Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: VmK7FOQqjQPDBs+cAil7ce6G2SOstpR+oJNB076o8MQ=
Subject key identifier: 08:9A:39:D1:C3:22:3C:3A:D5:37:D1:BA:99:47:66:B1:E1:F6:02:31
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 01A141962C2F8244886C4743C6C5D0687F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 22:02:03 +0000
Manifest this update: Thu 15 Oct 2026 22:02:03 +0000
Manifest next update: Fri 16 Oct 2026 22:02:03 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: jPPv6Wb9jhyA9JwW5fjHPot/2buzPrTpV0vijRGzn40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:96:2c:2f:82:44:88:6c:47:43:c6:c5:d0:68:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Oct 15 22:02:03 2026 GMT
Not After : Oct 16 22:02:03 2026 GMT
Subject: CN=089a39d1c3223c3ad537d1ba994766b1e1f60231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:80:dd:4a:70:25:d0:c8:3d:ae:cc:aa:96:
b0:5b:dd:de:e8:4e:8d:89:68:1b:d3:ad:05:8a:22:
9a:d2:7c:d6:22:3f:e8:d0:db:db:4d:f6:58:b7:21:
e9:06:cd:a3:c8:3c:92:d9:0c:b8:af:73:ca:d8:aa:
b0:68:0e:c0:28:e5:8d:d8:87:0f:c7:93:2c:64:5d:
bc:5f:4b:dd:b0:92:2b:e6:72:62:50:03:d1:c7:3b:
2b:f1:aa:1e:d8:b4:c9:93:9e:97:60:d8:b8:7c:69:
98:ed:16:bc:29:be:91:02:b9:59:1d:ed:44:d3:36:
b7:4f:56:e5:02:bb:96:d6:49:f4:2a:32:f6:30:f9:
79:87:d6:73:f0:b2:bb:57:9e:0f:ef:78:84:63:42:
ae:df:df:83:73:59:c7:57:fd:07:ce:ac:1e:a2:8a:
59:a2:40:80:aa:75:99:11:ca:19:d1:88:3f:70:7d:
5e:0b:a1:00:f3:28:8a:5f:58:7f:df:91:3e:9a:a4:
34:66:4f:22:c1:8f:a7:ba:46:dd:5b:0c:6c:e1:50:
5a:4e:57:58:88:95:bc:02:00:e0:65:9a:f3:50:7d:
5e:01:1d:ec:ae:b6:f9:5c:eb:92:15:4b:2f:37:da:
28:6c:10:d9:3f:04:db:15:fa:1f:47:92:0d:24:d6:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:39:D1:C3:22:3C:3A:D5:37:D1:BA:99:47:66:B1:E1:F6:02:31
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:aa:52:60:41:ae:23:f9:72:00:d1:34:41:98:23:01:23:87:
8f:ff:63:1d:43:99:e8:a5:76:23:29:3d:17:1d:28:f6:be:cd:
1b:91:0e:b4:b0:69:b9:90:d5:d7:5c:f7:7d:c4:8d:23:ee:17:
eb:f4:2d:a5:c4:db:3a:1d:1b:65:55:ca:33:a3:79:4c:f0:fb:
6a:0d:da:0b:d2:c8:45:1e:a5:34:9d:33:7a:19:58:d1:c5:5d:
09:12:37:4c:a6:2c:74:4e:1d:b9:22:1c:3a:59:62:15:ab:9a:
f1:f1:47:0b:95:89:1e:c8:a6:8a:8d:79:dc:ff:b0:94:b3:49:
7e:3a:a4:b9:92:12:9d:de:46:ad:13:c9:5d:0b:8a:86:0d:96:
bf:11:47:c2:67:02:ee:81:c2:4d:ef:81:50:bf:84:3e:a8:cf:
6c:4e:28:51:e7:85:51:66:8d:33:31:8c:2a:da:dd:bd:27:d5:
7d:13:80:ea:0a:6e:d8:ac:54:20:0a:52:87:46:1f:6c:3d:5b:
1b:eb:87:ef:72:cc:7b:25:f8:9d:65:9a:7e:15:c3:e6:c2:25:
f9:b5:7c:ee:8f:37:c4:29:aa:78:5d:81:3b:f5:ff:51:61:ff:
e8:f8:86:b7:1e:18:4e:91:1b:a2:65:e4:e4:8d:aa:57:83:64:
99:4e:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:25:25 2026 by rpki-client