Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: YVjdlC5uGTV+atMJDm7Gqog2xTwcbzDjhrU1272VYkw=
Subject key identifier: 78:1C:19:B0:85:D1:CD:48:56:C7:6D:C2:61:94:F2:A4:0E:76:E5:AD
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 01A0C368CA402DA352CF674808ADB60EF3C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 10:00:19 +0000
Manifest this update: Mon 21 Sep 2026 10:00:19 +0000
Manifest next update: Tue 22 Sep 2026 10:00:19 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: 5rMNExVK5Zwg6qD9/3tHOtC2CwFt7UbBAaZc3tbu6Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:ca:40:2d:a3:52:cf:67:48:08:ad:b6:0e:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Sep 21 10:00:19 2026 GMT
Not After : Sep 22 10:00:19 2026 GMT
Subject: CN=781c19b085d1cd4856c76dc26194f2a40e76e5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:a5:10:8c:58:d6:c6:27:4b:02:ce:e4:c8:
b0:79:f2:63:df:53:31:1e:d2:87:f4:43:9b:53:8e:
6b:7b:f7:ea:a3:a4:8f:ce:af:63:1c:54:96:cf:a7:
f8:39:79:d9:23:e3:c8:78:3a:c3:06:87:41:12:ea:
73:3a:35:68:29:60:11:2a:a0:50:1f:b3:bb:29:d3:
85:75:4a:d9:e0:9e:5e:e2:12:cb:6f:bf:c0:b5:38:
ed:80:4f:35:2e:bd:9b:15:96:20:b1:30:18:7a:07:
24:ff:b2:73:b2:45:92:1d:de:79:97:f5:73:4e:a4:
2b:ab:3d:00:67:9b:c5:d1:c1:cd:4f:a0:2a:10:93:
96:ba:e1:60:7a:b3:2c:cf:0f:49:dd:71:08:61:f4:
0e:dc:b2:b3:a9:a6:fb:06:dd:32:cb:86:d5:51:06:
51:b6:29:47:90:04:17:e4:eb:38:b2:eb:fd:76:3c:
6c:10:15:d2:0c:e4:7c:10:c1:cd:3b:74:3f:9f:75:
e0:bb:39:40:39:95:1d:87:39:92:77:b5:6a:65:a4:
2c:28:3d:b1:b3:6e:15:8d:a6:71:47:fb:7a:05:b0:
36:85:1e:88:45:ba:35:62:88:a0:20:a4:f6:e6:3f:
75:8d:01:6b:49:dc:9b:03:64:19:a4:4c:e2:f2:11:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:19:B0:85:D1:CD:48:56:C7:6D:C2:61:94:F2:A4:0E:76:E5:AD
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:24:49:53:15:e0:24:7f:15:08:5b:c2:74:ec:6c:fd:0a:
f9:82:b6:e9:37:99:b7:2f:db:fa:ec:f7:81:14:a4:e5:08:33:
98:e7:3b:28:b9:74:92:aa:12:cb:5d:93:90:02:8a:07:20:4e:
69:1d:34:de:a6:4d:e5:91:f5:02:8d:75:32:48:41:5f:11:f0:
1c:5c:8c:ef:a4:93:76:08:cf:82:22:bf:2a:04:f1:45:da:d6:
78:73:9e:94:90:24:69:5d:16:c6:e7:38:72:74:43:77:38:a1:
31:4a:c9:cf:35:1f:03:95:2d:d4:43:bf:6d:df:4b:00:a7:c0:
43:05:91:fb:20:e9:91:7b:d9:5a:d3:a5:b4:b6:0f:4f:85:3d:
09:71:f3:62:ce:1e:79:c2:16:7b:ce:b5:a9:7a:56:71:cb:6e:
ef:a2:80:bd:b6:24:84:a9:52:66:9e:d4:f8:f6:28:d9:23:1c:
24:bf:48:2b:36:34:f9:1d:e8:98:1d:59:2e:83:e3:56:75:87:
e0:9e:d8:31:b2:37:2b:6b:5c:68:81:58:26:c7:e8:53:c3:30:
5d:63:07:ea:09:25:d8:ea:09:21:1c:17:de:25:a6:fc:9a:11:
aa:da:e0:d1:fd:cf:70:c4:97:4c:06:77:56:55:79:92:93:32:
52:3c:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:07:44 2026 by rpki-client