Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: Xlf10hwxPhIJmHOFjeTBD1gP7Tv6b86YVmd26MgCdmM=
Subject key identifier: 89:61:A7:30:84:BB:83:7C:77:0C:84:A5:52:3E:C9:6C:1A:FA:A0:EB
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019F178C165CF2FBF2D7A57484119F8E4643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 0800
Signing time: Tue 30 Jun 2026 08:01:24 +0000
Manifest this update: Tue 30 Jun 2026 08:01:24 +0000
Manifest next update: Wed 01 Jul 2026 08:01:24 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: ToPhK1WX0sRGWl9lUFcpTUDgS++LQg2K4YSe4cujZgQ=)
2: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (hash: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:16:5c:f2:fb:f2:d7:a5:74:84:11:9f:8e:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Jun 30 08:01:24 2026 GMT
Not After : Jul 1 08:01:24 2026 GMT
Subject: CN=8961a73084bb837c770c84a5523ec96c1afaa0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:0f:91:7b:f0:f0:5e:fa:cb:92:68:46:23:
c9:68:1e:6f:1d:10:51:08:ab:94:e0:b6:58:ab:f8:
c8:b6:2e:59:79:53:29:65:ae:2b:9d:2b:41:0b:fe:
3f:8b:c5:e1:82:56:53:ae:a4:e5:db:b8:54:6b:27:
70:10:30:e1:5a:a2:f8:88:40:7e:c0:0e:96:8f:7a:
e6:0a:a8:68:0d:b1:14:be:1d:c0:51:3c:ef:1c:a2:
6e:bd:39:e1:7a:8c:ed:f4:68:4a:a4:4d:0e:ba:bc:
d5:ff:63:c4:a6:33:06:4c:48:63:66:a7:90:95:89:
37:c2:f3:b8:fc:5e:9a:d9:1b:94:0c:f0:65:b9:3e:
65:13:b3:fb:b7:65:e1:89:c7:03:4e:83:5e:02:13:
e7:b5:95:32:e0:3b:ea:34:2f:76:4c:9b:c5:39:f4:
67:ae:ca:54:f7:38:fa:b4:71:36:1e:7e:ce:4c:e7:
8b:75:08:cc:10:7e:26:02:3c:f1:89:e6:d9:80:e8:
2f:ad:7e:c7:d7:33:c4:71:c9:fb:33:26:f8:08:c8:
7c:0f:3d:12:24:3e:d9:a4:d3:ef:12:77:51:46:21:
c3:5f:cc:1b:e0:eb:fc:9c:22:bf:b8:4e:d4:6c:99:
d1:d0:90:61:d3:1c:ea:0e:55:81:87:d0:8c:76:63:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:A7:30:84:BB:83:7C:77:0C:84:A5:52:3E:C9:6C:1A:FA:A0:EB
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:03:48:dd:70:dc:59:a2:6c:52:63:38:23:f0:94:60:71:
54:8c:7c:9c:e6:a5:6e:7a:7c:c4:95:48:67:8a:c6:b3:08:d0:
1b:b1:0c:e3:0e:40:38:95:4e:c8:d4:bb:cd:eb:14:7a:eb:04:
6f:18:6c:d9:a5:c8:0d:2b:c7:b7:10:1e:4f:72:8a:4f:c1:83:
f4:50:53:38:00:3c:60:0e:e5:a2:73:39:d0:b2:33:b0:70:d2:
c5:67:f6:48:3f:09:5e:ac:84:e5:d8:e5:89:70:85:c0:0d:b8:
84:d2:bd:1a:1c:d2:ef:dd:ad:c3:41:91:fb:e3:62:84:38:ce:
06:4d:e9:9d:47:fa:eb:b0:bf:b0:ff:76:98:9a:0a:61:64:c0:
a0:18:6b:77:59:5b:02:0c:d8:c7:0f:b0:1b:64:78:51:69:74:
ef:2b:7a:3c:85:cb:4f:70:e9:05:7f:37:b2:fc:56:05:87:fb:
d1:d0:8b:72:9c:25:bf:7f:33:7b:5e:85:a6:da:72:2c:dc:47:
91:18:c8:a2:a8:41:f9:8c:97:2e:4a:37:31:9b:aa:d9:01:59:
29:43:ff:41:5b:90:a8:71:87:36:0f:03:c5:3f:d8:0e:20:e1:
95:6d:2d:5d:11:03:d2:3a:49:c6:6f:9c:a5:19:92:02:a3:59:
9e:3a:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:49 2026 by rpki-client