Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: vOnaKjUyk7zPbkFtAyvYTsEZDtVeSv3NeEcrxqbHQck=
Subject key identifier: 6D:1E:87:DD:A6:88:29:1F:07:7D:B0:2A:73:DA:0B:5C:4C:82:E4:41
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019E1EA385907DC51E7713930C83759CEB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 1901
Signing time: Wed 13 May 2026 00:01:33 +0000
Manifest this update: Wed 13 May 2026 00:01:33 +0000
Manifest next update: Thu 14 May 2026 00:01:33 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: 7oXjCFSAagDiUSFNPTXVIgK5AwvwF9s/Ig3J0rY3OMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:85:90:7d:c5:1e:77:13:93:0c:83:75:9c:eb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: May 13 00:01:33 2026 GMT
Not After : May 14 00:01:33 2026 GMT
Subject: CN=6d1e87dda688291f077db02a73da0b5c4c82e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:fe:d6:5c:97:44:60:dd:d0:25:60:c1:9e:
e6:e2:51:ee:72:71:dc:32:7e:62:fd:41:6c:12:a1:
f3:0e:7b:a1:7c:5d:38:8f:3b:05:21:ff:ff:5f:ca:
17:62:13:ef:b2:4e:dc:64:12:36:a3:0b:56:eb:99:
1b:72:15:f2:6a:6d:7c:8b:c5:14:4e:71:51:39:5f:
d5:b9:ae:2d:bc:5e:d6:36:46:4b:8c:b8:bc:ef:e4:
ef:a5:39:5e:c7:1f:04:e3:82:a2:4b:05:51:70:35:
26:49:ba:80:42:81:66:81:f0:68:f3:87:4b:5d:ee:
ec:26:70:3e:4a:3d:a2:fb:8e:f2:cf:a3:ba:35:4a:
63:a2:86:28:44:dc:fc:74:06:61:c8:6d:a6:d8:70:
51:d9:ac:e4:60:a0:c6:fb:3d:d7:6b:bf:14:62:bb:
b7:f0:99:a3:71:6a:4f:86:e9:f4:93:6e:1d:d0:d7:
06:f4:f8:5a:a0:5e:54:d5:9c:f9:e3:e1:77:eb:6c:
c7:9c:96:5a:96:47:1c:d4:08:3f:27:cb:85:65:a1:
16:97:f0:ae:0c:d2:b7:83:c8:d8:a9:14:f5:9d:ff:
7f:83:93:6d:27:6a:ac:ee:e5:b3:f8:33:0c:ac:03:
c3:7f:a6:be:ab:42:81:09:26:65:ea:5d:9f:05:77:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:87:DD:A6:88:29:1F:07:7D:B0:2A:73:DA:0B:5C:4C:82:E4:41
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:3b:72:cb:68:1e:a7:c8:91:13:99:f3:25:99:da:98:60:
e9:dd:99:33:e2:c3:e1:1b:bc:1e:3b:d0:f5:04:41:52:a8:67:
2b:21:28:65:b8:11:62:e1:1d:23:a1:b4:41:37:bc:e1:fb:de:
93:19:fc:d9:0c:b3:d7:9d:a9:27:7e:e7:87:57:28:db:73:10:
cc:1f:ea:10:d6:83:ef:7e:5b:61:ec:d3:ed:c8:7f:11:1f:09:
44:38:b9:de:e3:27:a2:90:57:24:8d:4e:a1:50:a7:8e:d8:4c:
d7:64:18:75:62:50:72:e2:b7:b2:39:24:b3:12:29:ff:4d:ce:
d9:00:63:ee:51:b2:5d:52:94:23:8b:51:5f:0f:04:6e:fb:dd:
8a:33:01:91:8c:24:e2:e9:7a:ef:25:cf:c8:a7:67:e9:be:cb:
ce:72:35:ea:98:75:56:08:67:a5:97:72:35:66:35:d8:70:a1:
31:d4:4b:3c:e4:8e:5b:a7:8b:b6:69:64:a8:ea:ff:b4:ea:70:
fe:b9:28:93:10:69:f1:e9:d1:9c:65:08:b5:2a:fc:8f:89:27:
eb:d6:f6:9a:59:42:ac:f3:db:b3:bd:10:f8:84:e9:20:de:09:
b6:20:6a:f0:e2:c1:3b:b9:f6:d4:ac:66:8a:dd:1d:a2:b3:65:
1e:f0:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:02 2026 by rpki-client