Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 0AamQzC6nf4yTwrl3Ab3PbzvXHa/D7RHOsZnLgaH2sE=
Subject key identifier: B7:17:9D:B7:B2:1E:1E:63:3D:E8:68:C5:A1:80:D9:90:03:B4:05:2A
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019FAA19FBBF7356C2EAA9EF5CC49A2A3260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 170D
Signing time: Tue 28 Jul 2026 19:00:57 +0000
Manifest this update: Tue 28 Jul 2026 19:00:57 +0000
Manifest next update: Wed 29 Jul 2026 19:00:57 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: +Y21In7Qglu/8E1OTjiTKRNWswCbai/oDaJFJtjyOzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:fb:bf:73:56:c2:ea:a9:ef:5c:c4:9a:2a:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Jul 28 19:00:57 2026 GMT
Not After : Jul 29 19:00:57 2026 GMT
Subject: CN=b7179db7b21e1e633de868c5a180d99003b4052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:c6:14:32:f1:c2:bc:86:e3:ae:ff:68:64:
fe:4a:1e:5e:eb:48:76:9f:13:df:cd:1f:08:7e:62:
49:a7:39:07:e4:7d:06:88:70:dd:44:2f:c9:17:0a:
96:15:46:61:d9:7a:22:92:12:6a:bc:15:ce:3d:45:
3b:52:6c:cb:40:5a:91:d9:eb:56:f0:d9:83:8d:ab:
51:9a:3b:61:62:0f:8e:07:9f:cd:25:a1:0e:2c:68:
40:b9:07:4a:47:b7:e4:91:6a:02:c6:93:c8:52:8c:
64:68:a0:e1:42:28:5a:fa:68:92:a7:6f:27:40:59:
ac:5d:11:8f:d4:72:ae:fe:5f:39:ed:bf:7a:7d:9e:
64:71:39:46:15:20:31:cd:9b:23:ab:64:71:59:29:
ba:3d:28:6e:aa:d9:f9:da:28:ea:d9:9e:62:54:a2:
05:a6:4d:5e:66:9c:f8:82:dd:5a:74:41:8a:16:52:
09:c0:a3:d1:eb:86:77:65:f0:b6:3c:a8:f1:84:32:
1f:e7:c5:92:36:fb:c5:f5:56:95:38:37:05:7a:e2:
4e:50:83:2e:9c:fc:cb:6f:07:4a:79:63:25:20:10:
79:47:8a:98:a1:72:3c:23:14:be:32:79:dd:0d:a4:
27:40:b8:4b:da:e0:b4:e2:8f:30:cd:cf:59:e1:4a:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:9D:B7:B2:1E:1E:63:3D:E8:68:C5:A1:80:D9:90:03:B4:05:2A
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e4:41:96:75:a5:34:08:31:64:4f:ea:d8:1d:01:78:4a:c6:
ba:31:22:57:ee:da:6b:f2:c3:13:60:17:4f:c0:16:02:b4:9c:
a3:aa:3e:97:5a:bc:a8:4a:d3:93:43:c3:ff:a4:a0:76:a1:6f:
ef:1e:8e:09:ef:d0:04:ef:73:fa:e8:98:9e:ea:e3:4f:07:d5:
8d:fa:b0:6c:77:98:8d:36:92:de:b4:70:dc:22:f0:74:cd:30:
a4:9a:1b:7f:07:db:55:6a:19:69:39:c8:d5:61:fa:90:5a:80:
a9:50:6d:95:2d:6a:05:5f:89:30:55:d8:0f:f7:85:ff:49:3f:
59:d6:b9:03:5e:a1:36:5c:3c:04:f8:16:f2:62:5a:ff:7f:ef:
22:5d:d9:80:ec:f7:5d:cf:3f:f8:95:77:43:3e:1b:0f:31:c6:
57:f0:7b:ff:cd:96:2d:8b:a8:4b:56:0f:79:21:7a:e3:68:b6:
9e:1a:35:bc:d2:d9:a5:be:ec:5f:6f:fb:11:3d:35:38:6f:20:
e2:59:09:56:ff:58:14:3d:33:f1:b8:0c:81:df:15:63:58:27:
92:9a:b5:6e:c4:33:cc:3a:d7:60:90:15:d8:41:1f:fd:d4:6c:
ba:85:c4:f1:22:fb:3c:46:98:56:9e:8e:12:28:c0:39:f4:63:
16:03:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:25 2026 by rpki-client