Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: 0uAL4blKyEb71Rjz4Tz7kJqSZ6F36EQ69nZ/mtc7PN0=
Subject key identifier: 09:DC:3B:79:61:23:0A:1D:0F:F3:8B:90:AB:95:3E:58:D9:B3:0D:72
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 01A001DD874BC663B9B614EC07E44CFF8128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 19FB
Signing time: Fri 14 Aug 2026 20:01:30 +0000
Manifest this update: Fri 14 Aug 2026 20:01:30 +0000
Manifest next update: Sat 15 Aug 2026 20:01:30 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: rYGCZyL5Zjho4T7H8icVCYKTEa5Fh/4bSNa+VET3tMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:87:4b:c6:63:b9:b6:14:ec:07:e4:4c:ff:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Aug 14 20:01:30 2026 GMT
Not After : Aug 15 20:01:30 2026 GMT
Subject: CN=09dc3b7961230a1d0ff38b90ab953e58d9b30d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:06:1c:ce:58:7d:2f:5c:bc:65:94:b3:27:
df:a2:5b:46:92:da:a8:5e:75:c4:0b:0a:90:3c:cf:
1d:4b:fa:36:30:07:a4:fb:07:70:c5:9e:a2:51:6b:
2f:3b:ba:a7:bd:ee:2b:7e:3e:18:b8:1f:b0:b0:8c:
5f:6b:19:99:4a:38:5c:7a:ea:8e:a1:be:fa:d6:2c:
f9:9f:d1:58:f5:22:28:16:f6:ec:aa:7b:98:2e:64:
8e:6f:7b:9c:e8:88:22:93:b4:c1:55:aa:7f:ba:d1:
3c:11:08:ff:1d:ad:09:47:89:0b:ac:af:f9:ff:de:
fb:29:88:b1:73:6b:9b:65:52:a4:70:e1:48:ce:ce:
75:ab:da:d8:6f:5f:b1:d3:1b:bd:3f:95:df:e9:9e:
09:7c:e0:e5:83:cd:14:68:7a:85:67:9c:da:67:92:
d4:63:ab:0f:21:07:83:d8:38:58:65:24:e5:44:78:
30:a9:48:0c:11:27:43:1d:70:c4:0a:a3:30:0f:9f:
fa:f4:8a:e6:d6:77:b8:bc:f3:36:0d:a1:cd:7e:24:
b5:e7:31:53:3c:41:5c:cc:ae:3f:1a:e9:20:a4:c2:
f2:a5:26:d5:27:bf:46:48:b7:39:c7:32:ea:7b:2b:
aa:2a:a5:25:be:ec:a8:30:ca:d5:a1:04:02:52:7b:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DC:3B:79:61:23:0A:1D:0F:F3:8B:90:AB:95:3E:58:D9:B3:0D:72
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a6:df:47:53:42:d6:d0:99:7a:33:aa:66:52:78:59:57:65:
04:1a:e8:a4:0c:4e:cc:fa:65:11:64:f8:b4:1f:e3:5d:f2:81:
7b:c5:bd:c5:11:fd:c1:3a:84:11:f9:ab:7e:c5:b5:ba:45:5b:
1c:44:29:a4:0b:21:a0:0e:d4:42:88:10:ba:23:75:c8:45:6b:
0c:66:78:8e:18:7c:db:96:93:62:bd:40:66:5e:94:b0:0b:7b:
01:8c:e0:e0:72:89:d7:77:98:ee:bf:43:59:0a:fc:e0:2a:c2:
c3:80:6c:89:e8:3f:d0:54:f0:ec:81:50:3a:a3:83:8f:16:2a:
54:c7:e0:85:b7:58:5c:6f:42:a3:68:cf:67:c2:a0:8b:41:14:
2d:e4:c8:70:a9:64:b5:b0:8f:68:0b:4b:ec:14:13:97:aa:74:
81:32:b1:b3:9b:fa:fd:6b:52:aa:eb:aa:24:ec:57:9f:df:8d:
af:3e:1c:d8:7a:db:00:a5:ab:2c:78:d0:62:8e:df:b3:94:43:
fc:8d:a1:1d:b1:21:12:cf:0e:ad:6c:d9:d7:0d:f8:f6:cf:93:
0d:1a:7c:23:6a:f9:b8:49:73:50:3a:db:35:34:87:d9:5f:9c:
dc:56:29:71:e0:16:37:79:0c:a3:38:1e:69:03:8a:88:63:71:
6d:06:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:02 2026 by rpki-client