Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: sL/jkw1V2zQB1nxWXEylJ8H4lJJJ4BosWXga+JDiLZo=
Subject key identifier: 1B:5F:E2:1A:24:FE:38:BE:DF:40:83:E0:A2:0D:BC:AE:51:66:52:AD
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 01A14015CE9D656DEDBFEDD38CF4D05DEC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 15:02:13 +0000
Manifest this update: Thu 15 Oct 2026 15:02:13 +0000
Manifest next update: Fri 16 Oct 2026 15:02:13 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: LveBVgTZX3/YNzD0AKQJoazuu5IewPYADPnBUuWRXtM=)
2: _igUKCILIjVQGGkM5QULk2U3nBo.roa (hash: 20wqHq8/cCP5c8/7zi0IPefhfTG7SQ/Exh3yYB/ZfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:ce:9d:65:6d:ed:bf:ed:d3:8c:f4:d0:5d:ec:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Oct 15 15:02:13 2026 GMT
Not After : Oct 16 15:02:13 2026 GMT
Subject: CN=1b5fe21a24fe38bedf4083e0a20dbcae516652ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:91:b5:53:ed:e2:f4:17:b6:d2:8c:80:85:
30:ad:7e:ad:ab:f2:e1:96:87:9e:3e:21:2c:a0:7b:
54:70:93:ad:62:f7:07:2a:7f:ee:2c:f9:40:07:66:
61:0c:d6:e4:4f:77:a6:31:70:16:3b:17:f9:a9:b7:
81:e9:d3:a8:bd:2e:fc:03:d1:78:fc:6a:64:a8:97:
e4:b3:77:7d:f3:74:55:7f:3e:e9:ce:73:08:69:66:
56:fd:4a:f8:4d:2d:8b:49:16:d7:9e:22:cc:ea:a8:
b8:69:26:9a:72:dd:d5:3d:cd:2e:0c:20:64:e2:ee:
c0:64:f7:73:97:ec:aa:f2:bc:ad:d3:f3:3d:c4:2a:
b6:f9:b1:09:26:a6:9d:0e:a6:d2:88:01:3b:38:bb:
d3:f6:28:92:4d:d7:b2:5b:92:25:dc:13:8b:37:e4:
25:88:a4:ad:7f:e1:e0:69:b3:6c:0c:d5:42:33:65:
e1:0e:2e:8d:79:00:dc:08:aa:23:e9:dc:0c:e0:7a:
e7:23:e4:64:de:c4:bf:16:0a:bb:a5:19:0c:74:a5:
0b:9c:68:fa:d0:6b:01:80:d6:ac:ca:e9:dc:e8:bb:
49:32:37:7f:9c:be:17:72:9c:38:a0:6c:23:67:5a:
7f:ef:e9:98:00:fa:32:b0:91:c3:3f:94:09:e9:da:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:E2:1A:24:FE:38:BE:DF:40:83:E0:A2:0D:BC:AE:51:66:52:AD
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:49:45:b5:3a:ec:55:44:b2:5a:78:6f:aa:f1:c0:7b:aa:
8c:df:4e:27:92:f0:05:cb:d5:b0:fb:64:b9:10:9a:54:fc:5b:
50:d5:b7:fd:0b:a5:dd:8d:80:98:0c:ce:0d:0d:34:d9:30:21:
22:52:b2:d8:fb:1d:44:b7:fa:11:87:b9:e2:4f:51:5c:b9:b3:
4d:04:4c:4d:a8:01:90:3a:a1:96:94:fb:fc:e4:53:77:1f:fa:
66:ea:5e:e8:d9:2b:3f:f0:02:84:10:ed:85:2e:db:55:96:00:
72:f1:13:e6:ad:32:c6:13:a3:8b:eb:9a:ed:ef:a3:d1:2c:c4:
6c:63:6d:dc:ae:84:29:ad:04:fd:28:bb:b6:22:34:2b:77:85:
21:74:b4:ca:a0:4f:0a:c6:e6:75:bb:12:2a:73:ee:8e:d7:97:
ba:d2:f1:89:6b:c4:a2:bd:ea:c4:9c:9b:02:49:0b:ba:cf:00:
9a:28:aa:2d:b4:06:8a:59:9d:81:52:0a:61:7e:9a:8e:76:92:
98:a4:5a:2c:98:71:15:81:a3:3f:f9:c2:3c:30:89:01:28:97:
43:bb:85:75:00:2d:ec:52:a0:8b:6e:34:90:94:a0:9f:61:f9:
99:b1:ab:28:c2:dc:f6:39:90:2f:bb:3e:b3:97:f9:4d:21:55:
e3:a7:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:36 2026 by rpki-client