Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: BVF+adQ2sv3f+yE3dAWtdrykPNpxYEI3JAN4rolKvNk=
Subject key identifier: D9:B8:9A:02:F0:51:EB:2D:D9:D8:DB:37:9C:D5:39:A2:0D:5B:44:8A
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019FAA1A4B4FA07EA543F0D9F4B19BA82B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 168E
Signing time: Tue 28 Jul 2026 19:01:17 +0000
Manifest this update: Tue 28 Jul 2026 19:01:17 +0000
Manifest next update: Wed 29 Jul 2026 19:01:17 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: wAP1xZnodEEcKd1TYNbNFhQmdEStrMBaQA7s5MaygqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:4b:4f:a0:7e:a5:43:f0:d9:f4:b1:9b:a8:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Jul 28 19:01:17 2026 GMT
Not After : Jul 29 19:01:17 2026 GMT
Subject: CN=d9b89a02f051eb2dd9d8db379cd539a20d5b448a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:84:68:07:82:4e:f2:c4:9c:a6:e5:e2:ee:
f5:1d:89:ce:70:5b:20:2a:a8:c1:4c:b5:2f:1f:30:
95:f9:30:07:df:e1:30:c9:0b:ac:e9:b3:a0:0c:50:
20:8f:57:59:5e:71:96:57:10:38:44:cb:3c:a6:b8:
1a:96:9b:b7:29:86:2c:26:3f:9e:8c:d4:b0:43:4a:
a3:fb:d8:4e:8f:3e:c1:63:c6:e0:2a:f5:1f:23:13:
46:8e:e3:75:c7:0c:93:55:d3:fe:56:dc:b0:e0:b8:
06:d2:87:86:ac:9f:cf:ed:49:2b:38:fc:00:38:28:
f1:20:38:20:cf:b3:a5:2f:4a:ef:07:cd:27:78:25:
9e:89:66:e4:29:2d:c4:45:c4:c5:78:40:35:48:62:
9d:31:79:26:c4:51:da:b0:5d:1f:c8:77:42:7c:d2:
3e:ba:5a:67:f3:26:3e:c1:94:62:cd:ee:17:9c:d5:
c0:9c:54:d8:fd:dc:d0:67:e1:0d:b3:20:01:18:cf:
cf:ed:3f:4e:e9:26:32:1c:fd:45:63:b9:eb:06:70:
42:d7:8e:da:d6:93:86:ad:2a:0b:93:44:81:3b:b1:
1b:85:38:ec:45:e3:92:1c:6a:77:41:15:3b:c1:dc:
18:15:ee:48:7a:78:47:a8:79:7c:18:92:3c:7c:dc:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:9A:02:F0:51:EB:2D:D9:D8:DB:37:9C:D5:39:A2:0D:5B:44:8A
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:23:e0:03:2d:4e:51:fb:65:70:97:b9:4e:8c:37:c8:14:e8:
5d:05:9c:b2:41:46:b5:fd:13:07:22:ae:32:88:6e:5c:fb:52:
2b:c2:48:6b:fc:e1:b8:29:48:3c:d5:d8:54:07:fd:9f:30:47:
aa:f2:16:af:4a:f8:f6:fa:32:68:e7:a6:1b:c1:02:69:e2:0c:
0f:ed:a6:d9:c3:8e:a1:de:15:96:83:a3:b3:47:89:24:ac:dd:
06:4e:84:3c:56:e8:0d:8f:4e:ca:91:6a:87:c3:35:d1:eb:5b:
b1:e7:5d:34:12:ab:2a:16:2a:ee:e2:a5:60:fa:07:e4:b2:1d:
d7:f7:00:8f:d1:19:8e:bb:38:a9:26:5d:8a:52:88:df:1d:84:
f0:1e:43:de:e0:cc:a0:cc:3c:76:66:4d:a6:0f:39:27:b6:df:
87:d8:8b:8b:02:ca:b3:61:c3:c2:f7:0f:bf:6b:53:8a:21:b8:
5c:e8:3c:03:3b:71:33:cd:59:92:1c:f8:e4:e9:ef:72:2b:65:
32:07:51:da:7e:f7:1b:e7:31:6b:88:48:91:70:fe:0b:d4:12:
49:51:e6:59:68:10:57:59:17:13:7b:e4:ca:1b:d0:ee:5d:f5:
a7:70:e4:0f:0a:e3:69:97:ab:04:7d:50:fa:9c:69:ff:12:8a:
de:9a:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:32 2026 by rpki-client