Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: gCLEtwA7S4fJvMmzMhxgjp1KUnuFy8nraEfcZzprNVw=
Subject key identifier: BE:F1:C0:9E:66:7F:29:8C:9C:1B:0B:F2:66:21:1E:EB:D4:96:11:EB
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019F905A510E98A2A7F85847F77E0244275B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 19:01:05 +0000
Manifest this update: Thu 23 Jul 2026 19:01:05 +0000
Manifest next update: Fri 24 Jul 2026 19:01:05 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: PDNvrZtjh0FpByTM1mz5diP5IDpEfVKvdxxmPQm0JkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:51:0e:98:a2:a7:f8:58:47:f7:7e:02:44:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Jul 23 19:01:05 2026 GMT
Not After : Jul 24 19:01:05 2026 GMT
Subject: CN=bef1c09e667f298c9c1b0bf266211eebd49611eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:0b:3f:24:74:c2:0f:7f:73:fc:04:f4:2f:
64:27:8e:d1:02:2a:18:63:31:e9:c8:87:0a:e5:ea:
ae:01:5c:e7:24:ce:a1:67:4e:ec:9f:58:71:80:0c:
07:ee:0b:78:83:79:bf:61:02:42:9f:25:e4:2e:20:
8a:92:b0:a6:4f:8f:21:20:2d:79:65:e2:46:e2:63:
db:65:da:f3:87:4e:6d:0f:7d:54:b3:70:4b:89:48:
8e:03:10:83:90:11:da:fc:cc:ab:e0:3a:ca:04:d5:
10:11:e9:6f:65:b3:68:4d:ee:b0:8e:4a:59:a9:a0:
d6:f7:ec:14:6b:18:6a:2e:a5:db:fd:ab:52:7a:12:
7c:f3:a3:0d:da:97:e9:42:9d:31:82:f5:d4:f8:6f:
16:2a:c0:67:8e:49:4c:07:e2:a7:b5:e3:cc:de:de:
5a:26:1d:8b:53:e7:b9:94:ef:54:13:9e:69:d7:57:
50:62:b7:82:dd:0c:14:bb:95:fa:fc:b9:07:c3:8d:
be:f5:a9:32:3d:ad:02:55:ab:5f:6d:9c:21:36:47:
d0:c1:3d:60:60:bf:b1:a2:6d:54:dd:c7:ba:21:0a:
6b:5e:42:68:eb:d7:e9:d3:26:b6:28:2f:b3:34:3b:
b5:b7:21:37:e5:07:96:31:5c:fb:c2:e9:7f:c4:b5:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:C0:9E:66:7F:29:8C:9C:1B:0B:F2:66:21:1E:EB:D4:96:11:EB
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:24:6f:3c:c5:fd:38:7d:1d:2b:69:a5:c2:e7:eb:b4:84:
8e:f9:5a:bb:c7:c9:74:33:fa:6d:fa:e2:44:52:0f:1e:15:22:
73:9c:f3:23:db:fd:c0:b5:97:37:55:0b:c1:1d:43:dd:90:8c:
6d:84:db:4f:bc:85:1c:dc:49:ce:7c:2a:59:d1:71:e8:c1:c4:
63:34:08:c2:47:cb:29:6c:80:d6:50:2d:72:21:05:59:37:87:
15:24:1f:e6:66:9c:fa:db:57:f6:2e:12:b9:5f:45:a9:f7:3c:
75:aa:9c:8f:1c:47:09:ff:73:5c:a1:15:9e:6d:9e:30:74:98:
7e:fd:37:86:6b:ae:80:26:d8:ae:d1:6a:3c:49:67:fb:70:1f:
1c:b4:79:cb:a8:dc:db:a4:51:b1:94:1a:68:98:fd:8a:1d:18:
54:fd:ee:13:13:f4:c0:d6:fd:12:1e:17:29:4f:8f:16:27:73:
86:49:70:4f:42:c3:d6:01:c3:ca:a2:25:ca:2c:33:f1:51:4b:
33:f8:19:99:94:6f:eb:27:d7:91:2b:ac:00:4d:e7:98:ae:bd:
0e:b8:82:84:79:b3:88:c6:f8:59:19:d3:47:76:a4:30:a3:40:
0b:8d:ae:d5:b7:da:71:24:82:33:ba:ca:5c:ed:8f:0e:15:6f:
a8:bd:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:49 2026 by rpki-client