Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: g0iYdkKE/Xta5GoUIUGFCQAkJYTardDg+zpWoRtRMmE=
Subject key identifier: E8:1D:59:8C:B7:62:77:B0:17:19:6C:99:4D:E4:C2:C6:E2:09:F6:90
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 01A08D1FE67B9F7556AE86988248778C26C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 041A
Signing time: Thu 10 Sep 2026 21:01:13 +0000
Manifest this update: Thu 10 Sep 2026 21:01:13 +0000
Manifest next update: Fri 11 Sep 2026 21:01:13 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: DS9+pZ8ENRwGKq9FpZYXofR1UrE0xXtTlTcz/KW+nf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:e6:7b:9f:75:56:ae:86:98:82:48:77:8c:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Sep 10 21:01:13 2026 GMT
Not After : Sep 11 21:01:13 2026 GMT
Subject: CN=e81d598cb76277b017196c994de4c2c6e209f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:7c:41:71:ab:9c:30:5e:82:28:00:fc:d6:
07:6f:0e:bb:00:47:04:c2:e8:87:c2:43:fd:7c:92:
b9:cd:ea:3d:1c:39:50:71:9a:5d:01:5e:82:ce:b3:
e3:c7:fd:27:be:b9:20:b3:5f:c3:63:0b:d0:86:fc:
58:2b:49:6b:0e:5e:b8:d8:ea:84:57:ec:33:70:a0:
9a:d4:f2:19:fb:ec:93:07:a1:f4:f7:2e:3e:d2:da:
48:bb:62:e5:7e:09:99:42:b2:ed:5f:3f:aa:3b:ca:
54:87:e2:98:23:e3:74:b6:fa:6e:70:c0:ad:aa:46:
42:24:43:c3:f3:a9:54:14:ae:b2:7f:e2:c2:3b:4c:
b7:56:78:c5:4e:84:90:01:4b:6d:67:1e:c0:b4:ef:
f6:e1:12:02:be:23:b2:99:48:4e:bf:76:7b:76:85:
8a:0d:71:83:4a:5d:9e:b7:04:ad:4d:28:c0:67:9f:
77:4e:5c:0e:54:99:a5:28:85:e0:01:cc:91:7e:29:
bf:07:05:f7:aa:8f:ad:a3:d7:2d:90:e4:42:15:c3:
8c:3e:94:1a:dd:1e:49:28:6e:fc:b2:08:a3:2c:6b:
06:41:9e:7e:cb:b5:8b:d7:ad:f8:67:72:8b:7e:42:
a8:38:3e:2f:d0:d8:49:31:df:b3:46:04:81:4c:f7:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:59:8C:B7:62:77:B0:17:19:6C:99:4D:E4:C2:C6:E2:09:F6:90
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:97:ea:ed:68:ef:bf:17:73:c0:df:c8:31:e4:4f:5d:b4:e7:
53:7d:ad:c6:31:da:18:71:be:43:70:0c:5b:89:5e:1a:1e:64:
02:a0:bc:9f:d6:46:52:62:4d:b6:61:f4:94:11:16:f1:1f:49:
17:3a:d5:a9:04:56:13:08:aa:f0:9b:30:84:46:8d:eb:8d:95:
0e:30:d1:c5:b3:54:c2:ff:2c:64:4b:18:15:9e:90:7c:ff:09:
49:a3:b3:61:31:46:1a:8c:27:9e:f1:2c:b7:94:7a:d6:7d:99:
0b:88:a0:c7:40:18:93:54:06:fd:5a:30:ce:6c:25:27:52:83:
e9:2b:e7:45:21:ce:63:ce:04:35:6b:a6:e9:21:c9:02:60:41:
21:0d:76:41:a9:ad:dd:b5:a4:77:3f:d7:3e:f4:9e:a2:b1:42:
10:c4:84:2d:c1:61:c1:d1:6d:ee:4e:01:be:95:52:52:c0:a6:
36:1f:9a:f3:6e:39:26:45:3c:22:cd:ef:cb:2a:db:77:0a:64:
a7:93:96:75:30:3c:2f:ab:3c:4d:9e:2c:b5:73:ec:d7:d2:7e:
ba:b4:9a:4b:c0:c5:ae:02:85:08:95:9e:8d:17:8c:79:9c:57:
0b:0d:bc:56:c7:1f:c2:30:a0:a3:40:d6:3b:99:9e:a2:fa:f3:
d1:d8:92:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNH+Z7n3VWroaYgkh3jCbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4
YzMwMjUwHhcNMjYwOTEwMjEwMTEzWhcNMjYwOTExMjEwMTEzWjAzMTEwLwYDVQQD
EyhlODFkNTk4Y2I3NjI3N2IwMTcxOTZjOTk0ZGU0YzJjNmUyMDlmNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TN8QXGrnDBegigA/NYHbw67AEcE
wuiHwkP9fJK5zeo9HDlQcZpdAV6CzrPjx/0nvrkgs1/DYwvQhvxYK0lrDl642OqE
V+wzcKCa1PIZ++yTB6H09y4+0tpIu2LlfgmZQrLtXz+qO8pUh+KYI+N0tvpucMCt
qkZCJEPD86lUFK6yf+LCO0y3VnjFToSQAUttZx7AtO/24RICviOymUhOv3Z7doWK
DXGDSl2etwStTSjAZ593TlwOVJmlKIXgAcyRfim/BwX3qo+to9ctkORCFcOMPpQa
3R5JKG78sgijLGsGQZ5+y7WL1634Z3KLfkKoOD4v0NhJMd+zRgSBTPfZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgdWYy3YnewFxlsmU3kwsbiCfaQMB8GA1UdIwQY
MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt
ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1
LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpfq7Wjv
vxdzwN/IMeRPXbTnU32txjHaGHG+Q3AMW4leGh5kAqC8n9ZGUmJNtmH0lBEW8R9J
FzrVqQRWEwiq8JswhEaN642VDjDRxbNUwv8sZEsYFZ6QfP8JSaOzYTFGGownnvEs
t5R61n2ZC4igx0AYk1QG/VowzmwlJ1KD6SvnRSHOY84ENWum6SHJAmBBIQ12Qamt
3bWkdz/XPvSeorFCEMSELcFhwdFt7k4BvpVSUsCmNh+a8245JkU8Is3vyyrbdwpk
p5OWdTA8L6s8TZ4stXPs19J+urSaS8DFrgKFCJWejReMeZxXCw28VscfwjCgo0DW
O5meovrz0diSgg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:31:17 2026 by rpki-client