Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: xVpT3MaegdVHxswp50jqvfsdVmbLvSqTQZuBawJbgqw=
Subject key identifier: CC:18:AA:34:95:EC:A4:B8:0B:FF:99:B5:AA:AB:D5:F1:E1:06:42:AF
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019E1E359B69BD3CA9213360C205BCD5FC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0EDC
Signing time: Tue 12 May 2026 22:01:30 +0000
Manifest this update: Tue 12 May 2026 22:01:30 +0000
Manifest next update: Wed 13 May 2026 22:01:30 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: oGDYk3YRfHWzg99zCZZiijz8NmUVEIUSJxq9xEqOCLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:9b:69:bd:3c:a9:21:33:60:c2:05:bc:d5:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: May 12 22:01:30 2026 GMT
Not After : May 13 22:01:30 2026 GMT
Subject: CN=cc18aa3495eca4b80bff99b5aaabd5f1e10642af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:65:04:18:3a:13:77:80:41:de:48:7d:0b:
b9:5c:2a:bb:cf:a1:c4:c2:4a:07:90:8a:12:7d:e7:
2d:27:ab:2a:1d:27:76:66:14:2d:db:72:2f:10:1e:
10:08:b9:35:d3:81:6a:3f:7e:fe:d0:0d:51:f3:ff:
b5:1e:ce:7f:11:e0:65:fa:90:ef:2b:49:eb:2f:69:
66:12:cd:9a:51:57:1c:56:d7:ae:1d:4a:dd:11:e9:
cf:90:12:67:1f:e7:04:48:64:01:f7:5d:de:b0:64:
b5:68:81:6e:9c:e0:57:17:c3:82:3a:e2:35:5a:d0:
cc:43:04:08:73:8b:4f:f7:fb:1a:07:44:a7:57:a9:
f2:41:e7:e0:e8:48:f5:14:d2:f4:95:ba:47:88:1d:
52:a2:9c:0f:fd:93:44:b0:43:a3:8b:39:f8:cf:3f:
40:04:a2:60:d6:13:35:38:9d:0b:65:2f:6e:5e:76:
a9:63:78:01:03:cb:8c:e6:87:6f:8c:1b:1f:f3:d4:
49:0d:e3:1c:aa:25:6f:59:ea:7d:89:79:84:52:18:
9f:dd:9b:65:2c:29:aa:90:09:f3:72:4e:3c:c7:96:
df:70:bd:5b:dc:2b:0d:de:c1:1e:98:36:0d:25:ba:
f4:a4:b8:ce:c3:9e:76:0c:b0:e6:bb:6b:e1:cd:44:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:18:AA:34:95:EC:A4:B8:0B:FF:99:B5:AA:AB:D5:F1:E1:06:42:AF
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:84:eb:64:d4:a9:d3:91:5f:33:53:ad:0b:c8:73:e5:13:a7:
53:dd:6e:8f:74:f9:44:3e:9a:13:2d:8f:9a:96:89:16:4b:09:
c2:b8:7c:41:3d:9a:19:0d:58:1f:74:dd:85:c7:43:81:79:2f:
d1:41:2d:d7:9a:1f:60:bf:cc:16:39:00:1d:ef:ea:62:55:1f:
e2:cb:46:8f:3f:97:28:d2:85:7f:0e:67:f7:db:f7:79:ef:69:
02:39:cb:a5:81:2c:cb:c7:eb:15:f1:75:bf:92:04:70:2f:9b:
64:86:9f:da:1a:2a:67:2d:38:69:96:e7:ce:ba:bf:ee:a9:24:
48:02:60:9f:06:0c:c7:9c:80:98:20:95:94:50:09:6e:cb:f3:
a6:ef:58:a3:d6:b1:2a:7a:94:f5:82:ab:8a:71:d1:72:63:3b:
a5:90:78:49:74:1d:ea:97:2c:3b:0a:b9:bb:56:30:54:53:1c:
2d:9b:f0:e1:10:d0:8f:f8:81:b6:68:dd:70:06:f9:05:7b:55:
c4:45:54:28:e1:4e:37:ff:5a:84:2a:ad:13:43:17:ce:48:4b:
4e:ba:f5:61:03:3c:b4:7c:f9:f5:8b:37:5f:34:4f:7e:7f:c5:
78:2b:05:78:f1:4e:37:f6:46:99:8b:ab:bb:df:c2:88:92:9e:
b8:33:ef:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNZtpvTypITNgwgW81fyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw
NmQzODYwHhcNMjYwNTEyMjIwMTMwWhcNMjYwNTEzMjIwMTMwWjAzMTEwLwYDVQQD
EyhjYzE4YWEzNDk1ZWNhNGI4MGJmZjk5YjVhYWFiZDVmMWUxMDY0MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTplBBg6E3eAQd5IfQu5XCq7z6HE
wkoHkIoSfectJ6sqHSd2ZhQt23IvEB4QCLk104FqP37+0A1R8/+1Hs5/EeBl+pDv
K0nrL2lmEs2aUVccVteuHUrdEenPkBJnH+cESGQB913esGS1aIFunOBXF8OCOuI1
WtDMQwQIc4tP9/saB0SnV6nyQefg6Ej1FNL0lbpHiB1SopwP/ZNEsEOjizn4zz9A
BKJg1hM1OJ0LZS9uXnapY3gBA8uM5odvjBsf89RJDeMcqiVvWep9iXmEUhif3Ztl
LCmqkAnzck48x5bfcL1b3CsN3sEemDYNJbr0pLjOw552DLDmu2vhzUSJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwYqjSV7KS4C/+Ztaqr1fHhBkKvMB8GA1UdIwQY
MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt
YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4
LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiITrZNSp
05FfM1OtC8hz5ROnU91uj3T5RD6aEy2PmpaJFksJwrh8QT2aGQ1YH3TdhcdDgXkv
0UEt15ofYL/MFjkAHe/qYlUf4stGjz+XKNKFfw5n99v3ee9pAjnLpYEsy8frFfF1
v5IEcC+bZIaf2hoqZy04aZbnzrq/7qkkSAJgnwYMx5yAmCCVlFAJbsvzpu9Yo9ax
KnqU9YKrinHRcmM7pZB4SXQd6pcsOwq5u1YwVFMcLZvw4RDQj/iBtmjdcAb5BXtV
xEVUKOFON/9ahCqtE0MXzkhLTrr1YQM8tHz59Ys3XzRPfn/FeCsFePFON/ZGmYur
u9/CiJKeuDPvug==
-----END CERTIFICATE-----
Generated at Wed May 13 08:08:51 2026 by rpki-client