Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: BLyygV5AbszMYtDivKd2LFEB+igsPvrKecWs0ZdJaDE=
Subject key identifier: F1:DD:B3:80:D5:66:CA:19:56:12:0E:FB:53:24:13:4F:56:8F:E4:3B
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019FFE000C69E11F14A64360CA8B4EE8BE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 09AA
Signing time: Fri 14 Aug 2026 02:00:43 +0000
Manifest this update: Fri 14 Aug 2026 02:00:43 +0000
Manifest next update: Sat 15 Aug 2026 02:00:43 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: wln1yCteYPIAJ+O1U7lltIWsuAHxK/MFajMlwgJ8D5U=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:00:0c:69:e1:1f:14:a6:43:60:ca:8b:4e:e8:be:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Aug 14 02:00:43 2026 GMT
Not After : Aug 15 02:00:43 2026 GMT
Subject: CN=f1ddb380d566ca1956120efb5324134f568fe43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:39:b7:0b:94:81:93:90:63:4a:20:15:e7:
38:3b:5d:72:0d:f8:f8:68:87:4a:94:05:a2:67:3c:
f3:ba:df:58:84:7b:dd:6b:ef:df:fd:f1:01:45:39:
07:e0:82:18:77:86:8b:80:d8:3c:8c:a5:61:5c:30:
6b:4f:98:ec:a1:a7:e2:eb:25:92:b8:a9:a1:b0:ac:
77:1d:df:ba:19:a8:55:07:a8:5c:11:e9:ca:b4:bd:
59:80:ab:3a:22:e7:8f:ce:7f:d6:51:81:0e:e6:c2:
08:bf:b5:b2:a3:55:80:31:5d:cc:c7:e2:ee:d6:ec:
da:98:ca:2f:92:42:ac:34:df:f5:a0:66:d2:e8:79:
7f:7e:43:a5:b8:30:9a:30:75:f6:cf:ef:23:7e:5f:
19:24:87:01:df:67:19:75:2a:79:26:d6:f7:df:a6:
bd:16:46:47:38:67:a4:39:4c:d7:73:3e:b1:cd:4f:
2a:bb:b5:f6:63:8c:30:79:f3:d2:8f:8c:6c:d8:61:
40:59:35:b7:5e:b0:fa:bb:67:81:b3:28:d4:cc:5a:
a1:e8:4c:01:24:df:6b:66:ac:34:bf:aa:ce:7d:d5:
3b:99:11:9e:02:5c:d0:20:08:29:7c:47:2b:2b:10:
76:18:8f:d9:ad:20:c4:3e:fa:f0:35:82:79:c6:b6:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:B3:80:D5:66:CA:19:56:12:0E:FB:53:24:13:4F:56:8F:E4:3B
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4e:1c:f7:14:8d:e8:a5:54:b5:e8:d2:19:0e:f3:e7:e6:3f:
6e:58:d5:82:2a:3b:9c:20:b4:f2:60:ca:1d:41:85:6f:7f:5c:
81:c7:7d:67:84:1d:81:4d:40:de:f7:bb:b4:3a:0f:96:62:fa:
58:00:af:5f:e8:05:a3:68:d0:9f:c6:30:55:3a:d9:2e:2c:33:
2f:86:01:b8:53:e4:38:d5:18:ea:03:fd:1f:a2:81:60:d3:de:
a6:77:54:6f:c8:e3:15:50:f1:6d:31:73:f2:d6:c5:07:d2:38:
9b:c2:43:2c:71:aa:7d:9f:de:13:45:cd:91:94:77:1c:52:48:
54:9e:3d:e5:27:11:6f:25:c4:a2:39:f3:0d:8f:09:61:07:42:
d0:ea:dd:6f:d0:6a:e2:89:65:3a:0b:b0:03:c1:a5:1c:35:95:
9b:12:d0:aa:ba:4f:3e:fa:aa:ab:6c:c6:e7:22:2c:89:f7:33:
4c:fc:13:0b:60:66:cf:80:38:21:47:3e:ac:2a:0e:45:41:bf:
f2:25:8b:78:cd:21:a2:fa:82:e8:75:01:1b:65:af:7c:67:60:
e5:be:17:1c:a7:98:94:d7:d1:33:a8:c9:c3:f8:f0:ef:b4:5d:
41:6f:93:aa:eb:78:85:67:52:30:a2:95:0b:40:60:87:58:21:
d2:d6:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:10:52 2026 by rpki-client