Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: UyrgrPRt31N1VakgJ8t7NGSMCtBAim0w2nbxAQ7PFSQ=
Subject key identifier: B8:7F:9E:3C:8A:A7:B3:86:C4:F9:82:9E:E9:09:07:D0:4B:F4:A8:08
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019EC0DB8BDF187C5C5E0305BAEC7EE572E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 12:01:14 +0000
Manifest this update: Sat 13 Jun 2026 12:01:14 +0000
Manifest next update: Sun 14 Jun 2026 12:01:14 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: Di1RHo8XdutdAuHLOY20SFFtlw4bAcH8PYk9qsacwwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:8b:df:18:7c:5c:5e:03:05:ba:ec:7e:e5:72:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Jun 13 12:01:14 2026 GMT
Not After : Jun 14 12:01:14 2026 GMT
Subject: CN=b87f9e3c8aa7b386c4f9829ee90907d04bf4a808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:c2:b8:01:4f:d6:5b:b3:6f:4a:22:76:07:
d2:35:ca:f6:ef:35:ec:27:53:37:6b:ad:31:70:37:
d2:ba:ee:6b:d9:4c:09:a1:59:77:ca:33:ea:77:9b:
c4:45:69:75:01:1e:f8:7b:b4:5c:bc:ab:58:c0:3d:
d4:74:4d:3a:b4:b0:0a:ae:3d:0b:76:fe:29:69:36:
07:d1:c1:1e:65:dd:12:e3:40:a9:19:83:32:fe:ed:
3b:87:33:5a:5e:21:74:3d:f3:ff:72:04:25:27:e7:
73:a0:2c:cf:5d:43:bf:96:31:0e:dc:a2:c3:a9:53:
ed:e9:19:d8:1c:55:da:e9:ea:c8:c7:7d:02:ca:52:
0a:11:10:47:d6:cb:bf:d2:71:66:dc:70:ff:0d:f3:
6f:4e:22:fa:18:27:aa:98:1d:6a:04:95:5c:fb:6a:
a4:df:3e:2d:95:6c:41:1a:23:62:e0:90:b5:f7:69:
41:c2:7e:d2:5a:2f:13:54:51:ed:d4:67:b4:27:8c:
8b:9e:b5:bf:f3:1d:95:ea:6a:4b:c4:7b:7e:35:87:
2c:ee:69:a9:98:40:e7:35:af:48:37:70:53:fc:98:
0a:6f:53:41:27:ad:80:91:0b:25:c3:9a:a7:d3:e6:
62:2a:41:8d:43:28:c6:e2:64:c7:9f:64:dd:63:22:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:9E:3C:8A:A7:B3:86:C4:F9:82:9E:E9:09:07:D0:4B:F4:A8:08
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:26:ca:5b:e9:85:4a:f0:eb:bc:bd:89:12:3a:c5:90:6f:
c1:84:73:a1:dc:8e:ce:b1:81:13:6f:cd:2d:8f:7b:d7:27:4b:
64:4c:6e:5f:e5:bb:db:97:8b:67:0e:e9:0d:8d:29:80:cb:02:
d4:c8:88:61:4d:3d:f1:38:1d:d2:79:9f:7e:79:05:d5:a5:3e:
fc:8c:21:c7:09:4f:73:0f:0d:31:08:ee:b0:20:21:38:3f:94:
f2:1e:75:07:26:26:1d:9c:33:01:0e:06:4d:60:b3:d4:3d:0a:
f0:7c:ff:12:be:d6:73:f6:d4:04:36:64:af:7e:8e:79:ee:f9:
ef:7e:a5:c1:97:1f:f5:b9:be:87:7c:ee:fd:4f:d4:ef:08:cd:
c7:ea:31:64:61:ff:8a:59:35:55:4a:9f:ce:6b:52:d4:18:b1:
e6:42:b2:5a:a7:9d:38:5c:44:1f:16:22:26:09:49:c8:5e:33:
1a:1a:81:c2:c8:57:21:d7:ea:80:52:7e:7c:e8:a6:d8:60:9c:
b4:e5:fb:00:25:9a:66:37:38:1a:47:d4:1b:aa:3e:6e:5a:0f:
b2:93:01:c9:54:15:e9:81:b2:96:39:7a:1b:a4:1d:2a:b5:8a:
01:ad:96:a6:13:8f:c4:29:48:d6:41:e6:f7:55:0c:3a:f2:70:
b6:39:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:10 2026 by rpki-client