Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: QTzezutO+v44OhXDAKwX51ukjxdFTCKM4ekiOLYDxlU=
Subject key identifier: 3A:E2:76:E9:36:0A:AF:49:A4:01:1A:52:D2:62:E4:2A:1D:D7:A8:20
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01A14B3D8449F833FE1ADF8DB8FD55482EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 17E5
Signing time: Sat 17 Oct 2026 19:01:24 +0000
Manifest this update: Sat 17 Oct 2026 19:01:24 +0000
Manifest next update: Sun 18 Oct 2026 19:01:24 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: MedJPGH+A4jCd11gwrpTWbtdl3U5E3D/aP0AGPUGRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:84:49:f8:33:fe:1a:df:8d:b8:fd:55:48:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Oct 17 19:01:24 2026 GMT
Not After : Oct 18 19:01:24 2026 GMT
Subject: CN=3ae276e9360aaf49a4011a52d262e42a1dd7a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:97:d3:d2:d1:74:cc:86:cb:c1:26:9b:b2:
9e:ac:4b:60:54:72:8c:2d:f6:f8:95:9c:f1:e4:59:
10:e6:14:66:b1:2f:d7:89:b2:ed:be:75:50:bd:d6:
74:20:66:48:b1:38:64:08:0b:52:1c:df:d6:a5:3b:
6e:3e:c1:4e:a3:4b:7b:aa:9f:e9:5a:63:78:01:c4:
9f:58:b2:39:29:84:13:92:31:2e:61:e5:7c:78:c9:
75:3b:11:e2:c0:30:45:cd:e7:b2:80:83:ef:cb:90:
76:7a:65:9d:aa:cb:66:40:21:fb:52:7b:b0:f5:71:
fc:4f:6b:2e:c2:cf:ff:52:d2:42:7f:e4:50:74:82:
30:3c:0b:b2:78:4a:8d:74:91:d4:7d:c4:dc:da:e7:
31:e4:98:bf:4d:0e:22:67:19:75:9b:2b:a3:e9:96:
5f:d5:02:fc:8d:e1:d3:0d:56:5b:5e:dd:63:71:a6:
6f:41:54:77:31:9f:09:31:1a:31:1a:61:cb:b6:90:
62:56:74:e8:d9:ad:68:46:fc:c5:df:0c:25:af:9e:
6c:81:4f:67:36:55:9e:6a:e4:af:53:3d:8a:fe:95:
6f:7c:6d:94:5a:f1:dd:ed:1f:79:40:87:60:86:55:
68:c4:e2:1f:1f:eb:bb:15:87:08:9e:2f:5a:1b:9b:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:76:E9:36:0A:AF:49:A4:01:1A:52:D2:62:E4:2A:1D:D7:A8:20
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d4:60:06:0a:32:ce:d0:f6:0a:66:90:02:a4:54:68:e1:12:
e8:bc:a9:9b:c7:8b:4e:15:f9:00:7c:f9:af:0e:cf:8b:c4:61:
ce:2c:10:62:f2:43:60:e0:f2:62:af:93:a3:39:68:19:cc:63:
71:21:97:3e:4f:35:91:c1:8a:09:89:58:75:61:a6:63:83:54:
5d:4e:d6:15:69:70:03:a9:dd:7c:f7:7e:d0:3a:7f:6e:8a:33:
e2:bb:4c:18:e8:1d:a7:6e:31:1c:d3:e6:dd:0d:ee:80:9c:a8:
dd:1d:c4:6d:8e:97:72:92:eb:eb:7b:8e:47:6c:4e:ed:b0:a0:
5f:17:f3:5e:4f:75:43:f6:18:f3:03:31:f5:88:8e:e2:3d:56:
73:2f:89:c8:43:7f:c0:b6:04:50:5f:8c:b8:c6:23:38:94:b7:
ae:67:1e:72:79:de:81:c1:04:ab:c3:44:6a:1f:12:04:ad:82:
b0:36:81:90:56:7f:ac:77:35:1e:b5:e4:7b:f1:86:e1:6a:72:
51:fc:e3:54:dc:93:02:20:0c:d8:fc:2d:cb:52:36:67:84:10:
25:8e:48:e6:8a:10:a6:5d:a8:a7:b3:3c:75:cb:41:a8:9b:99:
ff:b3:a7:bd:15:fe:2f:36:de:5f:1b:7e:71:65:a5:6b:39:dc:
bc:13:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:31 2026 by rpki-client