Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: 1/P2YQPM3sfHyY0S0Jqcse5NZnrVIMbm7rVbuOCYI6U=
Subject key identifier: 24:8E:E3:8C:FA:B7:48:49:7E:0B:34:B8:B0:C6:92:EA:89:CC:D8:A8
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 019E1C46B2B049F0B47FE2D92DDC9E31B017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0E99
Signing time: Tue 12 May 2026 13:00:55 +0000
Manifest this update: Tue 12 May 2026 13:00:55 +0000
Manifest next update: Wed 13 May 2026 13:00:55 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: 4JPgXArfVubfF4d8hfZm7ejvtCRVH7q6YPVK/gD+HFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:b2:b0:49:f0:b4:7f:e2:d9:2d:dc:9e:31:b0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: May 12 13:00:55 2026 GMT
Not After : May 13 13:00:55 2026 GMT
Subject: CN=248ee38cfab748497e0b34b8b0c692ea89ccd8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:6e:99:72:8a:51:dd:a8:db:fd:c8:96:c4:
01:f6:09:e1:44:b5:f7:89:0c:f4:41:cc:2c:64:93:
92:7c:ef:ec:ae:b2:a7:22:a9:1e:b8:01:f9:29:94:
4f:18:5b:1d:39:71:ab:32:c1:9b:a9:90:ab:29:cc:
bd:82:40:72:2f:e7:f1:cf:4e:d9:d6:bb:f4:14:ac:
78:8a:72:05:e1:4c:b5:d1:dc:92:90:f2:18:13:dc:
32:bc:12:a1:5d:e3:af:95:bb:d1:92:2f:9f:f1:c2:
54:a4:5f:b2:8f:54:fb:78:fe:2c:33:a8:12:43:6d:
6b:08:f7:43:1c:d7:8a:41:73:91:5b:4a:b9:f8:7e:
fb:a8:85:30:64:fa:25:52:c1:29:c5:33:9b:4b:41:
a9:b4:cc:1d:dd:68:b8:05:7e:2e:38:20:5c:18:0b:
ce:30:7f:be:3e:6d:04:60:09:57:a9:da:ef:34:d5:
2a:74:d9:0e:86:82:7d:59:83:3c:b0:f1:ca:09:27:
c7:23:ca:f0:4b:bf:92:93:fb:5a:08:80:51:36:87:
e2:9a:8a:db:58:1d:60:27:31:1b:9b:a9:74:22:46:
f2:53:2e:a3:c5:24:c3:57:17:66:0a:4a:61:40:e5:
74:7d:76:0d:a3:05:de:08:f8:38:c6:5a:a0:12:14:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8E:E3:8C:FA:B7:48:49:7E:0B:34:B8:B0:C6:92:EA:89:CC:D8:A8
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:df:7d:41:f0:88:ec:b5:6d:a6:db:e5:84:ec:6c:f2:13:23:
19:cb:14:fa:2d:1a:66:01:a1:2b:71:ce:0f:dc:be:50:b9:31:
5d:d3:9e:a6:c9:d8:91:6d:4f:e2:43:8a:3a:b9:20:2f:fd:73:
ee:0f:fe:45:fa:f9:07:d7:36:e5:73:16:7a:c6:f8:6e:5e:33:
00:e3:44:c1:e3:c5:4b:41:6f:76:cb:3a:3f:ec:7b:16:e8:a8:
cd:34:ba:8d:53:22:9b:7a:89:bf:10:28:a2:95:87:22:fd:6b:
7e:49:62:bd:08:03:2f:ad:6f:0b:18:8a:d0:69:76:50:de:a0:
52:5c:da:e7:db:5e:84:94:e2:aa:6c:3a:96:9e:76:76:21:52:
c1:6a:4a:f2:d9:88:1f:a9:10:13:2c:de:27:e2:c9:4b:30:47:
fc:31:61:06:24:c8:a7:be:65:1e:06:76:a9:ab:01:61:a2:f3:
8f:b2:7c:f0:c0:17:de:1a:8b:27:4c:d8:2b:be:6a:84:6b:46:
c1:6e:49:df:5c:13:98:d4:f9:bd:43:21:41:9a:18:ae:0c:f6:
e6:1b:19:12:9b:3e:14:19:10:90:c9:cc:05:00:82:b1:bb:4d:
81:d5:fe:6f:93:72:6a:2c:61:8f:c6:76:f1:73:fe:74:5c:ba:
ac:b4:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:32 2026 by rpki-client