Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File: D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier: XpPrCfd2llmKwHOFZPAYYPLK9HKjCu+Q8xyjWersbHE=
Subject key identifier: 57:AC:DE:71:EA:A3:54:E4:43:7D:09:8F:00:F2:6C:54:22:09:EA:FB
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer: /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial: 019F8FB57D7AAD6956CC9E75BAFF20F47D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number: 0AAA
Signing time: Thu 23 Jul 2026 16:01:03 +0000
Manifest this update: Thu 23 Jul 2026 16:01:03 +0000
Manifest next update: Fri 24 Jul 2026 16:01:03 +0000
Files and hashes: 1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: 1leE5ufmp7n1k1kGQP7POdUPSjFEVHFGSWFnnM6/EZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:7d:7a:ad:69:56:cc:9e:75:ba:ff:20:f4:7d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Validity
Not Before: Jul 23 16:01:03 2026 GMT
Not After : Jul 24 16:01:03 2026 GMT
Subject: CN=57acde71eaa354e4437d098f00f26c542209eafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:5c:19:58:59:0c:82:5f:d3:50:5f:4e:57:
a8:ba:f6:a5:57:00:6b:8c:f9:12:83:1c:b2:76:88:
e3:b3:f2:f2:6e:de:20:4f:ff:08:20:bb:92:85:5c:
ee:2d:57:87:42:c9:0b:2d:0a:b9:09:62:22:59:56:
d7:fe:fb:16:1f:c2:8a:73:30:aa:7d:de:1f:9a:2a:
b8:0b:c1:58:d2:09:16:c3:60:d3:65:58:bc:17:2e:
b7:77:30:82:ea:4b:0c:6d:33:cc:29:27:44:98:59:
37:e3:4f:fa:c2:e4:6c:57:f8:db:c7:5b:fd:4d:d7:
fb:cf:b0:45:3b:10:7d:73:d0:71:2e:40:ed:c6:d8:
aa:89:24:01:a8:51:9a:04:89:97:75:38:48:46:9c:
6e:15:3b:c0:f4:90:d8:68:a7:d0:31:68:ed:be:8d:
f8:76:f4:5a:38:19:a3:dc:27:e7:12:92:46:56:bf:
cb:69:e1:5f:8b:a7:30:a6:66:87:bc:e4:fb:11:cc:
44:9e:7d:fd:ab:a5:8e:1c:0c:ee:b5:ed:19:c9:70:
ed:f0:59:c1:0d:a2:3c:3c:3d:52:01:53:77:79:fa:
d3:15:4b:54:e4:5b:8b:ea:93:c1:91:3f:18:f9:3d:
c4:33:fa:f0:5e:c2:c3:c3:d5:0f:c2:16:88:bf:11:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:DE:71:EA:A3:54:E4:43:7D:09:8F:00:F2:6C:54:22:09:EA:FB
X509v3 Authority Key Identifier:
keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:04:68:6e:2a:3c:4d:14:0c:63:9c:ce:35:a8:08:ea:19:
05:db:74:0a:22:6f:41:ae:9a:4b:87:72:df:bd:47:b4:00:54:
4b:c7:e6:76:e8:84:d7:77:f3:37:aa:b6:cc:90:b0:59:30:a0:
ac:4e:64:14:e1:f8:67:ab:94:94:02:57:80:4d:f8:de:d5:e2:
49:ef:0a:c6:e1:e5:6a:4a:32:80:c8:d9:37:6d:ef:81:e1:25:
d7:b6:01:94:e8:85:03:b4:c3:a9:32:04:1d:9a:95:46:86:99:
8e:22:63:fd:fa:fa:99:4b:de:68:03:30:50:fb:a9:15:d7:f1:
e9:97:e5:4d:8a:e8:63:2d:1e:7c:06:a5:c9:56:a4:4b:88:92:
ae:10:b4:a7:5c:06:0b:df:65:f9:09:6e:7c:ec:ee:3a:dc:22:
e7:57:a8:fb:a7:10:4f:ac:ec:67:2d:d7:d5:9e:a1:3f:ab:73:
64:b8:f0:a9:1c:01:b2:24:a0:04:f3:52:62:1a:15:c3:8b:29:
37:91:6a:a7:4a:48:49:d3:5b:5a:55:a5:12:d8:b7:a5:7e:72:
f6:bf:a1:0e:40:16:6d:2d:e5:52:91:79:c8:d0:b3:9b:9f:70:
ae:aa:8e:03:fc:38:c9:d6:1f:30:19:ee:17:59:cf:db:5e:b4:
25:99:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:52 2026 by rpki-client