Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: nBX7v9iTQB02xcfXb2zdZ6gjOLIfV7QTGAnv9rWpJV8=
Subject key identifier: D7:36:17:C0:66:01:B0:4A:CF:81:E7:13:E4:EA:A3:43:58:B0:85:48
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019E1C7D781F0C94629DCD7ABA9C42B09982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 08D1
Signing time: Tue 12 May 2026 14:00:45 +0000
Manifest this update: Tue 12 May 2026 14:00:45 +0000
Manifest next update: Wed 13 May 2026 14:00:45 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: Xvpp1ofeLx4mAf+ux8tPPlqOzkm1QCRQDNf675nJnk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:78:1f:0c:94:62:9d:cd:7a:ba:9c:42:b0:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: May 12 14:00:45 2026 GMT
Not After : May 13 14:00:45 2026 GMT
Subject: CN=d73617c06601b04acf81e713e4eaa34358b08548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:fe:e5:0c:af:71:19:4b:24:62:0b:61:d3:
ba:73:8c:cc:b5:4e:c7:2b:55:a4:a2:67:a6:26:af:
0a:aa:4a:d0:c0:72:b6:72:a5:d0:d3:9f:cd:b9:68:
6d:46:54:3c:db:8e:83:f8:e7:45:e3:63:d6:ae:77:
72:fd:d0:75:9d:82:ec:b6:3a:aa:07:81:4f:dd:99:
11:e0:e3:0f:4e:90:d8:82:69:d0:72:08:42:c0:b0:
d7:a1:80:5c:89:21:6b:36:5d:74:d7:68:e2:51:9c:
25:31:57:c6:29:72:f7:92:84:6d:4d:94:9c:81:14:
28:97:b4:c4:71:82:e0:73:a1:91:4e:b2:76:e6:1a:
c7:ef:fc:45:46:31:1c:28:bd:de:70:fc:00:61:14:
e0:ef:ab:5a:60:33:c2:8c:53:07:f2:47:84:9a:d9:
c7:03:20:a5:e9:99:cc:30:be:08:23:fa:ad:cc:6b:
a8:1f:e3:8b:6c:1a:b1:71:bc:ad:5c:05:92:01:ff:
c7:4d:90:bd:69:27:1a:df:4e:4b:cc:90:36:13:32:
20:03:cd:c9:46:e4:d0:f7:d4:83:82:9e:ea:8d:02:
87:fa:52:37:c8:19:8b:51:f3:d7:6d:0e:5c:f9:9f:
b1:6a:ef:ec:94:c5:5a:cc:a1:6c:91:fa:a3:dd:0d:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:17:C0:66:01:B0:4A:CF:81:E7:13:E4:EA:A3:43:58:B0:85:48
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:f0:4f:db:58:b2:97:df:6a:4c:5b:d6:b0:cb:91:8a:45:
e6:d0:ea:44:8f:f8:58:73:70:91:3c:ad:6d:aa:98:87:20:a4:
ad:d4:49:f6:00:5a:90:5d:03:02:ff:71:c5:7d:6b:52:56:4e:
c1:0d:c9:58:2e:23:eb:48:a0:44:63:ed:a8:d0:54:8e:5f:82:
9e:c8:ba:3b:57:cb:21:dc:b5:c8:95:2d:87:b0:87:12:53:0e:
b3:70:42:9b:d0:c3:51:5c:9a:e6:af:a2:fc:7d:d0:ce:e5:2f:
3b:4e:35:ec:b6:16:05:b8:b0:f7:fe:7b:8e:1c:bb:dc:c8:2f:
1a:a2:ff:83:91:8a:12:fe:55:38:30:6d:74:49:ab:0e:7a:24:
83:63:2f:39:e2:8a:0a:92:8e:42:27:bf:0b:78:4f:47:52:f2:
4b:e9:3b:c2:d0:d9:e7:c8:21:32:42:4f:d3:5f:7d:5d:a9:7c:
dd:4a:bc:5b:61:3f:92:96:bb:08:66:81:64:c0:45:c7:89:fc:
32:64:51:36:ce:e7:fa:b4:9c:d3:49:e9:dc:0e:50:51:eb:36:
9a:ea:0e:16:09:9d:b6:fb:7c:bd:a1:4c:09:c0:f3:2e:33:ba:
61:fe:38:33:df:4d:bb:05:b7:36:6c:9b:fe:ce:b5:2f:fd:dd:
44:40:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:12 2026 by rpki-client