ja3dPdHI3c3lOcXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMq1Sq27
KxvlHl+2Q+uz/V+tR2MKGXJQAPNy3ivvHexkjdYjhFX09PcXT274BE+YBBTPXIuy
Avjdu1e6otD7getc16OKzoFBgWd20Ewl1DAs6fXVI5qyxqX/eINgcHfxz0BMk/7A
W/1nRlQGrozIVPDQgGRvj2CTwd7oVCtHuV9hokJfbgHk+8YN8lshSRktuspaj/id
i+TGTLHIJqEmDRBvKh/USn7Hdv0JjuNKhFngb9VMJf6B2cobAxGsnP95d7NqR/h+
xK29yMqa+lA5rHiChGZjtA9GyNaP+ug3DW1vlorEXtzlfa1k6qK/seinaeBS7H3v
tt+kgqpWxD205w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:24:24 2026 by rpki-client