
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: mD6sYsab8YVucbDwpgSc3CQPqVq5BV7uA//I4gTIzeM=
Subject key identifier: 8A:62:F8:04:80:85:90:35:D0:86:BD:CF:F0:B7:9C:2B:42:B6:33:9E
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 01A0C2FBB87F0C6C97F094EFB021695C6903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 1144
Signing time: Mon 21 Sep 2026 08:01:11 +0000
Manifest this update: Mon 21 Sep 2026 08:01:11 +0000
Manifest next update: Tue 22 Sep 2026 08:01:11 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: wzoJQsszmpz+A9W4quhSku9BLMsUXePolZBLwcJNOZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:b8:7f:0c:6c:97:f0:94:ef:b0:21:69:5c:69:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Sep 21 08:01:11 2026 GMT
Not After : Sep 22 08:01:11 2026 GMT
Subject: CN=8a62f80480859035d086bdcff0b79c2b42b6339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:0a:5f:a4:e1:08:90:18:b3:7d:ef:98:3d:
66:11:4d:b6:16:0b:e1:7d:a5:83:e7:d0:09:a7:fc:
9b:e6:26:b4:c5:fe:85:a0:60:a2:d0:fc:3c:22:41:
2b:01:7a:8a:03:92:14:3a:68:bb:1d:5a:ab:48:b1:
88:f4:27:11:94:ac:52:f4:8d:9e:eb:e2:f1:97:ff:
c3:1c:4d:14:4e:96:b7:75:de:e1:52:fc:a1:ba:84:
d0:ff:5c:2f:1d:9a:2f:07:01:4c:a4:0b:ce:d3:f7:
ed:fd:27:1d:8e:5a:1c:6f:a7:a7:67:b3:4a:82:99:
01:8d:2b:dc:2b:21:ee:97:dc:91:8e:c8:bc:34:83:
a5:05:8c:f3:9c:1d:50:6e:b8:ab:62:8f:c8:84:1d:
0d:29:e1:85:7c:86:f2:fa:84:5a:1a:01:01:e0:d9:
b5:f3:4d:27:d0:0a:42:d7:a0:c2:1f:60:29:27:4e:
fe:e5:66:40:1d:1b:36:d8:f5:f4:2b:93:9a:87:31:
78:8b:97:6f:1d:cb:e7:23:21:77:76:cf:d3:46:d7:
da:69:92:2f:83:56:dd:ea:6a:f9:27:07:6f:e2:6e:
18:cc:d9:61:ea:52:8f:ff:f7:88:4c:4a:0e:79:89:
20:2e:23:bd:ac:4a:2f:1b:38:6b:fc:a9:d9:db:fe:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:F8:04:80:85:90:35:D0:86:BD:CF:F0:B7:9C:2B:42:B6:33:9E
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d3:83:8d:d2:08:18:48:db:e1:11:6d:b7:4f:28:1d:42:42:
4c:57:90:56:9f:9a:1e:80:e1:98:b6:2e:47:86:47:ff:69:98:
e9:f2:29:85:78:5e:5b:2b:6e:75:85:f1:e3:d8:7a:da:de:2f:
c7:ce:01:70:d3:08:14:29:aa:0d:0a:cb:bb:be:ed:d2:1e:9f:
a1:ac:1c:8a:50:b6:46:68:39:2a:1e:52:e0:1f:d5:f6:25:d2:
b2:8d:9a:20:fa:6c:5c:7e:25:f4:fb:e3:e4:10:a2:54:a7:9b:
59:de:28:af:85:6e:09:7a:50:7e:05:52:08:82:a4:4d:7b:d4:
df:54:84:45:15:69:fe:7e:14:fc:cc:74:18:3e:fb:7a:49:3b:
b7:1e:09:6f:6d:3c:53:bf:3d:af:a9:31:56:f3:d5:11:7b:cc:
c4:c6:bb:02:6c:57:96:7d:48:29:4f:cb:bd:19:e4:75:37:ea:
29:55:a5:36:e9:38:80:e6:4d:4f:a4:d5:cc:6d:ab:78:27:7f:
ce:eb:42:b1:6a:8e:1d:3b:dc:70:b8:7e:8f:81:82:0c:d4:7c:
97:4c:95:db:18:bc:94:52:36:02:0f:ea:69:c8:5c:46:9c:f1:
37:c2:db:0e:d2:ff:ed:d5:9e:9f:87:ed:8a:84:70:81:8f:71:
09:eb:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:03 2026 by rpki-client