Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft (raw, json)
Hash identifier: V6Cen1/H5v4jc5DNWOB5E7sS9TVB6Ahcylr+rjlpH2Q=
Subject key identifier: DE:A6:36:EF:2B:69:93:90:93:FB:96:02:04:B4:A7:48:8E:AD:3E:B5
Authority key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
Certificate issuer: /CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Certificate serial: 019F9248F9CC70B809A0D52EFD605D2193EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
Manifest number: 01CA
Signing time: Fri 24 Jul 2026 04:01:23 +0000
Manifest this update: Fri 24 Jul 2026 04:01:23 +0000
Manifest next update: Sat 25 Jul 2026 04:01:23 +0000
Files and hashes: 1: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl (hash: fRvyKLOD1fDe89Y5AaD8QoOMloyRHf2A1P9mMDFXEIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:f9:cc:70:b8:09:a0:d5:2e:fd:60:5d:21:93:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Validity
Not Before: Jul 24 04:01:23 2026 GMT
Not After : Jul 25 04:01:23 2026 GMT
Subject: CN=dea636ef2b69939093fb960204b4a7488ead3eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:0f:34:dd:6d:ef:0c:6d:a9:f7:99:f5:9f:
62:36:cf:2b:2b:dd:24:f5:30:ce:89:e8:3c:8c:43:
a3:53:09:6b:b1:cf:43:50:e8:36:ae:18:01:40:bf:
06:a2:b7:8c:73:52:33:f6:bf:3c:c7:0b:35:75:66:
64:62:a1:88:67:97:38:18:13:a0:88:97:3b:c1:6d:
7e:01:2e:fa:9e:76:4f:70:45:32:4a:26:1b:d8:85:
a8:ea:99:ac:86:55:be:51:2e:86:7e:38:60:e2:4d:
1d:bd:79:e9:f5:19:7c:12:37:e3:b2:35:2b:75:45:
e9:b0:d0:f1:a7:fe:a5:60:13:73:65:6f:c5:a6:f4:
b9:cf:db:63:73:ea:9c:57:93:7b:99:70:5b:2e:eb:
ed:5c:8d:32:ce:62:27:2c:44:98:73:50:ca:ab:39:
7c:cd:1a:01:08:c6:b3:f2:3c:60:2c:81:43:2d:c7:
68:18:0d:f3:d4:3e:57:89:9b:02:11:3f:0f:f6:7f:
61:fa:a4:af:19:6e:cc:da:e0:67:ae:61:b5:bb:b7:
02:f9:27:08:f5:4e:35:6a:99:dd:fd:6b:80:b1:06:
6b:17:2c:e2:bd:c8:38:a4:e8:9c:ae:b3:95:90:f7:
fe:36:af:fb:7e:eb:29:26:84:62:a4:fd:22:1a:f8:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:36:EF:2B:69:93:90:93:FB:96:02:04:B4:A7:48:8E:AD:3E:B5
X509v3 Authority Key Identifier:
keyid:F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:df:09:85:8c:f5:13:15:53:80:3c:4b:39:cd:30:7b:9d:57:
ae:60:e7:24:b0:71:e7:64:f4:ee:30:69:b0:0c:c2:e9:54:42:
15:aa:6b:1e:3a:36:f9:6b:1d:f1:9f:a4:17:ec:36:a0:a8:d0:
d5:0d:6d:c1:70:39:26:bb:9e:f9:12:d7:bb:3e:de:b6:11:ee:
fd:a3:48:ee:2a:78:0e:84:fd:bf:b5:54:a1:77:b6:70:e8:6d:
16:9a:72:98:ed:3f:dc:fc:93:36:4e:84:c2:38:ac:8e:44:37:
6d:a8:6a:26:31:dd:b0:e0:b2:25:e4:07:4e:52:56:0c:3f:72:
2d:c8:90:fe:a7:e1:29:c8:79:49:26:df:08:07:75:89:f7:7e:
82:9a:1a:dc:b2:0c:9e:a2:e2:c5:05:b6:7d:e1:4b:82:73:9e:
4f:6e:a6:bb:45:1c:3f:c3:45:35:f9:f6:a2:f3:54:90:d7:96:
a9:8e:1b:14:dd:b7:bb:bf:ec:b7:f1:7a:53:ab:f2:83:15:40:
21:e6:eb:57:fa:20:f2:dc:89:2c:f7:11:5c:df:70:ef:3f:a8:
0b:99:9d:53:7a:0a:b5:54:3c:da:f3:3d:84:40:05:48:cc:b2:
51:64:ee:70:fa:e5:c2:b3:5b:7b:29:a0:63:6e:68:ac:69:88:
b9:eb:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:45 2026 by rpki-client