Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
File: D8lnTtVfCnZcpdocb6-k3SXioXg.mft (raw, json)
Hash identifier: 9J6M1hWfVuLJAhKHFR0r8Qvn7+yuMorEQw7gzzVwDBY=
Subject key identifier: 21:CA:E8:95:F0:A7:BD:FF:3F:6B:CC:AF:CF:90:CC:81:8D:C5:4D:6C
Authority key identifier: 0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
Certificate issuer: /CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Certificate serial: 019FAABEFBAF5EDCC67287C9315797283A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
Manifest number: 0AB8
Signing time: Tue 28 Jul 2026 22:01:10 +0000
Manifest this update: Tue 28 Jul 2026 22:01:10 +0000
Manifest next update: Wed 29 Jul 2026 22:01:10 +0000
Files and hashes: 1: D8lnTtVfCnZcpdocb6-k3SXioXg.crl (hash: qDuQwheNxp7dL4cPVJbZnhhIsAzmQjH5p1FiKOJnGqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:fb:af:5e:dc:c6:72:87:c9:31:57:97:28:3a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc9674ed55f0a765ca5da1c6fafa4dd25e2a178
Validity
Not Before: Jul 28 22:01:10 2026 GMT
Not After : Jul 29 22:01:10 2026 GMT
Subject: CN=21cae895f0a7bdff3f6bccafcf90cc818dc54d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:20:09:4d:0e:9b:e6:35:5d:69:85:1b:6f:
29:01:77:c2:ff:df:c0:9e:4b:54:84:ec:f0:1e:e8:
60:fc:27:5c:84:b7:60:41:7a:69:8f:91:b0:a6:e4:
82:b7:bf:8b:d8:c5:fd:0b:78:9e:e0:19:82:e5:a4:
61:2c:74:2f:c6:ba:6b:32:c0:aa:22:ab:69:9e:63:
e4:e7:cc:9d:ce:46:b9:91:ed:48:15:53:7f:27:55:
7c:5c:f8:c3:a1:b8:16:5b:17:7b:e6:f3:b5:c1:e7:
bc:c4:79:9d:79:5d:39:07:aa:1d:96:7b:a2:c4:58:
3b:71:da:e3:b9:83:5e:8b:73:fa:34:af:a0:b4:7b:
ba:c8:d2:cd:ed:85:14:69:b2:59:5b:86:c3:7b:e2:
1f:de:88:95:6a:e6:00:8e:a9:25:13:d2:0a:8d:ad:
76:92:a5:f1:22:93:e0:51:f4:b4:cb:03:09:c7:84:
d8:2a:04:14:25:37:16:e9:8a:e0:46:38:88:da:c0:
cd:75:69:f2:24:05:f6:16:91:f4:5a:26:e0:28:55:
8a:89:74:8b:0f:a7:30:f0:9b:2b:26:91:d4:46:f8:
bd:b8:2d:d7:b2:e8:55:e0:2d:36:a0:0a:1b:c3:5c:
5a:40:29:58:62:c0:00:f9:45:3d:05:9b:3a:cb:8d:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:E8:95:F0:A7:BD:FF:3F:6B:CC:AF:CF:90:CC:81:8D:C5:4D:6C
X509v3 Authority Key Identifier:
keyid:0F:C9:67:4E:D5:5F:0A:76:5C:A5:DA:1C:6F:AF:A4:DD:25:E2:A1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8lnTtVfCnZcpdocb6-k3SXioXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8ab2a3-088e-4e0c-be9a-4a946c52fbc2/1/D8lnTtVfCnZcpdocb6-k3SXioXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c7:4f:9c:f1:ce:a6:fb:4d:f7:58:74:3e:90:14:9e:b1:ad:
23:ff:cd:44:22:13:9b:06:dd:b4:11:86:5d:39:92:d4:b4:27:
c9:d8:e9:40:48:0f:0b:b4:d8:9c:67:2f:a8:a6:f9:64:02:26:
9d:86:07:30:65:9a:9a:68:85:70:6d:89:1b:a8:09:9c:ea:32:
63:70:9a:7b:43:54:a0:c7:89:8c:29:88:54:05:83:67:9d:d8:
78:45:a1:e1:9f:f5:5b:4c:93:8c:7c:49:ef:82:b4:3f:2a:88:
01:df:20:26:c1:6b:7a:cc:f6:92:18:e8:1d:3e:a6:b4:40:ae:
6a:67:47:a2:88:36:4c:65:6b:69:03:a8:0e:b2:68:a7:1b:30:
0d:f6:fd:40:9a:58:85:76:cf:d2:25:d9:79:fc:47:4c:34:ae:
2a:9e:db:3c:f8:c3:3c:22:45:27:58:08:62:dc:75:01:4f:8c:
e7:52:53:c6:3c:5a:86:66:76:e5:b2:87:60:84:67:29:8d:97:
f1:f3:53:29:0a:33:d7:15:8f:5d:81:55:4d:54:6d:77:3b:60:
2a:af:ef:66:ad:6c:ff:ad:66:15:59:40:b2:25:95:ea:9c:23:
eb:7d:ea:b4:07:b6:dd:a0:4d:66:68:cf:f2:32:56:71:a8:6f:
f4:fb:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:07:27 2026 by rpki-client