Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: uwAAQG9fh3pEjABV5M4l/ZG87Qx9cgivjIvFDnyNndo=
Subject key identifier: 98:9E:95:70:6C:ED:4D:9F:4C:16:2B:D3:85:2A:41:60:0E:2A:96:FA
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019FA9748B9CF3BDD651D39E811B34436FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 16:00:15 +0000
Manifest this update: Tue 28 Jul 2026 16:00:15 +0000
Manifest next update: Wed 29 Jul 2026 16:00:15 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: ZueiUJHYQBJVtf5CakfWjBLQq7oFa0s2fJiY7VxAY6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:8b:9c:f3:bd:d6:51:d3:9e:81:1b:34:43:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Jul 28 16:00:15 2026 GMT
Not After : Jul 29 16:00:15 2026 GMT
Subject: CN=989e95706ced4d9f4c162bd3852a41600e2a96fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:85:f8:d9:0b:bd:84:e3:f9:7a:97:67:9a:
c5:26:34:68:f4:89:8b:c6:f5:df:eb:af:a9:61:9a:
57:65:37:40:70:f1:8d:b9:18:23:21:db:bc:e8:30:
69:45:09:44:be:ff:ce:86:f2:9c:c1:70:9f:8f:df:
ff:78:ad:5c:76:78:8e:fb:97:28:05:60:95:9b:76:
71:44:58:4c:56:8b:94:8b:fc:70:df:79:09:42:36:
e5:f9:6b:a8:fc:00:44:9c:02:6b:0b:8c:ee:6d:71:
58:42:14:95:48:89:08:f0:a7:00:74:c1:db:1e:1c:
ce:25:50:35:09:ce:e2:c4:d0:08:37:98:c8:82:06:
98:7c:86:5c:20:d4:f6:aa:f6:81:b3:af:60:a9:ee:
0f:02:b7:f8:3d:7e:60:8e:19:3d:3b:92:39:13:14:
6d:6a:f7:92:bd:5f:cb:08:48:5b:af:88:c4:4b:20:
f6:cb:c5:7f:8d:ae:7c:76:d7:b9:03:f9:0d:97:91:
13:ab:0e:26:46:23:08:72:55:31:b2:b0:42:88:3c:
d6:26:32:7a:17:6e:f8:51:dd:96:8a:c2:5b:4b:13:
d1:f3:78:02:65:2f:79:b4:f4:d7:d9:b3:d8:6b:1e:
3c:8d:1a:f9:84:c0:d2:1c:2e:96:ba:52:66:44:c2:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:95:70:6C:ED:4D:9F:4C:16:2B:D3:85:2A:41:60:0E:2A:96:FA
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:89:46:a2:37:5c:f2:1e:b6:63:b6:b6:b2:e1:da:46:f4:00:
55:30:20:50:a4:0c:b5:6f:7f:f1:55:c4:42:ca:87:e9:96:15:
fd:1a:9e:4c:14:2c:da:fc:fd:69:43:33:de:08:96:66:bc:7b:
3c:9d:f7:c7:a7:81:49:95:2e:dd:70:ca:30:42:ea:0a:7a:41:
21:93:7a:81:ab:b4:5f:76:29:0a:40:54:8d:bb:e5:ae:e8:c1:
d8:5d:ba:03:2d:31:9f:59:8b:ac:4d:bb:32:c9:96:56:f4:cf:
9e:1d:bf:65:19:1b:97:35:8f:fb:d1:bf:6f:06:e4:0e:e5:85:
60:4d:3a:4b:3f:2a:f1:46:23:9e:96:5c:f6:90:1a:ec:1d:4a:
0f:52:02:0d:40:f5:90:2c:41:1d:c5:e2:44:26:2c:0f:d6:a8:
5b:99:2e:0b:53:cf:68:32:ab:ca:56:cd:b7:55:22:1a:fd:c1:
1b:56:d4:5c:e1:e1:b2:b2:ff:64:f5:08:c8:c4:d9:72:9f:fb:
7f:82:10:4d:f3:21:ca:8a:2f:bf:34:a2:bd:74:ec:12:38:b1:
b0:64:59:9d:a9:56:f3:c8:27:2a:98:c0:2a:f7:7e:0b:5c:cf:
10:6a:d0:b6:43:b9:14:f8:5b:40:53:30:dd:fd:70:77:6d:28:
71:bc:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:39 2026 by rpki-client