Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: 7lD/XzSUMONLYtDB28qJ90WdxQQtyTsmEj3mTw5vaSU=
Subject key identifier: EF:D1:A9:EA:0F:DF:C9:DA:E6:5E:22:CB:55:E1:E8:65:01:E7:DA:8B
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 01A0D4CACA5F69220737CB9FAAB60AC2DEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 19:00:54 +0000
Manifest this update: Thu 24 Sep 2026 19:00:54 +0000
Manifest next update: Fri 25 Sep 2026 19:00:54 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: DEs4RCbHD8zPxFCdLFUzjkCqh75O7Ub8DYYpatcjTog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:ca:5f:69:22:07:37:cb:9f:aa:b6:0a:c2:de:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Sep 24 19:00:54 2026 GMT
Not After : Sep 25 19:00:54 2026 GMT
Subject: CN=efd1a9ea0fdfc9dae65e22cb55e1e86501e7da8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:65:7d:86:00:94:8e:b8:f1:aa:ee:89:d0:
7d:c3:09:fc:fb:98:be:16:5f:85:f4:0f:8e:01:bd:
4d:11:75:cf:d4:25:be:6f:81:7e:21:8f:ec:8d:be:
1f:5d:d0:fc:b1:f2:81:80:d4:99:d5:b5:39:7c:b6:
93:1f:d4:02:6d:19:65:06:cf:f9:91:10:8e:ba:7a:
e2:d8:3e:f0:90:e6:29:e2:90:1b:2e:5a:2a:cd:00:
3d:62:8e:b5:93:8e:52:21:62:73:39:77:b7:b0:81:
ac:71:12:70:33:d6:fa:ac:69:7b:eb:31:b3:8d:d9:
b6:5a:b3:2e:be:54:18:3e:24:68:28:00:b6:cc:89:
59:76:40:1c:78:dc:59:2d:35:dd:4d:27:47:99:95:
24:82:90:6e:f8:bb:59:e9:b0:30:20:65:6b:34:f2:
5c:04:88:b9:1b:1a:21:6a:e9:85:6c:c9:4a:bd:95:
b3:3c:47:43:b2:59:ac:72:62:65:c4:cc:b9:a9:96:
c2:af:26:99:2d:69:7d:bf:ed:a3:85:e6:ff:f8:45:
b0:45:04:c8:2c:bf:ba:ef:61:47:6a:b4:16:71:d8:
5d:d0:24:1a:7c:36:2f:b7:77:82:95:ca:94:04:1d:
70:e2:02:bf:bb:b1:cf:44:63:51:aa:d5:b5:f0:a3:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:A9:EA:0F:DF:C9:DA:E6:5E:22:CB:55:E1:E8:65:01:E7:DA:8B
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:06:d5:d8:a4:ba:50:f4:e5:32:d6:97:16:85:3c:3b:af:15:
5c:ff:f2:0b:50:53:98:88:74:4a:77:35:16:e7:44:ff:8d:20:
13:ff:2e:bd:15:b3:02:f8:d5:60:ff:f6:0a:1a:fa:3a:15:21:
7f:64:ea:0f:02:bd:8e:e2:00:e3:87:04:06:3c:9a:f4:be:38:
22:3e:09:e9:c5:5c:df:e5:50:4a:4f:13:9e:04:9a:f1:d3:de:
6c:ed:7a:e6:17:82:f4:84:a8:3e:d5:b9:7d:48:eb:71:70:6a:
5c:f4:d5:63:39:b8:ab:52:38:65:c6:67:64:10:c9:3d:14:f6:
03:9d:66:de:ca:50:b3:57:cf:ff:22:a1:6c:79:17:38:be:b0:
bc:55:06:b8:7c:c2:25:8a:01:df:f3:ad:a4:9c:b5:2d:9f:91:
2a:9f:3b:c7:55:3c:f2:3b:52:5b:80:e4:5c:bc:fe:b6:a0:5b:
95:1d:25:17:bd:aa:fa:6c:7c:fa:38:3d:bc:9c:3f:42:ed:af:
46:38:cc:44:d4:33:49:68:56:64:cf:40:77:eb:6d:a5:1e:b3:
e6:b3:95:13:93:4c:93:b6:df:a0:6f:ad:68:0d:31:d0:2e:48:
e1:de:2a:93:b7:3c:83:a7:fe:c0:65:f7:86:a6:7f:cb:0d:8c:
74:c6:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:09:10 2026 by rpki-client