Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: JDs515B1YJcbNLmKRzHChkILWWUWgKWBdvsMVonKNf0=
Subject key identifier: 6A:F6:13:DC:A1:2D:84:85:95:75:A4:EB:88:FB:30:4E:B9:23:46:A6
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019E1E35C6A7A8C0C67D2DD0F3C70FB765CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 15C1
Signing time: Tue 12 May 2026 22:01:41 +0000
Manifest this update: Tue 12 May 2026 22:01:41 +0000
Manifest next update: Wed 13 May 2026 22:01:41 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: UOBQaZoJWWM2EpP/m+QQ1n4OSkunf5t6trnUHXswW20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c6:a7:a8:c0:c6:7d:2d:d0:f3:c7:0f:b7:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: May 12 22:01:41 2026 GMT
Not After : May 13 22:01:41 2026 GMT
Subject: CN=6af613dca12d84859575a4eb88fb304eb92346a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:e7:c6:e0:af:77:76:fe:53:64:ac:1c:ea:
af:c6:c6:fb:0e:36:d0:73:86:a6:bb:58:3d:b4:a3:
5e:82:04:24:41:30:89:cc:df:7a:b1:14:bb:af:8b:
26:33:0e:7b:47:a0:57:86:a2:ac:20:11:a8:0f:9d:
e0:ba:9c:d8:79:47:42:90:68:4c:a2:2c:99:fb:37:
d3:3e:22:a2:5d:b2:6b:c0:5b:c7:bb:50:b9:8d:6e:
e3:42:ad:5b:2f:74:4f:72:7a:ae:92:a6:26:d0:b9:
50:df:3b:87:e0:83:27:d4:ce:c2:40:3b:ae:29:1a:
dc:4b:e8:26:e4:44:25:f4:62:0a:90:fa:6f:55:5f:
4b:ab:40:4e:96:f3:f5:0a:30:24:fc:a1:01:39:6a:
c3:07:93:39:f6:46:aa:6d:1f:b8:46:c0:4d:81:eb:
30:4d:96:66:31:b2:19:8a:60:40:52:df:d5:c0:70:
0e:16:c5:ca:5b:62:48:b3:91:4f:c8:48:31:c1:3c:
8f:92:dc:c5:56:c4:31:00:b2:99:34:eb:2e:e9:0b:
6b:f1:e3:b3:8f:8d:74:8c:8d:b3:70:71:f4:71:a5:
09:3e:c2:8f:41:83:a1:93:d2:0b:11:b9:96:52:23:
15:c3:1d:a0:95:fc:38:d7:18:7c:82:11:3e:23:68:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:13:DC:A1:2D:84:85:95:75:A4:EB:88:FB:30:4E:B9:23:46:A6
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:0d:c1:56:e8:a4:be:25:44:8c:cd:85:47:f7:6e:7a:b0:
80:b4:dd:d9:64:68:80:a6:1e:b1:fd:50:38:d3:44:33:be:21:
36:0a:72:48:44:73:86:4e:59:97:f3:c1:ca:01:27:a7:9a:01:
77:87:b9:3e:8e:79:09:1f:78:50:66:37:4a:c5:a5:7b:a3:f6:
e1:1c:ff:0a:65:94:b7:0e:3a:f4:41:0a:b3:f1:e5:59:c1:7e:
fe:35:c0:6c:c8:46:3a:6f:6b:fd:5d:76:f6:df:20:32:57:0f:
eb:e1:32:86:a3:7a:0f:7c:40:b4:84:ee:01:84:aa:42:4a:38:
ba:eb:44:28:0e:ca:f3:64:4f:92:d3:66:28:8e:53:ce:53:96:
74:2d:2f:12:d9:19:78:e0:14:a1:63:49:dd:97:be:10:ef:d4:
91:72:84:e6:c0:95:95:a5:ef:93:dc:3a:96:2e:42:df:a2:68:
7b:ef:de:50:91:f3:87:35:43:d9:b1:d0:46:40:c5:84:4a:24:
10:d2:63:f3:06:48:b4:3d:9a:26:bf:ba:6c:10:d6:d9:01:77:
02:f7:02:f4:4e:aa:8d:b0:a7:cb:e8:67:58:9a:18:b1:e4:b0:
74:94:56:05:6c:6a:dc:4a:3f:e4:8b:d9:aa:d2:ed:25:fb:78:
3e:ef:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:37 2026 by rpki-client