
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: Nuqcs2sJxwqDbQioBjqRbzNbAa6FDhXs8HOdpsRgPNo=
Subject key identifier: 81:35:C1:2E:DB:A7:9C:22:1B:9B:27:62:D7:0B:CF:51:13:25:36:BB
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 01A0C40DE8F40112419D19F1D23D6326AA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 13:00:40 +0000
Manifest this update: Mon 21 Sep 2026 13:00:40 +0000
Manifest next update: Tue 22 Sep 2026 13:00:40 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: SblHQA3o26T1bb9pMameab325lHsc0yYswb04Msnqlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:e8:f4:01:12:41:9d:19:f1:d2:3d:63:26:aa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Sep 21 13:00:40 2026 GMT
Not After : Sep 22 13:00:40 2026 GMT
Subject: CN=8135c12edba79c221b9b2762d70bcf51132536bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:53:8a:a8:df:a9:dc:41:12:eb:24:56:77:
6e:ad:4c:a6:52:17:13:46:d1:af:90:00:64:29:4c:
fd:e9:c2:4f:02:b5:0b:ac:ae:b0:28:c0:7d:10:fe:
4d:33:bb:62:ae:3b:c2:0b:73:4d:33:85:16:cf:53:
db:9b:d2:2a:c8:15:a8:77:5f:ce:42:e3:7f:c8:bb:
5c:cf:6f:c1:02:31:47:5f:7c:3b:7c:c1:27:cc:9a:
63:a9:a1:12:ac:32:67:07:5e:6a:7d:a9:d0:38:15:
fa:0c:1f:68:f5:f0:b7:cb:34:cc:0b:69:09:ee:6c:
89:e6:36:08:85:15:8f:35:43:82:fa:5e:a4:8f:d6:
1c:ff:d3:9c:19:b8:47:a3:48:b1:12:e9:e2:83:36:
1f:fc:77:15:7b:5f:c0:aa:d0:c1:2a:c4:d6:ea:a6:
68:e8:e3:15:e8:d4:3b:76:19:4f:46:88:80:fe:b8:
a8:99:2e:10:04:5b:8e:68:07:e7:cf:b6:c3:cd:78:
e9:b2:f3:ce:05:54:ff:e9:27:68:61:80:5c:3a:c4:
97:f7:55:17:3d:b1:09:a5:c3:a0:40:ba:8a:5f:1c:
5c:78:7c:8c:35:c3:ce:e2:1f:c6:42:52:d2:e5:99:
52:32:17:e3:b3:17:de:a4:37:c8:f0:cf:65:91:c9:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:C1:2E:DB:A7:9C:22:1B:9B:27:62:D7:0B:CF:51:13:25:36:BB
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:d0:69:5f:da:2e:a1:fe:c6:6b:99:a0:26:f1:c1:1c:db:
af:21:dc:01:aa:52:35:ba:3c:a4:b5:aa:2b:43:df:e1:e1:a4:
66:16:4b:3e:25:ae:0c:57:b5:94:df:4b:0a:cf:f6:1e:7b:73:
25:9e:c0:bc:eb:b9:0e:ee:d4:27:03:b3:9c:b7:fc:e5:62:1a:
30:35:14:96:51:d9:c1:15:b5:8a:93:6d:8b:3d:e3:06:35:c7:
74:c1:a2:3c:ee:dc:b6:12:51:72:c8:20:6c:cf:d8:3f:98:9c:
fd:21:dd:87:a8:a3:fc:0f:01:e1:6d:46:31:59:9d:22:55:7d:
0c:0f:6e:cf:3c:98:91:e0:8e:a6:95:f4:d1:40:d6:6f:9b:aa:
bc:a1:c1:3a:bd:dc:02:21:fe:a6:d8:54:af:bc:84:80:a8:9d:
20:3e:f0:cd:19:1f:73:2a:4c:a9:65:cb:0f:f8:b8:fe:7a:66:
71:89:e1:6e:8b:ec:cd:4c:93:5f:e1:c3:50:dd:b4:70:86:0a:
20:d6:02:e4:c3:7c:34:9a:f5:31:54:40:80:a5:1b:97:4e:d4:
27:a9:b3:9e:a7:ee:3f:45:3b:81:6c:54:c6:83:25:f4:d8:7c:
e6:2c:92:18:c2:d8:63:74:07:4c:ec:6a:f4:78:bc:25:e3:f3:
3b:97:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:32:14 2026 by rpki-client