Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: BlDtBAUnkKvlV1ytdUHLJTlrDLg4a23Qa8LRzfO2Tm0=
Subject key identifier: DA:47:8F:2C:63:A8:B2:5F:EF:3A:9A:1E:62:04:63:86:A6:EE:F2:54
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 01A00093C6EA4928D62BE26C176F8E4BADE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0B72
Signing time: Fri 14 Aug 2026 14:01:19 +0000
Manifest this update: Fri 14 Aug 2026 14:01:19 +0000
Manifest next update: Sat 15 Aug 2026 14:01:19 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: Ek3IKItmn0/1/mCY6S/UvcwMAB0pOi90rvWSc0P7LCE=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:c6:ea:49:28:d6:2b:e2:6c:17:6f:8e:4b:ad:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Aug 14 14:01:19 2026 GMT
Not After : Aug 15 14:01:19 2026 GMT
Subject: CN=da478f2c63a8b25fef3a9a1e62046386a6eef254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:11:f6:d1:ef:ec:ea:33:a8:2f:2d:49:56:
29:37:1d:f3:63:21:2a:25:25:fa:fb:27:49:93:94:
87:e5:4a:d1:5c:07:db:e5:8f:b2:86:d3:87:4c:e0:
a7:9e:4d:9f:11:1d:52:97:6c:8a:12:71:3d:8e:51:
79:23:51:3f:ce:ba:82:4d:f9:12:4c:07:b3:95:f7:
a9:20:e0:3e:c3:92:8d:dc:21:44:2e:23:58:20:4c:
73:3a:35:95:76:77:06:b3:53:48:55:d6:4e:2e:3c:
c6:d5:40:29:35:aa:60:d4:d1:03:8c:4d:68:0f:45:
63:59:4b:51:31:92:6c:3e:41:d7:e1:1e:5b:58:21:
5f:c8:a6:2a:a0:34:4b:a3:4c:60:90:06:99:7b:71:
ea:37:d5:45:41:6a:58:95:08:6e:53:ca:31:aa:18:
18:5c:7e:df:8a:ef:1b:67:db:b8:65:de:97:82:81:
52:eb:53:25:31:f5:6c:58:af:5c:fd:de:13:46:24:
0e:68:a4:b8:03:e6:ad:c4:5b:6c:67:4b:bc:2d:7e:
97:8a:a4:0d:4e:cc:8f:32:f4:60:5b:80:fe:88:e2:
97:4a:34:db:a2:8e:6e:64:de:c7:64:b8:2e:1c:d1:
ca:cf:fd:f6:e7:4f:97:a1:5b:2c:71:9b:25:4a:3b:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:8F:2C:63:A8:B2:5F:EF:3A:9A:1E:62:04:63:86:A6:EE:F2:54
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:31:c5:b6:61:b1:99:e7:ee:d1:4b:9d:31:6e:08:4b:b8:
09:2e:91:9c:d6:5e:89:5d:c2:d4:f3:6b:8b:81:c9:1f:26:60:
54:9a:c5:40:c5:19:98:61:43:86:77:ba:fa:5e:7c:cc:82:58:
92:06:54:5d:e8:b3:47:be:49:de:f8:93:d0:07:5a:0b:07:ba:
da:c1:55:6f:0b:56:a0:88:e9:43:48:07:1f:5a:0c:7b:b2:b6:
98:96:a6:96:c4:c8:14:4d:74:ef:21:66:23:94:4c:a5:ea:2e:
1a:55:cd:fa:e6:62:41:59:1d:d0:d8:da:32:ec:82:da:29:90:
39:e4:c9:4e:5e:3c:42:cc:71:0a:2f:a0:c4:e2:d7:3a:46:69:
7b:f2:97:e1:c6:63:66:b3:8b:3e:a8:ab:1b:a3:8c:17:7a:9d:
65:a8:ce:d6:fb:08:c3:51:18:19:17:22:4e:70:f0:1e:d2:d8:
86:6b:50:df:02:71:e5:52:f5:45:cf:cb:d5:e4:36:47:c8:e0:
a6:7a:a3:16:9b:31:6d:df:ae:dd:8d:4a:c6:f1:62:9f:5c:77:
33:1a:f6:38:78:dd:17:2e:9d:38:f2:24:86:79:63:9f:3f:07:
f0:de:b9:70:5b:36:49:3a:bd:ca:5e:08:f7:18:ea:36:88:54:
90:26:f6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:25 2026 by rpki-client