Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier: BucYF2hcfG34bUWdIJQ5qmhX/cq8ieKTdS6RHg3vv/w=
Subject key identifier: B9:8B:C3:4D:57:4F:D5:BE:FB:F2:E2:55:9B:01:7C:71:F5:F5:81:34
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer: /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial: 019F93919A107024F76DE50308C1E80C25CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number: 09A8
Signing time: Fri 24 Jul 2026 10:00:20 +0000
Manifest this update: Fri 24 Jul 2026 10:00:20 +0000
Manifest next update: Sat 25 Jul 2026 10:00:20 +0000
Files and hashes: 1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: b2DTCo3c3ZdSUjPF69oSiZedHIU3p+/Hb3YjmmScTvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:9a:10:70:24:f7:6d:e5:03:08:c1:e8:0c:25:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bffa2742563265037029a78f9317339053009c
Validity
Not Before: Jul 24 10:00:20 2026 GMT
Not After : Jul 25 10:00:20 2026 GMT
Subject: CN=b98bc34d574fd5befbf2e2559b017c71f5f58134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:e6:75:d4:27:86:f0:8c:57:e9:f0:14:42:
c0:15:e4:d6:02:de:04:37:0f:1c:1d:c4:4d:e6:e1:
81:c3:f6:95:87:d8:d6:be:0a:d7:de:18:8d:5e:f4:
bf:ca:06:99:49:b1:bb:18:40:a8:ed:82:31:59:05:
4e:c6:3b:ad:91:a0:04:6f:18:d5:43:07:47:09:08:
54:87:f0:73:8f:0c:73:ec:b6:f2:10:9b:88:0b:d9:
cf:25:76:cc:9f:04:21:de:50:b4:48:4a:05:c0:61:
8a:3e:20:95:68:3d:75:d4:47:d1:45:07:13:07:78:
ed:49:74:59:e3:43:f4:4b:9e:af:82:5b:5c:c7:df:
db:07:fe:d2:18:6f:de:17:46:b1:4b:86:8f:57:4f:
35:90:66:36:ce:8e:eb:ad:7b:94:86:a7:68:46:e7:
e7:20:29:1d:4b:75:f4:f9:72:cb:72:5c:46:ad:4f:
20:ca:68:41:d7:91:01:88:d2:dd:06:ee:97:fe:d1:
75:fc:83:b7:f7:d1:6b:89:3b:04:d9:16:87:39:4a:
f3:e5:46:57:7d:d4:67:4b:f6:b0:a9:62:74:6d:a4:
93:73:6d:30:58:8e:3e:3e:79:93:e2:fb:67:40:43:
5c:d6:e3:a8:82:aa:6e:2e:85:81:90:7e:10:b2:ce:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8B:C3:4D:57:4F:D5:BE:FB:F2:E2:55:9B:01:7C:71:F5:F5:81:34
X509v3 Authority Key Identifier:
keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5a:10:0f:73:f2:dd:d0:85:7c:60:fc:b7:45:31:01:6c:1c:
45:2b:e6:aa:f1:dc:84:72:94:6d:9b:96:59:e2:27:3b:dc:97:
45:8c:a6:c7:c0:ec:db:0b:3b:84:0a:93:1a:3c:3f:cd:e5:d4:
d1:f3:ce:6b:ce:da:27:8a:55:0c:65:ae:fb:2c:f7:c2:9f:53:
7d:81:95:6b:3e:6a:1c:bf:39:2e:7b:17:c2:53:f8:7b:e8:d8:
a0:7b:a6:a3:04:ed:92:1b:f7:3c:9c:27:ab:83:bc:01:96:02:
17:42:84:d4:c9:71:c0:5e:c2:e0:a1:1a:ef:96:ae:5e:c5:e6:
d1:93:ef:70:4e:0e:a5:0b:92:bd:eb:07:c2:8e:73:61:62:1c:
14:04:77:a0:fb:7f:15:cf:60:11:5e:f3:fc:59:fe:7f:34:ad:
22:8d:e8:77:ad:af:a6:d6:e7:eb:c1:68:8d:4d:b6:9a:18:ce:
0d:6e:c8:bc:06:0f:d9:7f:e4:fb:72:a3:a0:2e:aa:1f:1d:0e:
25:46:2b:a5:fc:e7:e0:54:fc:77:56:10:31:e8:bf:c0:3b:44:
9d:c2:12:3c:47:a3:03:be:29:34:97:86:32:3e:12:10:03:73:
db:ab:e5:33:d6:36:26:b5:cd:66:7c:51:bc:60:b7:71:4a:92:
72:e4:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:13 2026 by rpki-client