Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: 1Qv416zB+RbBTvBGAhBaEeuhgazvLXpvYm47dDnnM9k=
Subject key identifier: F9:40:E1:41:50:FA:3B:60:93:F2:BF:BE:DD:F5:B1:E4:1E:41:B6:07
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 019EC06E4957F9097C13529B558BD72D5DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 15FA
Signing time: Sat 13 Jun 2026 10:01:53 +0000
Manifest this update: Sat 13 Jun 2026 10:01:53 +0000
Manifest next update: Sun 14 Jun 2026 10:01:53 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: i/eFdkWNE3DvZ5c+UekJUlmgeeLivDV7XcYoWBXVrgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:49:57:f9:09:7c:13:52:9b:55:8b:d7:2d:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Jun 13 10:01:53 2026 GMT
Not After : Jun 14 10:01:53 2026 GMT
Subject: CN=f940e14150fa3b6093f2bfbeddf5b1e41e41b607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:93:6c:7e:e4:45:86:bf:75:a5:d1:b3:ce:
7b:6e:37:fe:d3:8c:24:0b:44:06:49:03:5d:46:60:
97:65:cf:ef:7d:cf:48:1d:f6:5e:d6:95:fb:4f:0f:
8f:9c:b6:8e:2a:7b:f2:fe:5c:88:ac:37:09:ba:9e:
2e:fd:ec:c5:0f:68:a4:58:3b:e1:38:bc:e4:8f:47:
bc:c4:e2:dc:8b:40:12:fc:4c:78:34:b4:29:2e:df:
61:02:c2:55:ea:23:36:d7:7c:8d:38:c2:da:ce:eb:
02:14:07:58:1b:d6:c8:70:2a:0b:fc:cd:0f:69:34:
6c:56:66:28:eb:5d:37:1d:2b:2c:71:a1:89:48:db:
f2:1b:f4:17:b1:fb:1f:83:58:2f:56:52:ac:b3:59:
1c:3e:36:3e:81:5f:f9:c7:21:4f:4f:a1:3b:d9:2f:
64:bc:f4:02:66:e2:d6:58:82:b3:48:3f:f1:b8:dc:
6b:f3:88:8b:0d:9b:86:a6:83:40:fe:50:ce:c1:db:
36:23:9a:5c:ee:d1:68:b9:b6:c1:59:1d:6c:42:02:
e6:cd:95:d5:17:89:cc:40:f9:2d:1e:df:42:ca:eb:
b6:0c:ff:45:cc:a7:25:d9:a5:02:cc:7b:d5:fc:5f:
01:d9:10:ed:ca:28:0a:73:51:b0:1a:f8:51:37:70:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:E1:41:50:FA:3B:60:93:F2:BF:BE:DD:F5:B1:E4:1E:41:B6:07
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:1d:06:d4:a6:ab:17:ae:c4:9d:e6:d2:11:f0:9b:4c:59:
3a:22:f9:63:ed:54:ae:05:3f:cc:51:2f:7e:31:20:37:20:5e:
be:6b:ae:65:18:f9:88:f8:ee:14:38:2e:04:c1:d9:7b:a6:71:
62:a7:94:65:57:82:44:40:53:4d:ae:ac:45:57:a1:bb:f1:fa:
92:8e:8f:d1:cb:82:ab:9a:5a:05:a3:a1:c2:eb:c3:4d:ed:1c:
20:45:03:27:d6:77:6f:29:de:73:28:1e:ca:d5:ff:22:ff:c4:
79:07:86:2f:87:56:1a:d4:36:33:84:f0:08:52:cc:25:2b:65:
fb:c4:b1:b5:4b:d5:e6:54:31:b3:69:01:58:ec:51:30:93:89:
32:a5:9c:74:02:67:c1:a4:f5:15:a6:64:7f:79:55:7b:bd:96:
f3:a9:7d:cc:a5:c0:60:3b:32:85:35:d0:ce:94:70:00:80:98:
f7:63:e3:f5:91:09:ae:e9:b2:76:4a:00:e5:03:79:63:45:b4:
29:a7:b5:0d:34:4b:d4:84:f9:d4:f5:4d:47:f9:1c:d6:be:6d:
52:37:48:94:9c:31:0a:0b:ef:0f:6f:07:f6:74:3b:cf:05:8f:
e8:cf:08:ad:66:c6:0f:1c:6f:5d:21:c9:ec:25:05:dd:94:f5:
62:93:82:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:26:42 2026 by rpki-client