Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: oMFw0VgpDbaFjBMQNc+uzAF2NeTIikJim1diRaHgNno=
Subject key identifier: 17:A3:EA:0F:D9:9F:4C:67:5F:54:19:BB:7D:A7:C7:3E:18:E1:DE:C7
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 01A0E9D242F765734AAC94C040AEBCA359DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 0314
Signing time: Mon 28 Sep 2026 21:01:06 +0000
Manifest this update: Mon 28 Sep 2026 21:01:06 +0000
Manifest next update: Tue 29 Sep 2026 21:01:06 +0000
Files and hashes: 1: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: YyhpKBro7le/hV2baElnIsQFabbA1C9HUCfM2Lo95ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:42:f7:65:73:4a:ac:94:c0:40:ae:bc:a3:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Sep 28 21:01:06 2026 GMT
Not After : Sep 29 21:01:06 2026 GMT
Subject: CN=17a3ea0fd99f4c675f5419bb7da7c73e18e1dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:bd:2d:be:29:47:0e:70:a0:30:ad:c3:14:
7e:4e:1f:59:8a:1d:a5:71:5b:0c:fe:87:dc:c6:56:
53:16:29:f7:e2:30:d3:2a:40:0f:49:70:dd:9a:9b:
1d:ae:1f:e9:d7:46:77:39:2a:66:8a:1d:99:79:d1:
54:dd:11:f8:3e:62:6a:8b:38:bc:ed:1c:9f:55:fb:
c8:91:82:4f:b7:75:f3:d3:0f:d0:40:73:ed:2e:a0:
0c:1f:5e:7c:45:ff:bf:3a:2f:62:83:f1:b4:49:8d:
31:05:2c:40:5c:1c:43:1d:2d:07:08:d7:90:be:b2:
09:18:0f:99:e2:d4:34:36:c9:79:38:41:27:9b:8e:
e5:22:2b:79:e8:64:f5:7b:c5:17:67:9f:5e:29:5c:
33:18:9c:ce:ea:ab:56:ce:d2:8e:dd:56:86:9c:92:
eb:9e:8d:e9:d7:1e:c8:46:e9:d0:88:8a:33:83:44:
a2:ad:22:c9:03:cc:11:a5:03:03:11:0e:97:0e:64:
0f:73:3e:d3:d3:7b:cb:0e:6e:ec:37:78:56:35:df:
1d:00:ac:ba:63:22:df:28:a7:b8:b1:08:5e:9b:02:
65:83:a3:45:7f:41:a0:f9:0f:d4:aa:24:41:db:7f:
e2:a5:bf:b5:96:8b:d5:a0:f6:03:6d:16:68:b8:d7:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:EA:0F:D9:9F:4C:67:5F:54:19:BB:7D:A7:C7:3E:18:E1:DE:C7
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:d3:95:d6:ca:fa:ae:ea:c9:59:14:68:cc:b7:11:a2:4d:
d1:91:4d:16:2d:a1:e3:45:e3:85:8f:5a:7d:66:1b:63:9b:d5:
2f:e1:06:26:5e:1e:e6:e8:61:fb:18:15:d5:bc:69:8b:0f:da:
21:ba:47:7c:a2:48:c8:54:2e:b6:a1:42:69:ed:ad:e3:f1:c6:
ed:0f:7a:3a:f4:e7:df:9c:74:33:e8:79:32:a7:5e:19:51:e7:
5e:b0:00:2b:61:73:b9:d8:fd:1c:65:5b:c1:3c:18:66:d3:28:
7c:38:ae:05:9e:d0:ab:5c:8c:98:1d:bc:04:9e:7b:6d:ea:c5:
71:6c:1b:db:f6:20:cc:4e:40:11:5d:28:fa:e5:e2:8e:a1:7e:
46:da:59:f5:e6:1f:5a:f8:78:a1:7e:29:d1:e8:b6:67:d9:9d:
40:95:5d:cf:d8:28:23:a2:f8:52:12:b1:1d:f8:34:ef:cc:6e:
eb:69:e3:e2:19:e6:9d:3e:da:ca:0d:ff:93:c6:19:8e:8a:a3:
3d:e8:b5:8e:ca:cd:7f:a2:3e:21:fa:a0:b2:90:08:e5:af:aa:
ba:ad:34:a3:ed:e4:c7:65:eb:58:f9:00:02:96:bd:2e:59:44:
24:09:73:d1:57:9c:71:17:f0:66:ff:6f:7e:5c:24:e1:48:ca:
87:d4:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:07:27 2026 by rpki-client