Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: POCmuc6zz/CyZgp1GNmt16kqh0G4nzrc3sYM6+FJOEo=
Subject key identifier: 91:65:E3:D6:82:65:58:50:4B:E4:87:95:75:11:4F:17:9E:C1:58:7F
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 01A0E964D1FFFA8F0430F4DDE26693595B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 06A0
Signing time: Mon 28 Sep 2026 19:01:33 +0000
Manifest this update: Mon 28 Sep 2026 19:01:33 +0000
Manifest next update: Tue 29 Sep 2026 19:01:33 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: vi/K+UnE7M0/LkL6uqghoSmPqpUExvLSJMISImcDOcs=)
2: 8_gr7ArTRAbIwtF4BAs2Yb1Q5X8.roa (hash: mNo3tCakCblgrlbHW+icbibgZLAMJGmCUvTiUz7GkBc=)
3: i75q_zMVNaia1zcfmMS3-MtcBh0.asa (hash: AViSc0D9y0lScSoevl+dGPay5IerujbH9Kjp2UJ8v7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:d1:ff:fa:8f:04:30:f4:dd:e2:66:93:59:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Sep 28 19:01:33 2026 GMT
Not After : Sep 29 19:01:33 2026 GMT
Subject: CN=9165e3d6826558504be4879575114f179ec1587f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:8e:7c:52:32:16:13:e0:a4:dd:19:bf:9a:
59:bd:87:e0:c8:1f:cf:fd:f4:5d:b3:93:10:5b:d5:
1d:9b:0c:93:9d:4d:54:09:2a:c8:c7:57:cb:ba:cc:
76:db:c4:b4:cb:b6:9a:4d:dd:2a:91:0c:74:b4:bb:
6e:8d:ff:05:1b:e1:af:c0:a6:86:88:99:bc:d7:37:
a7:3c:33:8b:cf:45:a0:80:31:b0:e7:7c:b5:94:80:
55:40:e2:98:df:ac:7c:22:14:6d:40:57:6d:51:29:
ac:78:5f:6a:3e:8c:d4:10:f1:c4:2d:1c:38:da:8f:
03:4c:2f:d4:fc:83:76:57:79:82:90:0d:cc:ab:14:
0e:7a:0d:2e:61:fd:55:86:ec:7e:c2:29:fc:30:23:
96:7c:88:4b:ab:f3:f2:0e:dd:0c:da:c0:cc:a4:88:
0b:13:77:9f:9d:b1:3e:84:c1:a7:a6:e0:c5:1e:83:
72:1a:fb:71:32:14:37:ab:e3:62:3e:f9:08:e5:ce:
7e:cd:c8:cd:fd:a6:c7:17:cf:07:80:f4:ac:0a:59:
4a:c5:91:fd:63:48:dc:1a:52:94:fb:52:80:dc:b6:
62:96:35:a9:c4:41:52:7a:f1:49:7e:a4:b9:05:43:
eb:b1:71:2f:44:80:be:62:b0:cc:d0:d0:c5:54:90:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:65:E3:D6:82:65:58:50:4B:E4:87:95:75:11:4F:17:9E:C1:58:7F
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:df:af:c3:00:4f:93:f3:ee:aa:d6:e0:f1:ec:52:9d:6a:
02:7d:f9:84:c1:be:64:11:cd:6d:68:42:97:77:22:b5:ad:b5:
91:45:57:15:65:ef:f8:1b:d9:51:f0:7b:a8:4e:fd:f3:20:93:
09:3e:0c:09:f0:c3:67:b1:c2:3f:df:ac:7a:0d:da:fe:d1:fa:
fd:bb:75:eb:92:dc:e8:aa:be:b6:7c:ee:50:39:0e:16:1c:ae:
fc:ae:ca:6d:86:64:07:62:89:0c:35:6c:64:95:ef:6b:37:9a:
20:15:6f:70:96:a3:e4:c0:2f:48:38:bf:5c:34:78:4b:f2:64:
83:7a:ea:50:0a:77:74:77:b6:93:8b:c1:f5:68:d3:22:89:1e:
ed:b4:30:3b:22:54:1a:e6:ea:40:70:25:67:8a:32:1d:99:43:
56:f0:e3:ba:c7:99:93:e7:97:e8:87:de:76:65:d4:2a:b8:a5:
c8:aa:ca:1d:e3:a2:28:28:d7:6d:59:5f:c6:57:fc:31:cd:1d:
02:51:6c:a0:08:f1:6e:65:58:ac:44:9c:11:56:1e:09:34:ff:
81:d8:61:5a:ed:cd:e2:f2:b2:49:4f:f9:f7:ec:e3:3f:2b:04:
93:85:ae:b1:07:ea:f8:44:68:f6:be:c4:22:fb:ee:b0:66:db:
e0:29:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:34:46 2026 by rpki-client