Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: iVrWFRl3sJ5JOevnOT/3zllTLkdBzZiu5HxPbnBrqLc=
Subject key identifier: 6B:CE:5A:03:AE:6B:82:44:83:2E:0D:1E:78:C4:D4:85:56:03:F8:8F
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019E1C475685C94AA8E77A76F0A77F35C3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 163F
Signing time: Tue 12 May 2026 13:01:37 +0000
Manifest this update: Tue 12 May 2026 13:01:37 +0000
Manifest next update: Wed 13 May 2026 13:01:37 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: CMEpKufBOdTBkOsu05hw/gI7rEPoNqA9E7xwnBpe+OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:56:85:c9:4a:a8:e7:7a:76:f0:a7:7f:35:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: May 12 13:01:37 2026 GMT
Not After : May 13 13:01:37 2026 GMT
Subject: CN=6bce5a03ae6b8244832e0d1e78c4d4855603f88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:cd:a1:10:83:81:fa:7e:22:1f:7c:34:85:
80:40:39:63:1d:ad:b0:4c:ad:16:ed:53:90:be:9a:
ac:37:ca:0a:42:ef:ef:7d:9a:42:6c:6f:d5:69:2d:
02:31:51:50:9a:0c:68:ff:12:8f:2f:59:7e:37:2d:
9e:31:ad:fb:4e:dd:d5:19:46:f0:30:a8:cd:fe:be:
b8:c2:59:c7:84:d3:56:4b:70:56:c7:33:2c:fe:4e:
a4:7d:a3:b5:f3:ad:30:d5:b2:85:9b:6e:83:24:bb:
b3:24:46:cf:c2:91:02:69:17:d1:ea:2d:ba:da:3b:
b8:7d:17:18:4f:02:03:39:37:44:ca:85:ff:70:1f:
52:b8:65:20:fc:dc:a1:14:f9:eb:88:8b:e2:ed:b1:
31:68:70:2d:2a:a0:56:3c:03:02:a1:78:0c:4b:23:
4b:e5:ec:d8:54:b9:17:4c:3e:94:63:01:3d:d6:db:
37:d6:11:a9:98:f0:06:82:d3:d2:a8:a8:87:ff:e8:
a4:ed:80:06:9d:18:7c:36:9c:2a:06:a0:ad:08:7a:
6f:f9:2f:ae:cd:ef:7d:a3:11:bf:c0:91:02:f9:2c:
c7:77:f3:80:a5:a0:63:b0:7d:19:e0:1f:95:7f:39:
a2:44:10:3b:46:04:6e:6b:f7:b0:e1:7e:6e:2c:f2:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:5A:03:AE:6B:82:44:83:2E:0D:1E:78:C4:D4:85:56:03:F8:8F
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5a:d3:37:45:85:4b:17:78:9e:95:92:92:e9:27:a3:eb:d4:
d6:ce:e8:a2:c6:27:a4:36:32:89:e2:7b:67:ea:90:b9:c7:ea:
c8:e8:8b:fa:b4:76:a0:9c:f1:4b:70:d2:59:f1:b0:68:4b:ce:
d4:91:e4:42:d3:95:7b:50:38:1a:89:8f:fa:c9:dd:5d:2e:6c:
16:ce:ea:80:a8:ee:16:72:0a:26:41:44:65:15:ef:9b:93:6b:
ea:2a:81:85:e8:62:98:cd:ac:19:fc:f5:65:2d:bf:de:6a:9c:
1f:27:69:63:55:85:e5:e3:87:c5:39:c4:2b:c0:fb:56:e9:ad:
10:c1:bf:38:aa:1a:c9:80:00:e5:3a:56:82:d9:d8:ba:30:9e:
03:8a:0a:2c:5e:86:38:30:a0:95:cb:f4:db:70:45:51:e2:6f:
ae:b3:91:aa:5d:34:71:2d:60:05:08:3f:f6:34:a6:08:b7:eb:
a4:cf:8c:34:50:dd:5a:6a:58:e2:2b:71:ed:82:41:90:ce:88:
c2:50:48:80:c1:8d:98:69:96:e7:cb:b6:6a:9a:1c:ec:b2:b5:
ab:fc:2f:e5:13:0f:89:b3:b2:05:cb:e4:94:6d:7b:56:c4:74:
69:07:5d:a9:1b:ed:10:8b:de:e8:4c:63:c2:72:94:f7:8b:43:
1f:45:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:11:54 2026 by rpki-client