Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: bC03R2HEvVhEMhLI8KFhrTukI11xiUp8Jf9rtILMmcw=
Subject key identifier: DF:B4:5A:BF:2F:0B:A9:E1:22:41:7B:A5:6A:62:B9:CC:AD:95:09:F8
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 01A1291EF9FC95196A87407182374D63928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 1066
Signing time: Sun 11 Oct 2026 04:00:58 +0000
Manifest this update: Sun 11 Oct 2026 04:00:58 +0000
Manifest next update: Mon 12 Oct 2026 04:00:58 +0000
Files and hashes: 1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: tfig7wpihc08FobIbPvBYu+Qdsq2rRBzyfb6MKhZTno=)
2: V520rJqjBQNaG4fyPK4nwNHO6No.roa (hash: BQhLgWTrqlA5BOZHn9fbUTXWBsPmEQUK0Ry+/ekhmxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:f9:fc:95:19:6a:87:40:71:82:37:4d:63:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Oct 11 04:00:58 2026 GMT
Not After : Oct 12 04:00:58 2026 GMT
Subject: CN=dfb45abf2f0ba9e122417ba56a62b9ccad9509f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:00:69:a4:40:df:fb:d2:b9:44:9f:a2:31:
a0:07:0d:02:90:2c:5d:db:ca:1d:d4:3d:89:aa:74:
3f:9c:0b:83:15:4a:a6:32:45:81:3a:99:aa:e4:08:
da:f4:86:7a:98:ee:1a:38:c5:19:ab:bf:d0:c0:92:
7b:1d:72:c2:89:4c:ab:fd:4d:4e:68:24:4b:35:68:
bb:39:ec:df:72:b0:ce:b7:7d:b7:02:c1:70:4d:6a:
01:9f:b6:db:c5:5c:3d:20:ec:e1:84:80:18:ff:40:
00:b6:bb:59:54:2a:5b:50:ab:c1:68:ef:fd:e4:fb:
40:c5:34:60:4b:a0:92:d3:ea:86:72:90:5f:68:61:
05:57:f4:44:cc:51:28:21:f4:c7:c2:b8:17:b9:f6:
b7:10:c5:e7:e5:d9:de:67:dc:31:2c:6c:b8:d1:04:
b3:ee:79:03:4d:c2:66:57:e2:1b:b4:d0:4c:a3:46:
27:bd:20:1d:f0:27:cf:ef:74:2d:1f:d0:9f:c3:b0:
9e:38:4f:12:78:64:b9:f1:de:22:da:7a:0b:b1:cb:
38:49:c5:0d:ad:56:74:0a:91:57:15:01:78:e2:77:
52:f5:ee:8b:b3:a7:17:09:c5:c0:49:3f:d3:1a:c1:
22:11:ae:35:35:ca:b2:4e:f9:b3:e7:8d:7e:65:c7:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:5A:BF:2F:0B:A9:E1:22:41:7B:A5:6A:62:B9:CC:AD:95:09:F8
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:da:89:86:14:32:7f:1c:b4:76:2a:99:16:8b:8c:0f:f7:92:
51:fc:0a:46:6e:7d:fe:87:04:ae:26:e0:fb:51:cd:ca:5b:55:
9a:bb:b2:37:9a:c5:52:f7:27:ad:4d:9b:56:b3:21:7f:95:17:
d6:7b:bf:9f:8b:17:0d:ae:e8:b4:64:f6:c9:34:65:31:8f:a9:
65:38:54:b2:d6:ab:c6:6f:43:3b:c1:32:5d:96:8c:40:aa:49:
8c:f3:27:6e:c8:25:36:38:9a:a5:1d:7a:14:a5:ca:c3:03:79:
59:42:c5:c3:53:18:19:e5:4a:ac:02:94:71:59:fe:1d:c9:de:
c2:82:eb:29:8f:b0:a4:3c:12:b8:ae:1c:1b:91:ef:dd:77:b1:
55:77:8c:95:ee:9b:5f:18:42:93:aa:64:74:ca:d6:8a:85:b2:
a3:98:db:81:08:a5:d8:e0:d7:48:f5:2d:a8:2f:37:d6:81:50:
d9:2d:8c:b1:8b:cd:93:c5:81:24:19:56:e9:f3:4d:90:6a:98:
a3:69:7e:2c:24:a2:71:8b:62:82:58:2e:61:e0:22:e8:3b:3f:
85:b7:80:a5:f5:c2:ee:70:be:d0:18:6a:23:29:be:a2:8c:d7:
d8:5b:f5:26:7b:27:df:24:1a:e0:93:5c:e3:61:62:f5:24:98:
4c:9f:62:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpHvn8lRlqh0BxgjdNY5KMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjYxMDExMDQwMDU4WhcNMjYxMDEyMDQwMDU4WjAzMTEwLwYDVQQD
EyhkZmI0NWFiZjJmMGJhOWUxMjI0MTdiYTU2YTYyYjljY2FkOTUwOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyMAaaRA3/vSuUSfojGgBw0CkCxd
28od1D2JqnQ/nAuDFUqmMkWBOpmq5Aja9IZ6mO4aOMUZq7/QwJJ7HXLCiUyr/U1O
aCRLNWi7OezfcrDOt323AsFwTWoBn7bbxVw9IOzhhIAY/0AAtrtZVCpbUKvBaO/9
5PtAxTRgS6CS0+qGcpBfaGEFV/REzFEoIfTHwrgXufa3EMXn5dneZ9wxLGy40QSz
7nkDTcJmV+IbtNBMo0YnvSAd8CfP73QtH9Cfw7CeOE8SeGS58d4i2noLscs4ScUN
rVZ0CpFXFQF44ndS9e6Ls6cXCcXAST/TGsEiEa41NcqyTvmz541+ZcdxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+0Wr8vC6nhIkF7pWpiucytlQn4MB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9qJhhQy
fxy0diqZFouMD/eSUfwKRm59/ocEribg+1HNyltVmruyN5rFUvcnrU2bVrMhf5UX
1nu/n4sXDa7otGT2yTRlMY+pZThUstarxm9DO8EyXZaMQKpJjPMnbsglNjiapR16
FKXKwwN5WULFw1MYGeVKrAKUcVn+HcnewoLrKY+wpDwSuK4cG5Hv3XexVXeMle6b
XxhCk6pkdMrWioWyo5jbgQil2ODXSPUtqC831oFQ2S2MsYvNk8WBJBlW6fNNkGqY
o2l+LCSicYtiglguYeAi6Ds/hbeApfXC7nC+0BhqIym+oozX2Fv1Jnsn3yQa4JNc
42Fi9SSYTJ9ifQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:23 2026 by rpki-client