Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: KUTQuLgnyGFgY8MZT4PvCT0DVDYyOP7eEZ1N2uxGgYI=
Subject key identifier: 8C:AF:15:EE:65:9D:A2:A6:13:9E:7B:AA:57:7E:17:76:57:23:99:28
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019D98F48DD0AFC04E8ABC5F585917447436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 15FB
Signing time: Fri 17 Apr 2026 01:00:57 +0000
Manifest this update: Fri 17 Apr 2026 01:00:57 +0000
Manifest next update: Sat 18 Apr 2026 01:00:57 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: yq5DtXJn1JMScQGe4rSK9D7W4RMRqKJECgiqvLY3H8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8d:d0:af:c0:4e:8a:bc:5f:58:59:17:44:74:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Apr 17 01:00:57 2026 GMT
Not After : Apr 18 01:00:57 2026 GMT
Subject: CN=8caf15ee659da2a6139e7baa577e177657239928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:b7:6e:f6:48:d1:83:8f:cb:59:f4:5c:39:
52:0a:29:d1:00:e9:62:f3:f6:df:b3:1f:d9:90:4f:
c1:5e:30:a7:e3:83:70:25:7c:89:8c:f3:69:af:77:
34:ad:92:b4:9d:ba:99:b8:21:21:74:50:97:99:c8:
60:10:5d:67:0f:72:08:97:e4:07:1f:02:e0:31:91:
5c:6e:ad:6a:be:07:d4:9a:59:4d:bf:b5:b0:ff:e5:
c9:ed:74:c7:8e:d6:da:a0:fb:87:b2:9a:30:01:93:
a6:33:d1:3a:ff:20:ee:54:9f:c6:87:f6:9c:17:13:
d0:15:51:dc:71:f1:48:2b:d7:fd:08:39:77:8c:a9:
f3:ae:76:d2:cb:c7:2a:a5:12:81:56:c6:2b:e2:cb:
c5:d3:d1:e0:16:3c:cb:aa:bb:8a:1e:b5:60:19:14:
41:0e:2e:8a:1a:6d:c3:87:22:7e:fd:c6:22:c5:d4:
13:f1:27:2f:41:86:c8:ac:b7:ee:22:40:20:44:f9:
db:53:7d:d3:80:86:f7:53:39:ad:44:3a:0f:91:41:
03:91:de:8c:ba:0e:4e:07:d8:d7:6f:00:a0:e6:9b:
ad:a6:94:fe:1d:09:4e:f2:c0:e7:2c:c8:c4:6b:a3:
f1:eb:40:e4:b1:8a:af:97:c4:5d:cb:73:a3:21:8e:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:15:EE:65:9D:A2:A6:13:9E:7B:AA:57:7E:17:76:57:23:99:28
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d0:2e:03:4d:65:a9:27:a2:d1:46:29:02:c9:41:17:95:68:
a1:f0:e5:cf:8d:1e:e3:a3:07:d7:37:d2:f6:f3:65:6a:20:a3:
16:a3:18:97:11:e5:ca:0a:0b:c7:73:c5:93:94:6e:3e:32:4e:
40:83:b9:b1:2d:9b:0d:50:fc:86:47:d9:22:4d:56:24:e4:a0:
32:93:88:2e:ff:dc:b3:11:06:66:15:79:36:a3:14:a3:ba:d6:
af:f9:57:1d:f5:d6:40:23:64:15:19:05:5e:34:78:b4:9f:d9:
6d:1f:36:a1:a0:d2:02:a7:52:88:79:2d:c9:bd:7b:04:5a:e5:
6a:46:65:ee:02:4f:77:ef:46:da:87:57:11:1d:31:27:e1:c3:
90:84:20:57:9e:14:e7:08:da:05:d8:24:31:73:1f:63:b4:e5:
aa:3b:72:53:0e:ac:f0:45:67:02:a3:2c:3d:5b:58:9f:f5:c5:
81:00:13:e0:18:ae:7c:6b:d8:5b:82:4b:b2:22:2b:49:23:3a:
0b:0a:ae:c8:5d:58:75:0e:54:3f:b5:be:47:09:95:eb:cf:1b:
dd:93:80:bb:1b:94:7c:a3:9d:c9:3e:0e:70:2d:ca:3d:6e:7b:
6c:c7:ec:00:9e:33:5c:92:35:00:8d:07:c5:30:3d:f0:60:11:
93:a5:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:09 2026 by rpki-client