Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
File: 8nlONzkr4v_oF5XX0WHwMwVqBs8.mft (raw, json)
Hash identifier: xL3Z0BmrRUzsYY+t1ETFW0octgCh97etATjik+uzLUE=
Subject key identifier: C9:D0:23:F8:87:D1:0E:6D:84:AF:3E:1E:3E:54:F2:7A:42:E4:E4:78
Authority key identifier: F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
Certificate issuer: /CN=f2794e37392be2ffe81795d7d161f033056a06cf
Certificate serial: 01A172B8BDE9C25FAA139A181645B364E832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
Manifest number: 0126
Signing time: Sun 25 Oct 2026 11:01:12 +0000
Manifest this update: Sun 25 Oct 2026 11:01:12 +0000
Manifest next update: Mon 26 Oct 2026 11:01:12 +0000
Files and hashes: 1: 8nlONzkr4v_oF5XX0WHwMwVqBs8.crl (hash: 6QGknfo1Zf0vXDwZ8XCPmfFyxJSlSS1WxZ+WGGSTrfY=)
2: Wv4rotGgY_d5xkX9hEu1Ida8XY0.asa (hash: KVa6LMZ1Ws12lSjpNHQhOxmXcMpvbEmGrggGgV2ywH0=)
3: g1hZM_gA4VG6GdoQudkyKC9Iy5o.roa (hash: jJPVFAYeWIaOyslOEJqm1eIOt5Tzn5vmJYRqVTS9b6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:bd:e9:c2:5f:aa:13:9a:18:16:45:b3:64:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2794e37392be2ffe81795d7d161f033056a06cf
Validity
Not Before: Oct 25 11:01:12 2026 GMT
Not After : Oct 26 11:01:12 2026 GMT
Subject: CN=c9d023f887d10e6d84af3e1e3e54f27a42e4e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:7d:98:79:1b:65:e5:35:0a:6e:c6:89:f3:
14:78:af:d3:18:5a:15:18:02:27:6d:50:e2:41:6a:
f8:c8:95:81:55:69:de:74:36:16:81:ac:d5:ea:3d:
45:57:5a:f8:0b:36:c6:b7:77:42:78:38:bd:79:7a:
db:b5:9d:4f:46:15:4a:5e:7c:a0:e6:bd:8c:4b:89:
d4:e5:19:38:61:ab:50:ce:35:98:fc:7b:73:71:bd:
d9:3b:9b:99:de:5f:99:51:a7:b4:a5:33:28:4b:6c:
ec:8b:67:09:b1:fe:aa:47:48:60:6d:6b:0c:55:b4:
83:f1:88:32:2c:44:4a:4d:82:1c:f0:86:b9:2c:71:
00:4b:df:f8:6d:51:11:16:f8:b1:9f:fb:31:49:b3:
c6:4c:7d:d8:be:30:f5:3c:c9:12:60:85:14:33:9b:
7d:82:b0:9f:bf:5e:f6:c7:b7:3e:72:42:4e:ed:b0:
91:ab:f5:0e:70:af:ca:19:9e:57:df:59:b7:51:6f:
10:34:75:dc:0d:58:15:c1:8b:44:3d:c8:bf:0b:32:
30:6b:7e:5e:63:3b:e3:b7:58:fe:0f:f0:5c:df:15:
e6:a8:28:5e:3c:4d:f2:71:30:65:bc:01:15:82:1d:
0b:c3:b7:c5:0b:9a:77:9f:33:f4:d0:1f:44:13:21:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:23:F8:87:D1:0E:6D:84:AF:3E:1E:3E:54:F2:7A:42:E4:E4:78
X509v3 Authority Key Identifier:
keyid:F2:79:4E:37:39:2B:E2:FF:E8:17:95:D7:D1:61:F0:33:05:6A:06:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nlONzkr4v_oF5XX0WHwMwVqBs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3bd6e4-dbda-4b3b-8c00-31aa8b520107/1/8nlONzkr4v_oF5XX0WHwMwVqBs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:06:41:25:6e:18:de:bb:16:19:e1:b6:1c:9a:86:e6:01:
d0:83:30:a3:99:a4:f0:bf:ae:6a:4f:d9:6c:68:d0:2c:29:36:
75:4a:6c:31:d3:78:e5:39:99:ef:fa:e8:35:5b:e2:1a:6e:90:
bc:95:24:a8:b4:a9:c5:6f:d3:0e:dd:a6:1c:46:4d:ed:82:d5:
73:a8:a8:01:7c:c3:7a:a3:f8:3f:71:8d:35:4f:1c:c4:f0:ff:
e3:49:8b:f0:66:9d:74:db:c2:66:07:24:3c:59:9b:c9:77:0f:
d1:9c:22:48:0e:bd:e3:d1:29:8f:17:0b:21:42:cc:bc:bc:e9:
77:8f:80:e2:81:94:87:c5:41:cb:c4:46:73:ab:0d:ba:fd:bf:
a9:5d:c1:fa:3c:4c:da:fe:6a:b6:74:0a:bf:25:a1:3d:1f:8f:
46:7f:a0:b7:dc:62:30:54:42:52:71:5d:bd:92:21:64:30:f4:
08:42:2b:45:5b:c8:7f:47:fa:32:c3:d6:7b:b4:40:7c:31:d9:
17:7f:75:9e:85:63:ed:52:aa:85:7c:ff:0a:8b:d9:07:11:c9:
b9:1b:86:9f:10:44:1f:99:23:a4:da:c6:a6:99:4c:e8:5b:f4:
fc:ca:28:ff:6b:f6:25:4a:3c:02:67:e6:d4:6a:b6:d7:b4:23:
dd:6c:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:06:54 2026 by rpki-client