Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
File: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft (raw, json)
Hash identifier: hQD+83hZQgFweQQwCTTHrvw15K2Tbalb5+daqfvDyws=
Subject key identifier: D8:9B:65:3A:61:6C:63:25:2A:F1:0B:9E:B1:8A:FC:E9:A5:A5:E2:81
Authority key identifier: D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
Certificate issuer: /CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Certificate serial: 01A041980C112ACC87C52D837FCB63240961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
Manifest number: 03CD
Signing time: Thu 27 Aug 2026 05:01:18 +0000
Manifest this update: Thu 27 Aug 2026 05:01:18 +0000
Manifest next update: Fri 28 Aug 2026 05:01:18 +0000
Files and hashes: 1: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl (hash: 4SIMoR8nYQQsbxsooTqdP6NVLLcwek8bB28290DQQxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:98:0c:11:2a:cc:87:c5:2d:83:7f:cb:63:24:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Validity
Not Before: Aug 27 05:01:18 2026 GMT
Not After : Aug 28 05:01:18 2026 GMT
Subject: CN=d89b653a616c63252af10b9eb18afce9a5a5e281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cc:f7:af:5c:0e:a0:7b:da:63:1a:a5:13:c6:
78:2b:7e:ed:b6:19:1d:71:5e:61:03:f2:21:de:04:
f3:1c:1f:1c:01:50:a1:e9:a0:79:86:80:a5:27:2d:
13:e0:f6:7b:27:38:e8:66:b0:16:0b:c0:49:52:a4:
b7:c1:1b:ee:4c:27:f1:72:7a:72:68:60:f6:25:41:
4d:77:81:b4:db:f7:ed:80:59:5a:18:4d:fe:d4:26:
22:8b:07:92:7d:dd:29:95:78:c8:06:a6:e4:13:18:
53:6c:9f:53:d3:b8:e4:cf:8a:06:de:b3:97:7a:1c:
07:4f:68:94:98:ca:c1:ff:c5:8a:d6:0c:22:fa:7a:
bf:87:bd:cb:50:85:e3:49:34:0d:b3:0b:d9:d7:1d:
aa:12:5a:c0:6d:4f:3b:08:6c:2d:28:0e:92:31:07:
81:53:12:8e:7a:67:d0:d3:d0:a6:f7:a5:58:d8:2e:
18:04:e8:27:a3:97:e3:7c:2a:75:e6:a5:ec:6f:a9:
dc:b5:b1:e4:30:2f:e0:fd:80:94:92:f4:bc:dd:90:
ab:9e:d2:86:eb:6f:c0:81:5d:02:f6:46:49:b0:26:
8d:f7:80:a9:54:37:f6:0c:e0:4c:f3:4a:3d:fb:a0:
47:99:ce:8e:e4:dc:04:f2:e3:ea:8d:61:3a:0e:ff:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9B:65:3A:61:6C:63:25:2A:F1:0B:9E:B1:8A:FC:E9:A5:A5:E2:81
X509v3 Authority Key Identifier:
keyid:D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d7:37:69:6c:b2:4c:3c:bf:55:e5:6c:a7:be:85:d3:d7:d4:
7a:22:7f:5c:53:11:46:d9:61:92:00:d6:8d:db:a6:40:30:0a:
4c:9b:b8:87:17:b7:48:23:56:22:1a:21:f4:45:b4:6e:9d:97:
ea:16:47:1c:85:32:e4:f3:d9:d4:f7:8a:74:9c:23:65:c6:1a:
66:37:3f:fb:04:18:5b:27:24:7c:f9:a2:7d:30:e5:ed:ff:12:
9f:a9:6a:78:a5:e4:34:45:e5:a7:ba:e1:a8:c6:eb:0a:3d:2c:
11:ef:8e:fd:c8:47:97:8a:ce:c7:86:e5:59:79:67:58:d7:1e:
db:60:79:99:94:87:b0:4c:66:e0:05:0c:c9:17:74:33:ee:30:
93:27:7d:55:35:93:fb:c1:5f:99:0a:64:15:43:6b:61:81:3e:
38:40:90:b6:d5:8e:12:c5:b5:48:a4:5d:13:e8:51:36:22:89:
60:49:24:08:a3:b1:ec:6a:cd:96:49:37:e2:28:81:66:b1:4c:
c4:ce:eb:42:69:d6:37:91:17:dd:0a:55:dd:2c:f0:d1:26:18:
fd:d6:1f:7a:3e:9f:eb:4f:4a:05:fd:0f:63:cd:ad:51:fb:ab:
bd:91:95:db:e8:60:5e:78:a8:1d:16:70:cb:2e:b1:98:99:ec:
fc:b4:a4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:26:18 2026 by rpki-client