Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: ILOOf3l4MEONCI9EiM5/ws9E0jeo5vCaerr8p0xdFDs=
Subject key identifier: F9:95:96:22:2E:C0:50:BF:40:30:BE:A9:DF:BB:D7:0B:DF:9C:E9:18
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01A10F27C1F669857DF04A63D822508DA6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 03:00:25 +0000
Manifest this update: Tue 06 Oct 2026 03:00:25 +0000
Manifest next update: Wed 07 Oct 2026 03:00:25 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: R0JqJRjmovBubMZ5aQ4gGw8MS7F+8/GCik8Ki8bMsGE=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:c1:f6:69:85:7d:f0:4a:63:d8:22:50:8d:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Oct 6 03:00:25 2026 GMT
Not After : Oct 7 03:00:25 2026 GMT
Subject: CN=f99596222ec050bf4030bea9dfbbd70bdf9ce918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:4c:68:a2:fa:45:44:80:ee:a0:a1:56:79:
74:ac:5e:5a:3b:b2:6e:b9:c2:f1:93:ac:0a:5d:71:
86:69:f2:dc:3d:99:1a:fa:66:6c:6e:98:9a:1e:66:
55:91:98:68:e4:1b:28:d2:c0:76:11:4d:6c:34:5f:
e0:40:d8:e4:fa:5d:37:b6:0b:95:6f:98:49:46:9b:
fd:7f:84:af:a6:34:9c:80:78:ee:24:47:d2:45:64:
dc:69:8d:cb:12:2d:01:f7:d4:f6:49:a6:e1:e2:cd:
24:07:62:e4:6e:42:dc:63:04:9c:6a:a7:cc:db:a8:
64:a6:54:1e:5e:02:87:e8:0e:5d:27:6c:84:27:c3:
f5:b8:b3:3d:eb:32:d4:9d:0c:15:0b:35:9a:34:ee:
3b:b1:af:ee:a7:d2:9f:b4:c0:17:50:5d:6d:9a:56:
ac:23:0d:f0:f1:ed:7d:be:8c:84:b2:31:da:6f:ca:
3d:47:9d:48:8c:60:bd:26:f4:8b:a4:93:ba:b9:a0:
98:11:40:2e:f7:2f:a8:25:92:94:33:6c:23:38:9b:
36:ba:e2:f1:8b:f0:b1:14:db:70:df:b4:ee:17:d3:
5b:5d:dc:fd:c7:e2:40:71:80:8d:0f:67:eb:c9:e8:
29:1d:1f:bb:b0:1c:be:65:ca:d7:e5:d7:eb:7f:c8:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:96:22:2E:C0:50:BF:40:30:BE:A9:DF:BB:D7:0B:DF:9C:E9:18
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:78:55:61:8c:3c:f4:0a:38:fb:1c:d9:09:bb:94:37:73:30:
38:71:7f:0d:88:e4:df:3c:c5:3d:c2:92:58:46:39:53:dc:dd:
c7:2b:cb:bf:2f:e3:f6:93:fe:95:1b:8b:1e:2b:58:62:f0:c3:
29:5a:40:7c:5b:70:24:d6:28:7d:75:cb:e6:69:b0:94:7c:61:
30:8f:15:aa:87:98:ea:27:e1:68:d7:c4:ea:7f:d3:df:a7:d6:
00:9b:53:b8:08:14:44:0d:75:02:da:86:6e:4a:b4:b9:c7:ff:
19:75:ed:ac:47:e9:43:ee:ab:8e:16:a5:b8:11:fb:ef:6f:8f:
f1:47:53:ef:88:be:54:6f:9d:29:ae:1a:c3:cb:9c:17:d7:4f:
a2:83:a8:09:1a:8d:20:2b:e3:e5:9b:fd:b2:a6:f4:0e:79:ba:
9d:d2:75:1e:34:37:69:fd:76:d6:16:27:9f:0f:6b:31:7e:9b:
c2:26:d8:64:85:fa:99:c6:1d:55:13:04:d9:3b:a2:a3:f9:90:
58:79:b3:88:f0:6d:f8:ae:31:5b:7f:6b:b3:50:49:b3:d9:d3:
90:75:87:1c:6b:66:72:a2:38:4c:b7:76:93:b2:91:21:4a:95:
65:3c:67:31:07:02:1a:3b:8a:8f:55:f2:25:b9:85:70:b7:36:
9d:90:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:39 2026 by rpki-client