
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
File: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json)
Hash identifier: 6jJLMaR485HDK/6+fa8uGlADMCmd1tQhzA8YCUN2A0M=
Subject key identifier: B8:73:4D:F8:38:C4:74:D8:09:49:9A:C8:00:06:48:C2:00:A5:75:E5
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A058FAA5A41AC793B64CEF984EE5CFDCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
Manifest number: A9
Signing time: Mon 31 Aug 2026 18:00:16 +0000
Manifest this update: Mon 31 Aug 2026 18:00:16 +0000
Manifest next update: Tue 01 Sep 2026 18:00:16 +0000
Files and hashes: 1: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=)
2: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: wPqwF7EwdKmBDVLp3d9VInbnGQu9R0f/JFrIMIg3n1E=)
3: GcW7J6jqjUurIP-7aEyJafFh_j4.roa (hash: 263Qo59uH2IjJgii7iONl3IHCdmJu80ZDi5zrqP0r14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:fa:a5:a4:1a:c7:93:b6:4c:ef:98:4e:e5:cf:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Aug 31 18:00:16 2026 GMT
Not After : Sep 1 18:00:16 2026 GMT
Subject: CN=b8734df838c474d809499ac8000648c200a575e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:6c:79:3e:7a:84:97:72:d5:a4:f6:f8:d1:
f7:77:62:ae:fe:03:e8:bc:9c:19:4b:83:a8:88:1c:
84:a5:44:60:1e:15:92:59:08:c7:e9:dd:aa:16:17:
df:a8:05:8e:a3:0a:94:88:d3:af:7f:05:78:9d:12:
a1:f3:59:14:17:38:8f:17:dc:46:83:50:90:a7:59:
74:fb:d2:62:e1:aa:ef:eb:95:2d:64:5f:40:53:74:
7b:9b:fc:7e:4c:87:ae:78:2d:a4:60:01:b4:07:eb:
bd:f1:af:96:4c:f1:9f:f5:a3:8a:b2:25:ad:eb:ce:
84:ee:c2:8e:63:e3:58:5f:a6:64:3b:d4:ea:62:2b:
dc:63:97:ed:64:a7:48:e5:1f:18:fb:62:a8:3d:5d:
2b:bc:23:b6:dd:ad:fd:6f:77:7e:45:0f:c8:c3:82:
f8:9e:d5:0a:ce:72:56:f4:61:7e:5f:cb:79:5e:3a:
a0:e1:16:aa:40:1d:09:15:b6:ff:ff:4e:d6:ca:47:
c5:c0:ab:c4:32:63:33:f0:46:ac:c6:1a:28:ce:07:
d6:24:13:52:d7:88:ad:26:b7:fe:94:3f:1c:b2:72:
ff:db:a4:d2:82:cc:ce:c8:8d:6f:12:ec:54:be:89:
5b:94:cf:16:17:26:99:de:25:da:96:b8:50:24:93:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:73:4D:F8:38:C4:74:D8:09:49:9A:C8:00:06:48:C2:00:A5:75:E5
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:20:97:9e:82:36:2f:f2:0f:7b:45:ee:34:96:34:18:96:
c0:b1:7e:10:f5:3e:a4:8c:b1:1d:19:a5:d0:62:62:b8:d1:8b:
41:c7:92:85:3c:4b:1f:1f:35:49:8e:73:55:86:21:17:c0:d2:
29:c7:75:e4:af:6b:6a:57:70:35:5c:0d:de:d9:30:0f:d7:97:
ee:03:82:93:2a:1a:82:de:99:5f:10:bf:69:21:1a:ac:c0:9a:
c1:2b:a6:77:00:51:b3:07:f7:fa:32:56:06:a2:df:82:0c:a2:
00:0a:06:fa:19:27:ae:d7:d4:76:45:4b:a2:b4:07:81:00:26:
97:42:50:51:07:86:af:5b:3d:f3:68:13:55:95:3d:81:ef:9a:
5c:be:98:29:e9:f3:ec:d0:10:ce:96:09:70:68:81:09:85:82:
1b:9a:af:e1:ae:a9:bf:19:8c:c4:4a:ce:c6:3a:6c:80:19:59:
5c:22:63:dc:93:54:85:68:cd:9a:29:4a:33:26:5a:73:56:6b:
90:12:45:75:44:0a:60:2a:6d:3a:b3:9f:3d:cc:cb:65:89:4a:
cd:3b:38:49:bb:98:de:ac:4d:dd:be:3e:c4:40:5e:62:4b:e4:
6b:43:64:b7:7b:6c:e0:3e:54:ec:53:c2:f9:b6:14:85:01:e1:
82:b1:28:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBY+qWkGseTtkzvmE7lz9zbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk
M2U5NzQwHhcNMjYwODMxMTgwMDE2WhcNMjYwOTAxMTgwMDE2WjAzMTEwLwYDVQQD
EyhiODczNGRmODM4YzQ3NGQ4MDk0OTlhYzgwMDA2NDhjMjAwYTU3NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDRseT56hJdy1aT2+NH3d2Ku/gPo
vJwZS4OoiByEpURgHhWSWQjH6d2qFhffqAWOowqUiNOvfwV4nRKh81kUFziPF9xG
g1CQp1l0+9Ji4arv65UtZF9AU3R7m/x+TIeueC2kYAG0B+u98a+WTPGf9aOKsiWt
686E7sKOY+NYX6ZkO9TqYivcY5ftZKdI5R8Y+2KoPV0rvCO23a39b3d+RQ/Iw4L4
ntUKznJW9GF+X8t5Xjqg4RaqQB0JFbb//07WykfFwKvEMmMz8EasxhoozgfWJBNS
14itJrf+lD8csnL/26TSgszOyI1vEuxUvolblM8WFyaZ3iXalrhQJJOoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhzTfg4xHTYCUmayAAGSMIApXXlMB8GA1UdIwQY
MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt
YTllOThiNzNiNTU2LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2
LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAIgl56C
Ni/yD3tF7jSWNBiWwLF+EPU+pIyxHRml0GJiuNGLQceShTxLHx81SY5zVYYhF8DS
Kcd15K9raldwNVwN3tkwD9eX7gOCkyoagt6ZXxC/aSEarMCawSumdwBRswf3+jJW
BqLfggyiAAoG+hknrtfUdkVLorQHgQAml0JQUQeGr1s982gTVZU9ge+aXL6YKenz
7NAQzpYJcGiBCYWCG5qv4a6pvxmMxErOxjpsgBlZXCJj3JNUhWjNmilKMyZac1Zr
kBJFdUQKYCptOrOfPczLZYlKzTs4SbuY3qxN3b4+xEBeYkvka0Nkt3ts4D5U7FPC
+bYUhQHhgrEoFg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:10 2026 by rpki-client