Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
File: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft (raw, json)
Hash identifier: JKmvYiAzhgTwPO8VKmht9f3ihh3II/a6wbxXUZQwL90=
Subject key identifier: C1:5A:7D:2A:00:A7:63:C3:C6:78:CB:C0:A7:64:A6:DE:E2:DA:A2:FC
Authority key identifier: F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
Certificate issuer: /CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Certificate serial: 019FF948A4F064FE4BF32E10737F65BEA46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
Manifest number: 2A
Signing time: Thu 13 Aug 2026 04:01:55 +0000
Manifest this update: Thu 13 Aug 2026 04:01:55 +0000
Manifest next update: Fri 14 Aug 2026 04:01:55 +0000
Files and hashes: 1: 8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl (hash: 0PrlgmR/Qja+HoqZYxyKNTY7JLyCedZKr42pnqJK91s=)
2: BZv-LoBRIRBTOEYKtA6kf7CvWnM.asa (hash: 6djo3sORenudDTgc+w+x6P5vO7vutX0bQrqSk11uuhw=)
3: QpyzK4A53JlVZWVV1v2jN1WPoAY.roa (hash: 16PfeuBy1FMSFoHFqQhe2PdhxV2dzUiD7Xy/ykQCYkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:a4:f0:64:fe:4b:f3:2e:10:73:7f:65:be:a4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Validity
Not Before: Aug 13 04:01:55 2026 GMT
Not After : Aug 14 04:01:55 2026 GMT
Subject: CN=c15a7d2a00a763c3c678cbc0a764a6dee2daa2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:4b:8e:23:b5:f6:cc:fd:fe:c5:3b:f3:07:
11:f9:73:cf:8b:c9:37:93:4d:9d:a3:46:ee:46:a6:
8c:49:97:fe:bb:05:c8:a8:66:ca:1e:42:d9:27:41:
db:66:64:22:f8:c8:d1:1e:9f:b2:f4:ec:30:ca:b2:
58:0b:d8:18:6b:c4:2b:5a:01:8c:01:67:95:88:20:
56:86:04:a3:3c:6a:83:a7:41:d6:28:e9:69:32:01:
02:f6:7f:64:d2:1e:4e:5d:c0:83:59:f2:8f:6e:86:
66:90:1b:8f:6b:e6:6c:71:db:50:2b:f9:6d:25:2e:
f7:73:f7:37:c6:e8:43:41:ab:db:9c:19:95:a9:d9:
c3:72:ab:41:aa:0f:99:42:b3:10:f6:e0:e5:a3:0d:
9c:79:50:cf:ac:ee:47:1c:41:bc:df:f4:ad:6b:54:
82:aa:84:37:c1:59:68:68:75:40:a9:75:33:d1:76:
84:e7:76:12:d7:c4:0d:44:56:39:0c:13:c3:34:5d:
a6:01:49:dc:33:69:6e:06:cc:36:00:7e:aa:95:55:
d5:2f:1d:d5:f6:6b:70:20:d3:67:3c:69:af:8c:4f:
4c:eb:72:4d:05:a5:df:b8:38:9e:a9:d3:e8:da:3b:
c0:70:8c:13:94:48:ec:41:d4:6b:79:f0:c4:1a:6c:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:7D:2A:00:A7:63:C3:C6:78:CB:C0:A7:64:A6:DE:E2:DA:A2:FC
X509v3 Authority Key Identifier:
keyid:F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:93:c9:ce:e9:ab:39:29:f0:15:71:e9:ce:23:76:a8:ca:78:
a0:43:06:96:24:b4:a5:95:3b:4b:b9:27:1a:42:19:a5:0c:3e:
23:bf:54:4d:98:4b:2b:6b:88:22:46:48:7f:a3:df:05:95:9c:
b5:36:af:1e:92:a5:ec:f2:b0:83:e7:8c:1c:63:70:eb:08:93:
82:21:a5:e1:7b:d9:63:66:b5:42:ba:13:8a:1a:aa:7c:4c:99:
61:96:1c:37:cd:87:ce:16:42:77:05:68:9e:4d:30:eb:fa:f9:
d4:c0:42:69:87:eb:ed:bf:b4:7e:9d:1c:a0:a8:81:71:c5:a2:
84:a0:64:62:e4:15:72:5e:97:e1:40:19:c8:c1:72:df:f6:67:
56:0b:66:7e:87:a4:e8:64:7e:1e:51:07:35:d3:0d:2e:ce:b6:
15:63:7d:a0:6c:cb:66:c8:5b:a4:2e:71:f4:6b:64:d3:c9:b0:
b1:7e:4e:e7:34:70:b4:41:00:01:c5:93:1c:a4:83:69:6a:ff:
2a:ef:bb:59:89:f9:95:0d:f6:dd:e1:8d:e9:04:c4:1a:13:f3:
18:e4:4c:18:f3:43:15:e7:ab:88:a0:35:0c:01:5b:02:2a:d9:
8e:f9:c3:2e:fb:d6:bf:b6:56:ae:63:a0:b9:df:89:17:4c:21:
b0:9f:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:47 2026 by rpki-client