Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: Am7n1IUCNnhjiySr0Z6u3NYVLxHeijvtDMsLhtsth+s=
Subject key identifier: 3B:F2:12:50:A5:11:D7:E8:14:2E:05:94:E9:A0:B2:28:14:AF:EE:D3
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 019FAA19A54FE0908EF3F22E3A098A8429AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 1673
Signing time: Tue 28 Jul 2026 19:00:35 +0000
Manifest this update: Tue 28 Jul 2026 19:00:35 +0000
Manifest next update: Wed 29 Jul 2026 19:00:35 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: c55TkXWfmOyvJFV9OelZlooIi2qh+YdSQXeYWZuh0Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:a5:4f:e0:90:8e:f3:f2:2e:3a:09:8a:84:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Jul 28 19:00:35 2026 GMT
Not After : Jul 29 19:00:35 2026 GMT
Subject: CN=3bf21250a511d7e8142e0594e9a0b22814afeed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a4:a4:8d:22:09:02:2e:4b:10:27:04:3b:4c:
46:e4:ca:c8:91:30:7e:7d:93:18:90:b5:51:2f:ef:
93:eb:00:3a:71:4b:c0:6a:ad:64:ce:77:c1:91:24:
d7:5a:6a:79:1f:69:a8:f0:64:1e:0e:56:fc:fe:4e:
e6:59:28:ef:60:ff:81:c1:78:a6:a6:6b:cb:5c:88:
24:8c:92:08:09:ad:c8:a5:4c:db:72:99:13:8f:68:
cf:cf:90:ac:3c:2f:05:d4:fb:34:90:0e:c0:cd:9e:
e9:da:ea:a9:8a:dd:34:e4:4e:27:33:f8:d3:62:ef:
ff:83:48:f5:dc:63:6d:73:83:43:e0:a7:e0:b1:cd:
85:e3:db:95:6e:e6:51:84:d1:c3:ab:c8:b2:21:50:
69:6a:6d:de:8f:05:6c:e4:5e:16:34:6a:ca:f0:45:
b2:4c:2d:ea:f8:0e:bc:ff:b5:84:3a:08:8f:25:cf:
f9:15:1a:9d:f2:24:8c:9d:dc:ec:d0:f1:b6:6d:09:
6c:a2:18:cc:dd:2b:b4:69:92:fe:0d:db:04:af:52:
06:8f:7c:f4:34:8d:fa:5c:cc:df:60:22:1d:53:4d:
c2:4f:b3:4f:4e:9e:36:6c:ca:a7:ca:46:43:43:7b:
be:e0:29:e7:68:b3:7d:5d:20:16:19:d2:47:eb:92:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:12:50:A5:11:D7:E8:14:2E:05:94:E9:A0:B2:28:14:AF:EE:D3
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:44:e4:a5:b7:53:12:75:1a:fc:8c:43:d9:b1:e5:03:1d:a8:
db:43:f6:1f:04:98:44:35:58:e0:fa:5f:0c:a8:0b:62:b6:6b:
67:fe:c4:1c:ea:97:0d:62:b6:85:87:e8:a8:54:77:b1:ee:ad:
a4:2a:11:03:1b:2a:d7:23:51:7d:90:25:bb:62:ed:3e:91:46:
02:94:64:1c:16:66:1c:d2:dd:6f:07:db:79:3e:f4:7a:3f:ec:
6c:b7:cf:66:0e:2c:4b:ca:09:64:88:f7:46:64:bb:df:b2:94:
be:b1:67:62:c3:d7:29:c0:fd:55:23:ce:c1:a6:ee:a1:50:69:
49:23:93:c5:4f:73:36:66:e3:3e:dd:65:01:97:00:c3:cb:d1:
3a:e0:7c:b6:76:2a:32:ee:2f:0c:13:80:f8:ce:d6:91:e1:fa:
7c:81:7b:e7:0f:1f:de:be:b6:85:3a:b6:97:38:02:b0:14:4a:
34:02:63:b1:6e:35:64:88:0c:41:94:b4:3d:ed:66:7b:0f:ec:
dd:5a:c8:a5:d1:2e:c0:6a:09:7b:ff:8c:5b:6e:df:8c:3b:5d:
ce:54:8f:72:2e:06:24:db:f2:67:8c:1e:15:bd:ae:ed:f4:d2:
f7:b9:5a:59:df:d7:6b:f6:cf:07:eb:6e:5d:da:e4:8b:95:ed:
2d:8e:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client