Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: W9Ht99g7A1lZ2CYMsliPMtnibkkPVh4j7t58BGGN9zo=
Subject key identifier: D5:F8:6F:CA:25:04:4B:4E:F4:9B:BD:4C:AF:A4:2E:36:96:4E:5A:BD
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 019E20C86C57952EFA3686FFD850EDD52502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0F74
Signing time: Wed 13 May 2026 10:01:06 +0000
Manifest this update: Wed 13 May 2026 10:01:06 +0000
Manifest next update: Thu 14 May 2026 10:01:06 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: cVpJGKTs474GaVQ9wzbhJlPA8ESSoaR+iI1VRIrDgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:6c:57:95:2e:fa:36:86:ff:d8:50:ed:d5:25:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: May 13 10:01:06 2026 GMT
Not After : May 14 10:01:06 2026 GMT
Subject: CN=d5f86fca25044b4ef49bbd4cafa42e36964e5abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:fc:a9:5c:96:94:33:0d:09:4a:07:55:29:
bc:5b:7d:05:95:81:9e:56:4d:cc:d3:1b:73:52:c0:
00:2f:68:85:5b:07:97:f4:46:3d:22:11:df:fe:21:
f5:2e:25:95:df:38:52:36:ca:77:30:0d:18:0b:34:
61:f1:79:74:fe:26:eb:2a:c6:84:e6:c4:da:82:c8:
9c:f3:3e:c2:a8:0b:67:d3:7b:1a:05:30:72:30:19:
87:5a:7e:15:48:d4:db:ba:be:bf:c5:f5:72:5b:43:
22:38:2b:48:cb:3a:13:52:77:5b:d7:48:3b:d4:33:
e4:01:01:28:59:8a:5f:54:5a:b2:56:00:64:e1:fa:
46:e7:c0:c2:6b:17:7a:14:e2:09:50:c9:96:a7:21:
5d:47:d1:fa:91:06:b1:a2:f9:01:f6:1f:6d:76:4c:
7c:83:a0:2e:a3:86:c7:d2:dc:1d:0f:43:dd:8e:65:
ef:3a:9a:88:6d:50:ec:4f:eb:6e:5a:f3:ad:58:16:
6e:b1:f5:9e:c7:e6:2c:be:b2:30:58:97:82:8c:7a:
86:62:4e:65:4c:7d:82:95:8d:98:0c:16:98:c5:16:
e4:8b:ae:ba:ea:b0:98:d3:96:96:9c:a7:be:47:af:
bc:30:b1:30:83:0d:1e:a6:cd:b0:a9:be:86:fc:b4:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F8:6F:CA:25:04:4B:4E:F4:9B:BD:4C:AF:A4:2E:36:96:4E:5A:BD
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:0f:b0:a3:61:1f:84:55:b1:7f:df:49:d7:fc:4b:f1:bf:4e:
fe:b8:5e:3a:1c:9c:3f:ac:ea:cf:61:09:51:1c:e2:ae:0b:b3:
4b:c7:fe:83:d4:ea:b4:16:9c:33:6e:2d:b4:ff:a3:1e:a4:00:
aa:6b:82:18:a2:8d:10:69:ea:ac:44:fc:3a:71:fb:8b:cf:8b:
3b:a8:24:99:fa:49:a7:b1:6c:13:7b:22:5e:e5:d7:95:01:7c:
db:fe:5b:23:8f:15:82:ff:4c:ac:1c:f5:cc:17:29:f8:ec:49:
1d:ac:54:cb:10:40:1b:c7:af:a9:02:91:24:1a:41:fc:4e:3f:
41:47:79:ee:08:12:c2:c6:cc:48:bd:59:ba:07:38:ff:5f:42:
a6:d1:f5:3f:a5:0f:98:ae:fe:dd:a5:22:1c:96:a4:94:0f:6b:
84:97:75:6a:eb:85:61:d6:07:29:0e:55:0a:1b:bb:b8:80:e7:
7e:c4:94:ce:e7:c4:c3:08:18:5e:97:0c:52:0e:70:fa:d4:df:
4d:49:22:8c:6d:f1:ec:fc:44:35:94:4e:19:f4:de:d1:90:15:
c2:35:88:b5:33:13:af:42:72:20:c8:53:f2:d1:44:1c:b4:8b:
57:85:fd:61:34:e0:31:58:ba:7d:7c:cb:7d:ba:8e:c6:5e:f7:
ac:ed:de:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyGxXlS76Nob/2FDt1SUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTc2MGNmMTFlZjJiODYyMTg3YjA1ZTVkNzUxYzczNGM2
MzRiNDUwHhcNMjYwNTEzMTAwMTA2WhcNMjYwNTE0MTAwMTA2WjAzMTEwLwYDVQQD
EyhkNWY4NmZjYTI1MDQ0YjRlZjQ5YmJkNGNhZmE0MmUzNjk2NGU1YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/8qVyWlDMNCUoHVSm8W30FlYGe
Vk3M0xtzUsAAL2iFWweX9EY9IhHf/iH1LiWV3zhSNsp3MA0YCzRh8Xl0/ibrKsaE
5sTagsic8z7CqAtn03saBTByMBmHWn4VSNTbur6/xfVyW0MiOCtIyzoTUndb10g7
1DPkAQEoWYpfVFqyVgBk4fpG58DCaxd6FOIJUMmWpyFdR9H6kQaxovkB9h9tdkx8
g6Auo4bH0twdD0PdjmXvOpqIbVDsT+tuWvOtWBZusfWex+YsvrIwWJeCjHqGYk5l
TH2ClY2YDBaYxRbki6666rCY05aWnKe+R6+8MLEwgw0eps2wqb6G/LSY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX4b8olBEtO9Ju9TK+kLjaWTlq9MB8GA1UdIwQY
MBaAFPCXYM8R7yuGIYewXl11HHNMY0tFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2It
MzYwMjI0NDZmMDIzLzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2ItMzYwMjI0NDZmMDIz
LzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxw+wo2Ef
hFWxf99J1/xL8b9O/rheOhycP6zqz2EJURzirguzS8f+g9TqtBacM24ttP+jHqQA
qmuCGKKNEGnqrET8OnH7i8+LO6gkmfpJp7FsE3siXuXXlQF82/5bI48Vgv9MrBz1
zBcp+OxJHaxUyxBAG8evqQKRJBpB/E4/QUd57ggSwsbMSL1Zugc4/19CptH1P6UP
mK7+3aUiHJaklA9rhJd1auuFYdYHKQ5VChu7uIDnfsSUzufEwwgYXpcMUg5w+tTf
TUkijG3x7PxENZROGfTe0ZAVwjWItTMTr0JyIMhT8tFEHLSLV4X9YTTgMVi6fXzL
fbqOxl73rO3e/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 16:33:17 2026 by rpki-client