Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: R+AMEU/9/6NRNO0QStiT8SbxLw4aObgC1Dc8UB7AGHM=
Subject key identifier: 28:86:BD:7A:54:49:68:E0:F5:6A:68:55:6A:67:6F:C8:4E:26:0D:38
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019D3866664A20E5045061BE3126E0FE8BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 07:02:07 +0000
Manifest this update: Sun 29 Mar 2026 07:02:07 +0000
Manifest next update: Mon 30 Mar 2026 07:02:07 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: gGu27zKDRyV+9Z0jRKJXhzQ2iQmGm5MaMCZUYh1gBT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:66:4a:20:e5:04:50:61:be:31:26:e0:fe:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Mar 29 07:02:07 2026 GMT
Not After : Mar 30 07:02:07 2026 GMT
Subject: CN=2886bd7a544968e0f56a68556a676fc84e260d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:ae:42:4b:83:90:33:b2:b3:68:6d:f8:aa:
f0:b5:0a:f1:b3:4c:b4:1c:e9:4b:f5:ba:ec:9d:28:
b1:3c:97:de:3d:ba:37:2c:79:db:10:39:3d:f1:1e:
1a:93:c8:61:bc:ff:71:af:4f:eb:2a:fd:38:38:c9:
8d:40:d8:da:4e:15:f8:e1:3b:dd:7c:4c:cf:89:10:
3e:c5:f4:1c:c7:c6:af:6e:a2:b3:7d:29:51:c3:d7:
be:26:b4:3a:f5:95:9e:f7:f4:40:d9:62:d7:39:7f:
fd:10:57:78:22:49:b5:72:0c:e9:a9:b1:51:b5:58:
7d:2a:d4:87:e3:69:8b:d4:3c:78:4c:6c:ba:de:9e:
5c:62:79:dc:54:5a:9b:23:ff:de:4b:2a:2c:c6:d6:
23:1f:cf:0f:f8:1a:36:b9:fd:3e:af:38:09:06:7f:
49:ac:50:47:12:e6:7c:de:56:0a:76:b3:ab:b7:3d:
4f:b6:bc:17:53:5d:17:d0:26:3c:dd:87:2e:df:af:
d8:ad:fb:0a:a3:dc:b1:bf:a4:7a:de:ec:ad:79:dd:
e8:71:78:16:ed:f0:db:3c:75:f3:0b:3f:ca:05:72:
cc:27:9b:7c:36:56:73:c4:06:58:6b:37:f3:8d:ae:
2f:87:f8:b5:0f:cc:2e:e8:d9:3d:fc:7a:85:35:be:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:BD:7A:54:49:68:E0:F5:6A:68:55:6A:67:6F:C8:4E:26:0D:38
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:be:fa:70:5f:90:77:b9:89:35:51:c9:39:8c:8b:5a:0d:60:
d1:f9:95:f1:21:25:bf:81:e7:ec:e3:c7:58:80:2d:05:84:f1:
57:be:bc:a7:72:8a:8b:c8:41:59:4e:b1:44:3c:05:35:e4:d0:
14:fe:b4:b7:dc:10:8e:bc:9d:cc:26:17:de:24:83:f7:46:fc:
96:59:bf:86:29:cf:63:2e:70:71:b8:fa:89:08:77:70:32:21:
f2:35:ae:42:ad:f7:33:c6:ad:67:bf:08:5d:70:96:ac:e2:af:
e7:d0:d6:78:0d:34:41:1a:3e:d0:50:93:78:ea:33:d1:e4:c6:
88:62:09:88:b4:ca:fe:46:f8:f9:95:41:e9:f2:92:78:04:66:
98:a5:70:10:dc:d0:b6:ce:44:97:75:1a:5a:23:5d:57:d8:44:
7b:55:f4:b0:8d:0b:25:cd:33:6b:0d:a6:d9:c2:fb:69:62:9c:
22:21:2f:86:30:d5:03:3d:85:12:1a:0c:3e:d4:f3:b5:3d:e1:
13:95:2e:9e:62:11:10:e3:eb:e3:74:09:1d:14:29:62:fd:0d:
01:83:5b:20:8e:8b:0f:6a:90:2a:0e:7d:38:4c:f5:4d:ba:13:
c8:d0:d7:c2:46:b9:fd:a0:c3:a1:32:31:26:bf:36:a3:01:8e:
14:de:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:43 2026 by rpki-client