Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: LAKXr6ULw/vf9PORBjbu3FnjdJ3kouSXUK41goQmuQk=
Subject key identifier: 99:A0:A7:CC:84:D2:ED:DD:3B:F9:F0:69:08:11:83:5F:65:D8:02:81
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 01A0024A8C655017F876C181BE900347CF36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 22:00:35 +0000
Manifest this update: Fri 14 Aug 2026 22:00:35 +0000
Manifest next update: Sat 15 Aug 2026 22:00:35 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: yAd4U3LYKVXj/vu1byqj50t3MPc9vZCW6IcIA4T401Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:8c:65:50:17:f8:76:c1:81:be:90:03:47:cf:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Aug 14 22:00:35 2026 GMT
Not After : Aug 15 22:00:35 2026 GMT
Subject: CN=99a0a7cc84d2eddd3bf9f0690811835f65d80281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:bd:3d:aa:97:26:c5:a1:7d:a9:f7:fb:4e:
30:e3:2a:80:d8:8c:9d:fe:34:66:d2:dd:63:e3:70:
77:58:ec:2e:72:59:5c:b9:84:c4:f7:34:81:1f:cf:
df:38:b1:ed:63:c8:27:ef:87:7f:6c:e4:4d:fc:78:
e1:37:20:95:26:25:90:fb:e1:0f:79:d2:58:85:d7:
0b:40:83:d3:71:66:f2:a3:2a:2d:48:46:3b:f4:7e:
73:6f:22:1e:ca:3f:92:fc:cb:a7:9b:92:07:eb:75:
d3:8b:cb:87:dc:d3:41:67:06:91:d0:33:cc:b2:f2:
11:41:80:c8:62:d4:4b:e6:9b:f4:ac:0c:1a:5c:dc:
da:a2:c0:84:56:25:fe:8e:e6:82:d5:ea:b4:06:d9:
81:d3:f0:0f:81:07:75:24:c8:e2:a7:d4:08:25:ee:
9a:79:3a:15:7a:e1:8d:31:e2:f5:c4:dd:70:8c:48:
cf:54:7f:21:02:ca:16:ee:8e:e4:34:97:7e:1a:97:
0b:d7:f3:56:09:a6:29:bd:d9:52:34:2b:2d:ac:c5:
76:01:9b:2d:d2:8a:32:5f:54:96:12:5e:4b:4c:a1:
5c:2b:30:52:1f:1e:dd:97:fd:df:e1:b3:5d:0c:35:
3d:ac:6f:85:67:9c:66:6e:28:ad:b3:7c:ed:66:4b:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A0:A7:CC:84:D2:ED:DD:3B:F9:F0:69:08:11:83:5F:65:D8:02:81
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:e1:bd:3f:61:1f:ec:20:e8:73:59:5d:ce:3f:b0:34:e8:
b7:d9:1f:1d:69:70:fb:5d:09:5e:0e:44:71:3b:f9:23:3d:f7:
fe:0b:02:6a:9e:86:a5:e6:45:9d:8c:77:f5:43:cd:ce:87:97:
5a:bf:23:90:fc:9b:2c:45:68:3d:a7:b3:86:97:a8:67:91:d1:
b8:cf:ab:74:b9:21:a5:7d:fa:e7:17:d9:ae:ff:fd:d6:18:b0:
3b:f7:ce:c4:75:a8:dc:91:3b:9e:fa:eb:20:0e:99:e4:f0:96:
6d:d2:8c:20:ca:51:e4:5d:da:9f:28:96:f2:19:86:02:6c:fd:
25:28:92:0e:63:0a:77:28:7f:dd:ef:ff:99:5a:0f:db:47:cf:
17:05:23:ca:a7:d8:16:e8:f5:aa:40:b3:bb:ee:9d:ef:15:3e:
c2:86:9c:2f:5d:dc:78:57:7d:b1:75:ac:de:19:2c:4e:7f:93:
19:f4:38:50:48:d5:d9:58:6f:93:2a:a5:2d:61:97:c6:d9:76:
fc:06:e0:9a:0a:aa:89:a7:47:df:f0:94:2e:63:09:a7:9c:80:
f6:c3:c5:97:e6:07:57:f7:4a:5f:cf:a1:53:33:03:ed:fd:35:
fc:ee:1d:2e:84:2a:5d:8e:23:c4:78:b8:28:9d:db:e3:15:63:
6d:d7:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:40:25 2026 by rpki-client