Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: IamDvdVF8++OYcTt4YYIS2e5Fsi6s8F32INFind68YU=
Subject key identifier: 13:D2:5D:89:3D:49:7E:36:38:99:E2:EF:E6:37:F8:AA:B8:09:50:55
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01A0CDB616656D08D2209132C7077CECA371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 17A4
Signing time: Wed 23 Sep 2026 10:00:57 +0000
Manifest this update: Wed 23 Sep 2026 10:00:57 +0000
Manifest next update: Thu 24 Sep 2026 10:00:57 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: jM/up/tUJy6Jpvw778vKcXIRIEiTpg/i59k08g/4UhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:16:65:6d:08:d2:20:91:32:c7:07:7c:ec:a3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Sep 23 10:00:57 2026 GMT
Not After : Sep 24 10:00:57 2026 GMT
Subject: CN=13d25d893d497e363899e2efe637f8aab8095055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:7b:b8:ea:b2:d8:15:3e:64:0c:a6:e3:66:
a8:62:17:ef:01:2c:1f:5c:5b:7f:0a:94:5d:f7:93:
cd:e4:35:53:87:56:0e:0c:e2:f3:09:a7:d6:00:3d:
98:b5:4f:ac:29:e1:8f:1f:13:6b:e4:78:21:a5:f7:
33:97:9c:84:ed:c9:63:1c:18:17:b7:a2:c1:d4:db:
83:41:24:91:64:bb:46:c0:c5:75:29:a1:a2:fd:38:
57:06:c8:9f:aa:b6:c6:36:a8:16:00:74:b2:c6:2f:
fd:96:93:d0:2b:d1:af:e8:e3:a3:2d:66:b3:4b:a8:
5d:84:fd:32:40:98:f6:e3:7a:17:b6:a9:ed:83:c8:
3d:f1:f2:c7:d0:62:e4:f2:46:58:26:03:46:61:cd:
58:2a:d5:96:38:3c:ee:a6:92:5e:7c:0f:8f:d5:63:
4b:54:25:a5:34:27:31:c5:09:7c:a1:a8:e2:b6:65:
1c:8b:98:30:e6:6d:de:2a:20:f9:9e:9d:d0:7e:b5:
a9:07:d5:2e:6d:e7:19:06:80:f7:7f:98:78:d5:0d:
65:1e:4e:18:67:05:5f:92:8e:e2:d0:67:92:91:43:
f5:3c:8d:05:fd:4d:96:41:a0:06:c8:ca:77:50:e7:
f3:ef:dc:76:3c:d8:6d:c6:3e:8c:97:38:3f:d6:32:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:5D:89:3D:49:7E:36:38:99:E2:EF:E6:37:F8:AA:B8:09:50:55
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:86:06:4d:be:bc:b5:83:d5:34:36:08:3b:38:c4:12:80:b8:
06:b2:11:9b:54:fe:84:ce:6a:8a:49:05:61:66:ef:fc:9e:af:
c3:e3:04:c9:d3:61:f7:5a:43:05:5c:88:82:36:43:0d:cb:f2:
a0:9a:c3:cf:46:3f:b4:49:c8:2a:f1:64:56:8c:1f:8b:38:0f:
51:12:a4:da:b3:c0:2b:fd:e2:66:6d:e0:a4:55:cd:c7:52:ea:
5c:44:5a:a4:4c:a5:29:00:a0:dc:89:93:7f:d3:f1:fc:c4:d5:
32:05:b4:89:2a:e6:1c:b8:41:c5:ea:af:8e:86:7c:95:3a:60:
ad:94:7a:d1:db:b6:06:52:c7:44:e3:43:59:c4:c7:44:49:7c:
2e:56:2b:ae:f7:90:a0:6f:b5:74:b1:55:c4:4b:18:24:78:1d:
f3:64:6d:77:e5:3d:4d:69:af:05:cc:09:8d:18:63:c1:4e:9a:
30:26:37:ac:72:ca:4d:8c:cd:a4:73:00:00:7c:d8:75:84:26:
47:89:5a:e5:40:7d:a2:57:fe:28:51:45:a4:1d:1f:1c:a8:ec:
a1:9c:bd:1f:97:95:a5:1e:e3:63:77:66:0f:45:ef:76:44:e2:
37:aa:58:4d:3b:ba:68:0c:c2:7c:6e:fd:17:60:f0:16:b4:d4:
ca:6d:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:54:18 2026 by rpki-client