Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: q17bof/t8iSR9GMH7pV2g0vO81fcyDwcnF9V3uHY5lA=
Subject key identifier: 22:09:E7:0A:6F:BE:76:02:24:6C:E0:4D:5C:F9:3A:0B:61:03:7D:C8
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019EBE7FABD76849800E30B2B196F91185A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 01:01:38 +0000
Manifest this update: Sat 13 Jun 2026 01:01:38 +0000
Manifest next update: Sun 14 Jun 2026 01:01:38 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: a4KyQ7XVVyKRzMBwzmGqcT+uGtmAKtdsmR8ioKYaUxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:ab:d7:68:49:80:0e:30:b2:b1:96:f9:11:85:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Jun 13 01:01:38 2026 GMT
Not After : Jun 14 01:01:38 2026 GMT
Subject: CN=2209e70a6fbe7602246ce04d5cf93a0b61037dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:44:d8:18:0f:91:15:a4:9b:28:45:06:ee:
45:a4:bc:94:5d:d5:96:3f:6d:cb:26:85:2b:27:89:
c7:cf:40:1c:7e:86:a8:c5:2f:12:08:23:ce:d3:2b:
0a:f9:ad:4e:31:eb:da:30:ec:2c:ce:80:63:77:55:
15:15:16:fb:1a:6d:82:e3:13:f9:83:5f:a2:80:9b:
fe:71:aa:b4:9e:6c:9f:34:a9:44:10:98:bd:80:24:
3a:bb:ea:27:08:3a:0f:a3:d4:98:66:7c:b3:fc:36:
c1:b6:69:56:2b:36:96:47:54:e6:a9:8a:dc:7d:7d:
c5:8f:8c:d4:b1:1d:c4:0b:a2:ee:cb:22:c3:4c:de:
ac:54:35:c8:f5:1f:32:44:38:de:5e:b2:8a:b8:9c:
97:e9:d2:d4:bf:dd:6d:81:71:e2:0b:34:4c:14:06:
58:00:ef:51:94:13:a5:84:01:23:15:79:50:a3:12:
ff:d8:5d:97:52:99:dc:d4:0d:9d:40:03:a2:a5:ae:
a6:25:5a:de:fc:5e:a7:9d:33:97:ea:6e:ff:8b:8a:
c1:b2:82:e7:50:f0:9d:24:79:6b:5b:d6:c8:fb:9e:
67:2f:31:e3:e1:b2:c3:5d:e3:20:14:ab:21:71:cf:
cb:c3:26:a7:8c:79:fe:38:72:33:f0:25:ad:e9:71:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:E7:0A:6F:BE:76:02:24:6C:E0:4D:5C:F9:3A:0B:61:03:7D:C8
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:91:ce:01:41:4d:77:5e:7f:f6:c8:3a:86:2e:24:f1:3c:86:
c0:3c:ef:18:d4:80:24:b7:af:06:6b:22:ea:e4:97:4a:f0:95:
6e:57:77:d1:e1:02:14:96:f0:09:80:9c:66:02:69:16:ba:c7:
53:be:b7:75:31:9d:a1:fe:49:c7:34:3a:f6:02:74:19:a4:92:
b2:d2:6f:91:a4:cd:ac:04:e5:56:09:49:ab:5b:0a:fe:f5:02:
92:0a:f2:41:ea:40:c6:b6:19:cf:60:83:33:a7:5a:8f:23:f2:
d0:b7:3c:12:d1:c0:19:e8:c4:58:d1:12:51:6d:70:99:31:77:
0c:8c:cd:d4:c0:ba:51:07:b7:e0:d3:0a:f4:b4:f6:44:f8:c8:
b2:b0:bf:82:c6:63:e9:c9:17:5c:40:00:dd:48:39:8c:d1:63:
ee:cb:af:5e:27:8b:89:fc:30:bf:06:5b:c7:61:cc:32:8d:99:
9d:80:07:84:f4:dd:2f:38:0e:1a:87:51:08:07:4b:e2:1f:43:
5f:de:97:ae:57:61:ce:ef:d8:46:cb:88:45:c9:8e:95:ee:55:
3b:f7:a9:84:b9:79:7a:ea:b3:71:7d:3f:2a:80:28:18:33:b3:
63:da:5c:d9:d9:77:dc:cb:4e:e9:40:c5:a8:f5:31:f8:6b:ae:
ec:08:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:44 2026 by rpki-client