Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: Ij3Tp7cOYtTMgdT6KS2ZPyvdkUKd9Kegej+VvYCvBBk=
Subject key identifier: DF:7A:C5:D9:41:C0:EC:F0:07:E7:E3:22:AC:5E:1A:39:B6:CD:06:07
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019F8F1124E8B8E4671085AFB5980BAF611C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1680
Signing time: Thu 23 Jul 2026 13:01:33 +0000
Manifest this update: Thu 23 Jul 2026 13:01:33 +0000
Manifest next update: Fri 24 Jul 2026 13:01:33 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: FifYkmdeCeF55LWC8mFbDHmUk7NctNo9mhekT2jnvoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:24:e8:b8:e4:67:10:85:af:b5:98:0b:af:61:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Jul 23 13:01:33 2026 GMT
Not After : Jul 24 13:01:33 2026 GMT
Subject: CN=df7ac5d941c0ecf007e7e322ac5e1a39b6cd0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:c0:26:c9:ec:61:48:70:4a:be:7b:0a:62:
3b:15:89:64:24:1d:93:29:70:c4:83:ae:56:1f:71:
b6:68:0e:f7:58:05:1d:2b:50:76:b0:ab:49:76:d9:
07:cb:29:e5:97:d7:8b:a2:8f:e2:3a:0f:43:e2:95:
d7:51:00:7a:cf:81:79:a7:2d:20:7d:be:db:c5:96:
43:81:79:3f:26:82:ad:e5:c2:6c:14:75:93:04:40:
55:18:53:2b:1b:9e:e8:22:64:f9:f6:f6:cd:91:60:
fc:36:82:01:7c:c5:80:12:4d:05:24:22:44:e3:1a:
8a:b3:3f:f5:7a:0f:8f:02:c5:78:94:b7:db:29:1f:
a7:da:d3:38:22:73:2d:af:4a:0c:83:d8:10:38:21:
8b:22:f2:b6:96:f4:1e:03:14:36:14:f1:4f:85:5c:
77:82:93:9c:d6:23:09:20:7a:02:9e:b4:24:a7:6e:
24:a2:4c:95:5d:2c:61:68:15:29:58:ff:25:d0:9b:
75:6c:8f:ce:94:b6:7f:2d:6e:7d:64:b5:55:a7:ea:
22:26:b3:76:df:fa:bd:4d:9b:2d:71:08:ca:06:ac:
31:09:e6:e9:80:11:e4:44:dc:05:2b:22:6d:8f:dd:
8b:35:9d:89:3d:ce:85:30:bd:e2:87:bf:7c:ca:aa:
92:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7A:C5:D9:41:C0:EC:F0:07:E7:E3:22:AC:5E:1A:39:B6:CD:06:07
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:22:02:57:99:d5:e8:cf:ce:1b:e0:87:3c:8e:5e:9e:01:58:
e8:10:ac:3e:06:49:aa:3f:a6:5d:3e:1f:35:1a:76:78:f3:68:
66:b2:2b:c1:83:66:19:af:71:1c:ca:d8:6c:2e:e8:f2:ea:85:
14:ef:f9:fc:51:7b:49:63:30:a0:bc:5f:85:8f:50:e5:eb:26:
03:46:c9:ef:c9:b2:26:0a:3d:31:76:bf:bb:58:f0:91:6e:db:
d1:17:1b:1a:27:67:b9:42:b2:5d:6d:73:ba:35:dd:bf:b3:77:
72:25:a4:78:b3:5a:97:a1:b1:db:16:cd:0b:c6:5c:e5:76:0f:
db:2f:a4:fa:91:e2:be:37:f6:a6:e5:c6:9d:e8:44:6e:e4:6e:
3e:27:d2:9e:15:d1:23:1a:0b:82:7d:ae:ea:e1:b0:8e:06:28:
71:46:4d:34:75:a1:44:b1:f6:f9:66:b6:2f:9d:5f:68:08:82:
b8:fe:a3:e7:b9:28:38:d6:eb:ed:cb:49:f8:b4:1e:a6:5e:e2:
59:0e:8f:13:a0:9c:75:c8:70:7b:98:64:5d:fe:d1:11:c7:c0:
d1:ba:f6:1c:cb:29:a1:d3:77:ad:b7:d5:7b:a4:c5:f3:6c:b3:
10:c6:7d:0c:3f:a0:83:57:17:25:f6:b1:ee:b7:b0:d6:76:89:
b8:5a:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:53 2026 by rpki-client