Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: Wddi2/Qd7+1Tu3OJm4EfqQXWAAfZYFH6VjBeAOFcaqE=
Subject key identifier: BE:5C:78:03:06:CA:38:8D:19:B5:06:19:D6:BB:39:F0:4A:71:D3:45
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 019FA89A02E4FA881C0710538E056DA157E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 16CB
Signing time: Tue 28 Jul 2026 12:01:33 +0000
Manifest this update: Tue 28 Jul 2026 12:01:33 +0000
Manifest next update: Wed 29 Jul 2026 12:01:33 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: 0zDFWAkXn8i17vQrObTbhoSuQ0uN6I+K/58poUzDt2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:02:e4:fa:88:1c:07:10:53:8e:05:6d:a1:57:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Jul 28 12:01:33 2026 GMT
Not After : Jul 29 12:01:33 2026 GMT
Subject: CN=be5c780306ca388d19b50619d6bb39f04a71d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:04:06:aa:fa:3f:3b:0e:99:69:12:cf:2c:
25:f1:bd:c4:3e:67:17:e8:6f:9b:d1:42:0c:2f:a0:
35:27:bb:9f:d7:b7:bc:7f:f3:2a:59:ac:64:05:04:
3e:a4:40:c2:45:59:ca:c0:05:59:a3:39:40:4b:9e:
b8:0a:1b:34:e3:e1:28:5f:c5:30:85:37:59:25:16:
11:48:bc:e7:f2:a7:97:09:7a:7c:d8:ea:32:41:9f:
3a:23:8b:01:50:4a:16:a0:f3:d6:39:ac:90:c7:fa:
3c:3c:7b:56:1e:81:3c:11:d5:2a:d1:a6:b9:1f:e7:
ac:43:df:cf:b5:60:c5:d9:1c:e6:05:7b:0f:f0:4f:
fb:8f:8c:36:68:02:e1:e4:72:42:4d:e1:03:ad:37:
16:e0:23:47:62:2a:01:cb:01:57:1c:9f:57:47:dd:
77:68:33:9d:a5:12:39:1d:f2:f0:7e:50:33:5f:9a:
03:45:29:b8:d1:01:9b:c6:d2:5e:02:2e:f9:0e:07:
1d:45:d2:a9:9c:e0:4e:16:68:bd:01:db:c4:d2:94:
4d:de:79:2b:c7:19:a3:43:cd:fd:28:7f:ef:da:f2:
c5:2c:0a:8d:d8:82:78:23:6c:16:bf:d7:58:0e:12:
48:5f:d1:31:62:e7:ca:58:45:1c:cb:9c:84:6d:6f:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5C:78:03:06:CA:38:8D:19:B5:06:19:D6:BB:39:F0:4A:71:D3:45
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8e:fa:5f:94:a8:65:4c:57:40:d6:42:f7:1a:c6:5a:95:74:
78:06:ea:b4:88:6d:c3:b2:6c:c7:bf:e8:e7:fb:99:df:ab:f3:
3b:5e:23:49:d6:49:cc:f3:6c:0d:cd:a1:0b:7f:dc:57:06:58:
6e:64:00:6a:4f:78:65:13:7e:2d:03:64:df:28:af:f0:a9:d1:
30:ba:6a:cf:56:e1:ff:97:a0:8d:5d:9c:65:9b:05:fb:9d:22:
c6:c3:27:20:fe:24:b1:3f:02:62:5c:e8:a5:b0:9e:12:d9:3a:
b9:f0:ef:48:0c:8c:cf:3c:b6:a6:1a:96:38:d4:2a:e8:aa:f1:
7e:bb:c0:e7:95:86:b9:4e:6d:39:c6:23:84:ca:af:43:f4:f8:
e5:46:88:8b:4f:ac:e1:ee:7d:36:8c:b6:90:8b:b6:68:db:92:
a6:89:0b:3b:50:18:34:3c:05:9c:2c:0b:3d:ed:90:27:28:2c:
a5:3f:44:55:5b:83:0e:e9:cd:b4:38:bf:66:c1:6a:48:e9:b1:
99:9c:69:7d:9e:b2:06:a8:54:1d:39:1f:b6:b8:95:3b:b1:b7:
47:57:39:bb:8b:e7:bc:4a:9c:65:b1:34:f5:25:1f:2d:85:4c:
21:30:84:37:c5:ae:a4:45:68:bb:9e:bb:b1:4b:fb:51:88:80:
47:9c:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:18 2026 by rpki-client