Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.mft
File: 8aiL13Z6x3wPNmQUBdLZOjT5gkA.mft (raw, json)
Hash identifier: MkZpyPr3OzoUYgTb81US/ROBAV3XF6zZvWM3OCo5q7Q=
Subject key identifier: D5:C7:7B:1B:A8:45:FB:AB:1C:AF:3C:EB:3A:40:38:EE:D0:F8:20:49
Authority key identifier: F1:A8:8B:D7:76:7A:C7:7C:0F:36:64:14:05:D2:D9:3A:34:F9:82:40
Certificate issuer: /CN=f1a88bd7767ac77c0f36641405d2d93a34f98240
Certificate serial: 01A0DD608301D0F60A93A231799692741427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aiL13Z6x3wPNmQUBdLZOjT5gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.mft
Manifest number: 43
Signing time: Sat 26 Sep 2026 11:01:24 +0000
Manifest this update: Sat 26 Sep 2026 11:01:24 +0000
Manifest next update: Sun 27 Sep 2026 11:01:24 +0000
Files and hashes: 1: 8aiL13Z6x3wPNmQUBdLZOjT5gkA.crl (hash: mFoa6uGdZAD0FvZpAJwXSJKab+CBQ4Y5JVp8/tkabjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aiL13Z6x3wPNmQUBdLZOjT5gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:83:01:d0:f6:0a:93:a2:31:79:96:92:74:14:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a88bd7767ac77c0f36641405d2d93a34f98240
Validity
Not Before: Sep 26 11:01:24 2026 GMT
Not After : Sep 27 11:01:24 2026 GMT
Subject: CN=d5c77b1ba845fbab1caf3ceb3a4038eed0f82049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:3f:ad:9b:a8:04:cd:a6:51:29:c5:b4:87:
b2:7a:9d:df:67:23:74:d5:82:b1:74:c1:a9:c1:a7:
1d:88:86:1d:21:e3:9d:5e:8b:f4:dd:c2:a9:e4:84:
1e:36:98:c6:1b:ac:b0:8b:43:c4:38:d8:8d:95:76:
09:2b:4d:15:83:ac:00:18:f8:d2:70:5a:c2:9a:18:
79:db:c2:66:ea:3a:eb:b6:72:4c:09:f2:40:7b:5d:
3e:80:7a:de:8c:d9:97:71:c7:76:f3:cb:63:3f:8b:
7b:7d:cb:94:95:9f:3a:be:f3:13:e9:8d:6f:cd:14:
ba:43:88:bd:eb:dd:1a:95:dc:28:c1:f8:db:af:70:
dd:f4:0d:09:32:68:0a:b6:5f:29:ef:0b:97:a2:e4:
38:29:fe:3e:74:4f:8d:1c:19:43:34:75:a7:9f:8f:
2c:d3:a9:44:20:d7:a7:83:5d:81:06:e8:08:64:e1:
bf:c5:c9:52:72:47:da:54:1c:03:f0:26:f8:8b:2e:
79:c0:6d:4b:d6:0c:75:31:4e:f4:97:66:21:5b:7e:
d0:97:3a:18:6b:51:5a:58:74:f7:a1:2f:8a:d8:f0:
fb:5a:9a:c9:72:df:73:45:bc:1f:b1:a2:66:82:ac:
f5:15:91:5b:57:61:58:63:b9:84:96:e9:85:e5:9b:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C7:7B:1B:A8:45:FB:AB:1C:AF:3C:EB:3A:40:38:EE:D0:F8:20:49
X509v3 Authority Key Identifier:
keyid:F1:A8:8B:D7:76:7A:C7:7C:0F:36:64:14:05:D2:D9:3A:34:F9:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aiL13Z6x3wPNmQUBdLZOjT5gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/58b531-7f99-4c33-9b06-6c2d7f643faf/1/8aiL13Z6x3wPNmQUBdLZOjT5gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b3:da:e0:c5:a2:51:42:1b:f3:3e:eb:74:be:77:8b:fa:7f:
e7:e5:05:6c:6e:86:a8:9d:bc:26:c5:20:5c:fe:23:91:91:65:
38:e6:8f:69:57:f8:61:0c:64:6d:ee:40:dc:0b:86:cb:c6:76:
9d:01:75:b2:20:b2:53:ea:1c:30:4a:da:43:87:31:05:ae:bf:
38:b7:ff:32:ce:1a:c9:6a:c0:38:4c:b1:dc:39:9a:e4:70:75:
f6:9b:24:3b:a0:dc:79:ea:46:c4:f1:fe:ae:5e:59:8b:a6:34:
3e:b2:cc:c7:24:2f:9f:1e:7d:91:9b:af:2a:2e:80:9a:51:b9:
92:67:a3:9f:28:d5:ef:8f:ea:f2:0d:f5:df:28:df:e8:b9:e3:
c6:e2:1e:c3:bd:23:be:6a:0a:73:f5:43:d3:66:18:0f:27:0b:
0f:4f:00:4a:2e:73:9e:4b:b9:35:4f:33:7d:37:12:dc:4f:2d:
53:67:e8:2a:1f:20:3c:73:5e:2e:de:77:1c:1d:0c:0f:a5:6b:
66:81:a9:9c:e2:75:f9:5d:47:cb:0c:31:bc:eb:5c:39:ce:1c:
0d:4d:2d:0a:de:c1:df:24:55:61:b0:fb:c7:eb:6e:5b:b4:29:
39:eb:91:87:9b:c0:d0:6c:5c:3b:20:bc:d3:53:ed:45:5b:b7:
be:13:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:36:42 2026 by rpki-client