Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 4U0gn6jx7d0koluxwbQRbbyW7UdmYpFxji5yjmh+SuY=
Subject key identifier: DE:E7:E8:98:27:4E:22:D0:58:32:19:AF:4C:E1:1D:09:3B:2E:06:AB
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01A001019A2A0DD70519861DD15055169D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 173A
Signing time: Fri 14 Aug 2026 16:01:17 +0000
Manifest this update: Fri 14 Aug 2026 16:01:17 +0000
Manifest next update: Sat 15 Aug 2026 16:01:17 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: 0/R0fcVRut6ajPKFJxnREjtIShJgLN/Wy9XxgpVoVwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:9a:2a:0d:d7:05:19:86:1d:d1:50:55:16:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Aug 14 16:01:17 2026 GMT
Not After : Aug 15 16:01:17 2026 GMT
Subject: CN=dee7e898274e22d0583219af4ce11d093b2e06ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:4b:58:43:07:46:d2:30:af:14:5f:f7:4c:
db:59:63:63:91:33:b9:19:e7:8a:dd:0e:87:39:8b:
9d:10:ab:65:ba:9a:4d:8c:6c:ae:7c:dc:4b:7a:bc:
39:7d:f8:83:67:93:e4:63:fd:1e:c2:a3:13:cc:98:
fb:3a:a6:11:f7:03:08:a9:a9:5c:2b:f8:46:ae:a4:
7d:64:17:5a:4f:57:19:4e:8d:2f:4f:eb:2b:e0:73:
2b:b9:1c:66:50:ce:7d:bb:f4:80:74:4e:4c:19:a9:
85:8e:3b:88:54:91:08:6b:56:9e:4d:08:b3:e7:36:
e6:12:6f:c1:ce:fb:b0:73:8a:e5:db:65:bf:fd:09:
6a:56:dd:dd:79:33:49:ed:ae:31:51:e8:c2:d2:e9:
71:ac:ad:88:a1:4c:d1:4f:59:f3:1a:45:bd:9c:3b:
00:1d:88:cf:b6:b1:a5:52:b8:b5:1e:1a:04:35:ad:
d5:88:b2:a3:f4:ec:4d:35:bf:68:40:e0:2a:66:35:
9d:ec:bd:1b:7c:75:5a:7e:5b:e0:1c:47:3d:26:9b:
34:49:eb:b4:ea:35:2a:dd:77:e1:36:0d:47:61:50:
f9:a3:f2:ec:8c:60:6d:13:67:d8:c3:50:9e:5b:bf:
32:c2:dd:dc:0d:cf:94:6c:af:fd:65:48:dc:36:14:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:E8:98:27:4E:22:D0:58:32:19:AF:4C:E1:1D:09:3B:2E:06:AB
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:b1:48:3b:2e:1d:42:e8:7d:a3:c3:e8:81:aa:1c:64:67:
34:3c:84:8a:a9:e1:96:d0:a2:7e:b2:bc:27:99:49:6f:d0:b9:
73:65:7c:92:70:96:de:88:b7:89:44:59:0a:e4:80:49:c0:83:
6b:71:b0:f0:7b:3e:16:1a:f4:55:ba:d9:3b:d8:92:b3:b0:a6:
ce:dc:17:b3:d9:af:36:35:00:fa:62:6d:d6:0d:08:cb:5b:36:
33:39:33:e5:50:c4:66:75:2e:95:73:a6:f9:3e:e2:41:06:a8:
ef:66:1b:5a:cd:0e:05:f7:58:69:34:ab:07:56:65:d0:8a:6a:
7f:c9:92:c4:12:36:92:0a:aa:51:83:8f:b1:04:11:2e:de:11:
dc:61:32:9c:97:5d:ec:db:fb:d3:bc:34:b3:36:91:e4:cf:9a:
9e:f3:cf:6a:db:c0:db:ce:0c:6f:63:65:16:cf:51:49:eb:a0:
ff:d4:bf:60:83:3d:4d:f7:07:7a:b8:f9:83:4a:92:a0:46:6a:
79:ea:c3:c7:63:16:55:32:67:60:78:c6:78:a4:8f:c1:5a:4b:
82:9d:6b:cd:fa:39:64:75:3e:7b:40:db:4e:b7:65:3a:32:2e:
43:6f:ea:c3:73:3e:16:b8:85:31:3c:a3:6f:de:68:f8:f9:48:
e7:89:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:19 2026 by rpki-client