Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: BLlGtUpRKZ+J+SARFUjBWcm4PFWkIw4i+4Q8zAE3A14=
Subject key identifier: 1B:A1:84:85:E2:04:23:86:2C:C5:8B:F8:E2:AD:77:18:4C:95:4D:9A
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019CAB6B53140FC1A1EE57FB136812AD7C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1580
Signing time: Sun 01 Mar 2026 22:01:03 +0000
Manifest this update: Sun 01 Mar 2026 22:01:03 +0000
Manifest next update: Mon 02 Mar 2026 22:01:03 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: OForoX5emJFlPXvUMwRIXz7ZBHFClAwYpAcGrWHhnDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:53:14:0f:c1:a1:ee:57:fb:13:68:12:ad:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Mar 1 22:01:03 2026 GMT
Not After : Mar 2 22:01:03 2026 GMT
Subject: CN=1ba18485e20423862cc58bf8e2ad77184c954d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:f6:3e:3f:a5:22:65:15:bb:7e:20:a6:1c:
73:ef:6e:b6:2b:b3:54:29:a1:e1:e7:85:33:7f:8b:
ab:03:d8:f5:2a:99:20:44:cd:62:31:c2:9d:99:8a:
98:d8:89:c1:4e:74:80:34:05:4a:ed:85:80:ce:b7:
4a:bc:bc:86:ab:33:77:39:1d:67:cd:ce:17:45:75:
e2:4e:0f:1e:8e:d7:37:36:b3:f4:3a:68:40:08:61:
e4:c6:91:6c:82:96:c2:0e:79:63:fa:e8:1c:ff:a5:
d6:b5:a9:e4:ed:eb:9d:b0:c5:cc:70:10:e2:a1:f9:
c6:66:1a:2c:bd:18:35:7c:9c:6c:98:89:cb:c1:02:
e3:99:57:6a:5e:dd:69:41:2c:d7:3a:4d:25:42:93:
40:4a:60:1a:9f:2a:fa:e3:35:ea:49:45:45:93:c0:
f6:28:68:1c:6c:fe:10:de:6c:9a:1d:9f:b5:bb:50:
2e:96:6e:2a:ab:20:6f:39:a2:3a:cb:7f:73:a9:e5:
c3:7c:dc:3e:a7:ac:6a:1f:44:93:e7:68:91:db:95:
c2:6b:d5:a0:1c:a0:54:89:30:86:5b:0b:bf:86:3d:
64:29:d4:c8:fa:bc:fc:c4:de:f9:8b:db:e2:62:4a:
52:87:dd:dc:65:c7:b5:e7:1d:27:e4:70:ff:cd:f1:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:84:85:E2:04:23:86:2C:C5:8B:F8:E2:AD:77:18:4C:95:4D:9A
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:67:5f:34:d9:d4:cb:25:08:4e:ad:34:18:06:a5:37:a9:
9a:d7:fb:6a:0f:77:b0:d9:6c:e7:ff:a1:b5:d1:14:e7:9e:fe:
0b:26:21:6d:bf:35:86:61:fd:76:c3:6a:29:8c:96:cd:b5:46:
76:25:83:05:01:40:17:23:f9:ed:23:3c:01:0b:80:c6:59:ed:
cd:ff:88:37:86:d9:de:af:46:1a:8b:1c:d0:ea:09:3c:40:81:
41:e3:d0:e7:dc:34:0b:8d:42:ad:91:cf:77:95:5a:7b:05:7b:
84:56:81:71:e1:c2:83:be:9c:bd:98:20:23:12:a9:11:37:4a:
53:07:aa:94:09:97:1e:02:19:18:06:5e:69:eb:e8:ff:53:3f:
5b:66:66:64:11:94:87:15:d8:85:58:2a:2f:59:57:64:b9:e1:
42:65:93:73:66:48:95:7e:dc:5f:e9:b1:dd:f1:68:b8:30:41:
e5:c0:7a:2c:9e:fe:96:6e:9c:bf:6b:95:43:64:6a:0f:4a:c8:
15:37:e9:f2:66:0e:dd:15:c9:f7:bf:84:b1:e2:d5:98:ec:2f:
5f:07:87:2c:23:cc:01:7d:d9:db:02:42:1e:f1:98:12:bd:4e:
a7:66:12:e2:68:6d:a2:37:0a:4c:23:c9:c5:97:5c:90:a6:29:
bc:87:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:38 2026 by rpki-client