Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: y40f+iH60yue4VmHgs6BKojj9YoxLlhSvsEB3UR1tMo=
Subject key identifier: E2:3B:16:EA:2E:9C:EB:40:BF:52:DC:DC:CE:E4:34:4F:56:40:5B:03
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 01A001387CFD71AF6FC90268CDA41897581D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 0879
Signing time: Fri 14 Aug 2026 17:01:14 +0000
Manifest this update: Fri 14 Aug 2026 17:01:14 +0000
Manifest next update: Sat 15 Aug 2026 17:01:14 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: lOd0ad0Le24esL4S11B4hOYjiCDbf0Neti+vcH7KJoU=)
2: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (hash: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:7c:fd:71:af:6f:c9:02:68:cd:a4:18:97:58:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Aug 14 17:01:14 2026 GMT
Not After : Aug 15 17:01:14 2026 GMT
Subject: CN=e23b16ea2e9ceb40bf52dcdccee4344f56405b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:5a:3e:db:ca:6b:94:8a:33:7a:1d:39:a8:
a2:dc:8f:3c:9c:cd:13:f7:05:00:31:d7:84:77:33:
f9:12:11:24:05:41:95:68:86:76:1c:c6:5c:c0:42:
ce:9f:59:8f:60:2d:59:cc:aa:58:8a:eb:21:bd:fb:
c2:f5:d1:1b:7d:28:a7:72:ff:23:9b:35:d0:0e:4d:
09:51:4f:f8:85:ca:e6:89:4b:3d:32:03:bb:d0:a6:
7b:4e:22:5a:5f:3a:0f:b3:8f:f0:28:ab:22:c9:2e:
31:63:d2:c9:f8:51:e3:97:a3:97:0e:40:06:90:6a:
5b:f6:31:7b:74:cd:5c:35:b0:5d:f5:19:b4:7d:3b:
33:ad:42:b2:8c:c3:5c:4d:89:99:c2:22:87:43:b8:
fe:69:42:e2:2a:3e:f7:a1:0e:37:4f:47:75:d7:da:
72:bc:bb:8c:1a:3f:7e:82:61:e8:eb:32:9d:d9:27:
e5:28:1f:58:99:d9:0b:18:59:7c:8f:a1:38:00:17:
bd:8c:16:30:1c:cf:93:24:a0:ad:aa:25:70:39:fc:
61:29:e8:39:88:f7:b0:85:e5:76:de:32:1f:62:8b:
d2:7a:61:bc:c0:d7:2f:07:e2:3f:e6:41:a6:8e:1d:
fc:0d:7f:76:50:14:52:75:19:28:8d:4b:7e:79:6e:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:16:EA:2E:9C:EB:40:BF:52:DC:DC:CE:E4:34:4F:56:40:5B:03
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1f:f6:2c:3a:63:84:2a:f0:57:be:a2:3b:ff:00:4e:5b:e3:
6a:a1:42:cc:8a:4c:ba:4e:8e:5b:9b:bb:c5:27:cc:f8:4d:b3:
7e:0d:fd:61:ca:00:71:ad:57:a3:22:6d:fc:27:d8:17:cb:b6:
02:f8:22:9e:20:14:9e:60:0e:a5:bc:be:35:ea:f6:56:b4:09:
4d:be:1c:22:f7:57:56:c2:c1:fc:7d:d8:a5:3c:bd:46:45:4d:
5c:80:16:3e:2a:03:45:b2:d6:c5:7f:0c:62:d8:5c:d0:e2:9e:
cb:8b:11:3e:c6:35:ce:8e:08:28:42:02:d8:b8:ae:08:02:4a:
78:32:ee:41:59:58:f5:9f:b3:85:b3:b6:2f:05:aa:26:09:01:
79:a0:48:dd:93:93:14:5f:e4:82:9c:38:95:0f:c5:e1:74:3f:
22:0f:36:c5:ce:ff:48:30:cc:bc:9c:51:8b:60:25:7c:e5:68:
22:46:b3:7c:b0:86:c0:06:39:3a:5d:87:ef:9a:6d:85:5a:20:
96:7c:2c:39:a1:bd:bf:94:6c:29:c8:27:e9:a1:fc:e2:b8:32:
23:15:b5:8c:bb:5a:01:90:dc:fe:fb:eb:85:dc:ec:4d:1c:5b:
79:f8:45:98:c2:af:16:e7:bf:8e:e9:f8:01:be:ef:1d:6e:1b:
94:b1:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:30 2026 by rpki-client