Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: dPjZeUpItIvCc17ZVzNuRHbopExwWnIXyOWYQiNKrBo=
Subject key identifier: AC:22:B7:39:E9:D8:B7:A0:89:EE:B7:23:7D:CF:DB:D1:36:CB:5F:3C
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019F8FB51913DFF9ED24E132FA9D7174C16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 08AF
Signing time: Thu 23 Jul 2026 16:00:37 +0000
Manifest this update: Thu 23 Jul 2026 16:00:37 +0000
Manifest next update: Fri 24 Jul 2026 16:00:37 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: RPREfIaXZmj46HMmsRKdVcQg4dSy1CS+GxEAnziN9JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:19:13:df:f9:ed:24:e1:32:fa:9d:71:74:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jul 23 16:00:37 2026 GMT
Not After : Jul 24 16:00:37 2026 GMT
Subject: CN=ac22b739e9d8b7a089eeb7237dcfdbd136cb5f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:78:8c:b5:63:be:69:71:65:d2:ec:fe:36:
81:66:5b:09:24:dc:9d:d5:8e:c5:56:17:a7:62:6c:
5b:f9:ce:ea:50:88:c2:96:89:f8:79:e3:9c:12:d2:
7d:ac:ef:3d:24:3e:38:0c:85:0b:c2:03:ad:1c:9c:
44:79:b8:01:fe:00:81:6c:72:61:04:70:39:94:4a:
85:1d:98:c7:71:47:76:c7:59:58:9e:7b:2e:a4:e4:
1b:0c:22:80:5b:6f:1e:1b:be:95:94:d2:28:55:96:
a4:63:5a:08:6e:5b:7f:89:14:b9:78:39:ff:d9:da:
6a:67:e1:c5:dd:55:c4:6a:20:e5:f5:6d:d7:aa:21:
26:7e:23:9c:32:fd:6d:0f:dd:09:5a:3d:fe:2b:2f:
84:17:92:0d:ca:19:27:8f:36:73:53:c1:47:3c:d1:
7d:f0:ac:08:1f:a6:a8:50:e0:4b:0a:df:1f:0e:bd:
bf:4d:e0:2a:f0:88:4e:ff:1d:a1:da:e4:75:e9:bf:
7e:3a:54:a5:42:1f:2a:5e:59:13:38:da:e3:c9:28:
7b:85:3a:4e:dc:3b:e4:f7:45:c7:f9:ae:53:f3:4b:
e7:3e:bc:58:a6:72:d0:bc:9b:3a:3a:03:22:0f:29:
63:a2:96:4c:65:af:31:f9:48:44:bb:10:16:47:f1:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:B7:39:E9:D8:B7:A0:89:EE:B7:23:7D:CF:DB:D1:36:CB:5F:3C
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3c:37:62:b1:43:3b:d0:b6:44:27:05:39:b6:b4:0a:e3:a9:
b5:67:e1:2c:54:f3:43:a7:42:a4:78:ff:f4:72:10:3d:34:34:
2f:17:e2:75:9c:2c:b5:3b:ea:7e:df:34:1d:95:b3:07:78:73:
86:38:e3:d4:29:9f:3f:27:ef:ba:cc:d8:66:ad:f9:2f:01:13:
c9:94:ad:6d:e6:1e:86:31:26:1f:46:a6:33:d6:30:6f:c6:70:
05:09:cd:3f:3f:bd:e9:42:b4:e2:c9:4a:b5:1a:b1:5e:a2:c6:
c3:38:b3:36:f2:5c:9d:d6:e4:e1:4c:70:9f:22:74:ce:f5:4d:
48:21:7f:4e:be:fa:95:07:24:dc:51:01:62:6c:6d:1d:98:29:
bd:a0:c3:c9:eb:7c:61:28:b1:56:89:f6:37:a3:49:36:20:09:
6d:b8:67:95:64:de:12:0f:2e:14:52:7e:64:2b:20:08:a7:50:
fd:5d:fc:36:80:03:99:3b:21:96:2b:2c:12:02:ea:87:70:8a:
8d:59:ef:4a:95:d3:1b:e6:76:47:7a:cc:a5:74:f7:7a:92:56:
ee:7e:92:15:78:b8:13:b4:be:bf:da:f3:fe:b8:22:6f:6b:2b:
ad:76:b8:41:eb:c2:54:38:6c:e6:d1:15:5c:e1:d7:97:8a:7c:
98:e1:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:39 2026 by rpki-client