Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: vvzlniPu42ENnIQccx/gE8VkMqZIHYBNG7TygEqpC6U=
Subject key identifier: 65:3D:E0:30:95:DE:3E:71:B9:5B:AF:80:68:06:57:5A:9F:4F:EC:32
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 01A00100F6F1717823E589B840303578370E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 16:00:35 +0000
Manifest this update: Fri 14 Aug 2026 16:00:35 +0000
Manifest next update: Sat 15 Aug 2026 16:00:35 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: k8LnhJnmncFxcJKQ8iXXPgfgXKLvvBvcyHeJr/8LaIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f6:f1:71:78:23:e5:89:b8:40:30:35:78:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Aug 14 16:00:35 2026 GMT
Not After : Aug 15 16:00:35 2026 GMT
Subject: CN=653de03095de3e71b95baf806806575a9f4fec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:80:25:27:aa:7b:8f:a7:55:6a:c5:03:f2:
f9:b4:48:49:59:7b:e4:fb:09:54:e9:51:72:aa:7e:
40:02:ba:02:be:b1:cb:19:00:c6:9a:6e:47:1b:5a:
60:58:4d:ae:0e:5f:92:4a:36:7e:1f:1f:72:ac:c1:
ca:0c:97:3c:b6:7f:b3:41:f1:68:a7:fe:91:5c:7d:
24:7b:be:dc:fd:24:16:0c:e1:4b:83:82:32:47:12:
83:4b:64:87:15:e6:56:cc:8b:57:b4:04:db:d9:da:
ba:af:e7:3a:63:62:20:c5:d4:0e:93:09:05:d7:2a:
7d:e4:68:83:79:ce:b9:dd:70:4f:d2:b2:be:35:2d:
ff:2a:de:5c:5f:a5:49:ab:e6:59:00:2a:5d:6b:57:
80:94:24:c6:49:b6:c8:e8:5c:e2:04:3d:88:11:94:
81:71:f6:b2:ef:37:a1:8b:c5:b9:1b:bf:78:bd:6e:
ef:90:c5:5d:c7:01:58:f6:d7:4c:66:d3:f4:a6:c3:
3b:d0:f6:8c:25:3a:72:ca:05:ca:44:53:39:f7:91:
cc:b9:c6:0a:9c:6f:5a:67:bc:5d:87:62:c6:4f:9c:
32:d5:93:5c:e4:31:f6:7b:62:35:25:e4:c6:55:83:
2a:68:ff:40:8c:8a:92:55:06:eb:79:28:16:8d:23:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:E0:30:95:DE:3E:71:B9:5B:AF:80:68:06:57:5A:9F:4F:EC:32
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ba:fd:5f:e2:26:be:57:fd:ef:ea:02:06:b5:63:cf:fa:cf:
c3:e5:9b:a6:2a:d0:ff:e8:3b:74:1d:2a:be:5b:a2:9a:04:2e:
ee:86:43:64:a7:58:23:24:d3:63:6c:a8:be:1f:81:dc:92:12:
c8:fc:7f:52:af:6d:66:7f:de:2e:13:f7:8a:3d:0d:b7:bd:bc:
c2:8e:1e:5e:c9:b0:99:b5:5f:b6:a7:9c:fe:ce:f1:45:f7:6e:
5f:61:a6:71:5b:d1:f3:b6:71:f8:d1:43:f6:db:85:1c:dd:f3:
02:f2:57:21:1b:fb:c3:24:d4:0f:4b:e2:57:18:50:e5:9a:ef:
09:28:ee:a3:cd:16:5f:c0:5e:ab:8a:53:3d:09:f5:91:84:af:
c2:f4:45:51:be:20:cd:88:59:79:fb:79:01:c8:be:43:f0:ab:
b9:16:97:64:c9:d1:4d:6f:f6:60:f4:9c:40:16:2e:66:bc:e7:
8b:56:85:b5:ca:0c:7d:03:3c:62:58:39:53:72:92:4a:d0:8b:
f9:c5:6d:0d:a6:d0:61:d8:30:32:25:9d:65:8c:e6:15:99:09:
e8:5a:ba:56:fa:50:20:ee:e9:05:e2:25:82:0d:fc:81:19:fa:
15:ae:f1:4f:d6:99:43:ad:35:77:ec:54:93:a3:85:ea:ea:f1:
05:34:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:03 2026 by rpki-client