Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: aggZaxHDg2gFF6VuhtubL3QHBlBBj7ZHsApoqY3tLz4=
Subject key identifier: A8:F6:F0:D9:9D:BB:74:E9:9C:6C:CB:7E:4D:B4:44:B1:99:67:D3:27
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019F8F10551C9992B8805AC32EBFD80C0142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0F9B
Signing time: Thu 23 Jul 2026 13:00:39 +0000
Manifest this update: Thu 23 Jul 2026 13:00:39 +0000
Manifest next update: Fri 24 Jul 2026 13:00:39 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: UzNtesLRZwm2v2CLUn8+FMycvGVK9QM0V9aARHIcJz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:55:1c:99:92:b8:80:5a:c3:2e:bf:d8:0c:01:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Jul 23 13:00:39 2026 GMT
Not After : Jul 24 13:00:39 2026 GMT
Subject: CN=a8f6f0d99dbb74e99c6ccb7e4db444b19967d327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:86:41:87:b1:7e:a1:c3:b2:ed:7a:ba:7c:
2d:1b:1b:83:39:ff:0c:6f:6c:55:e9:53:c7:27:e4:
88:22:56:85:27:5f:24:e2:56:36:05:37:54:eb:70:
d4:f1:fb:b3:8e:20:f3:d1:17:ea:ae:64:61:68:c4:
51:8d:d8:cb:0d:e7:c8:11:81:28:67:6f:f5:f3:de:
fc:53:d2:dc:d5:63:12:a9:2e:90:6d:9d:68:aa:47:
4d:bb:b0:93:90:03:5b:b4:a2:6a:71:b6:b1:52:ea:
d7:8e:6e:b8:19:6f:50:f9:a7:96:98:c8:d5:8d:8e:
b5:7f:2f:a5:e4:c7:d5:97:bc:fb:db:c8:0f:d3:ab:
46:76:c2:cd:73:db:6d:7b:0c:b9:f9:8f:ec:6c:3c:
a1:54:9c:0d:0d:f8:0f:40:5e:06:d4:3e:be:46:4b:
c9:41:38:2b:4f:95:40:62:98:85:7b:0d:d3:8b:ac:
58:36:bd:96:10:04:39:f6:88:5d:1a:a5:46:d2:73:
44:51:30:67:b9:75:d3:87:a6:0c:5f:f6:a2:69:44:
b6:f9:b9:2a:94:5e:d0:c5:0b:12:3e:87:9a:d1:3a:
42:81:76:e0:8e:f3:60:22:ed:46:6e:70:bf:f0:38:
74:1c:eb:c0:11:05:48:bb:85:f9:45:7a:80:7e:00:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:F0:D9:9D:BB:74:E9:9C:6C:CB:7E:4D:B4:44:B1:99:67:D3:27
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:7f:78:ed:17:b4:c7:a8:50:27:84:3a:7d:54:48:59:04:
53:b1:4f:3a:dc:95:e2:33:8d:b9:25:e0:ac:cb:cb:1a:8a:ce:
ad:59:bc:3a:8d:dd:93:46:ab:e3:46:37:ac:51:5f:d0:e8:53:
54:08:a0:24:16:d3:ed:b2:4a:83:d8:3d:78:c8:d5:dc:65:b3:
a7:c8:31:fb:b5:97:ba:8e:55:cb:45:77:b8:be:54:b0:e7:a9:
94:24:26:a4:cb:e5:d3:bb:cb:b0:41:c5:1f:af:40:5f:14:6c:
20:88:b8:f9:a5:60:83:10:37:51:36:26:3a:e0:fb:bc:c3:5e:
1e:75:d9:1b:02:af:10:7d:f8:ac:c2:c2:a4:2b:1e:32:e4:1a:
37:f7:c4:2d:f6:bc:1a:12:26:43:18:d1:74:d4:97:38:97:00:
7e:34:27:a3:e6:ec:2a:19:6a:a4:41:e2:bb:e5:21:c5:ab:88:
35:4a:68:45:dd:ed:0e:66:aa:53:ec:0a:b0:7e:79:c7:d8:35:
cc:9c:e9:d0:2b:cb:b1:82:8a:c4:ff:73:d6:15:16:83:b9:fb:
54:38:19:d3:c7:7c:d3:c9:8b:a5:15:36:cd:78:59:7f:c6:2b:
5d:81:36:6c:12:39:51:ca:3a:70:39:c9:ed:6e:e9:f7:1a:4f:
82:9a:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:10:30 2026 by rpki-client