Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: yfyDtq9/hD9iZ+CFeZDCaQWY9ZhpmBnSpBt1sqD6NxQ=
Subject key identifier: 1D:C1:EB:3F:85:21:E7:3C:45:E5:E9:B8:A0:C6:D0:98:7E:A9:D4:FC
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 01A00100F57AB3233D17A44792F6975407B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0F8A
Signing time: Fri 14 Aug 2026 16:00:35 +0000
Manifest this update: Fri 14 Aug 2026 16:00:35 +0000
Manifest next update: Sat 15 Aug 2026 16:00:35 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: 01Au3n0T1gEYcRG6tUnzfRA3kwHI1CFyDE7OJWFVzM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f5:7a:b3:23:3d:17:a4:47:92:f6:97:54:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Aug 14 16:00:35 2026 GMT
Not After : Aug 15 16:00:35 2026 GMT
Subject: CN=1dc1eb3f8521e73c45e5e9b8a0c6d0987ea9d4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:3f:c1:dd:02:96:2a:d1:0b:cf:f2:a6:6f:
3e:b3:a2:a4:ca:55:28:14:47:19:e6:ec:57:8e:6a:
4d:32:2b:a2:88:0c:9a:78:12:d3:87:e1:28:d9:8d:
58:56:e3:4b:90:e0:c5:99:27:cd:e0:8e:51:7e:6f:
80:07:c8:1e:01:fa:76:42:d7:90:d8:a3:5e:bf:70:
b4:0b:17:76:a0:82:20:c2:1a:bb:c5:60:97:b8:02:
d1:8c:7e:e5:26:53:7b:7f:f0:96:e9:5a:4b:c6:d8:
6d:7b:64:ec:96:05:56:f6:83:60:98:2d:70:fd:c9:
1a:c4:1e:66:f3:09:dc:80:da:60:64:8b:07:c5:60:
2e:55:7d:54:f2:e4:16:2c:9a:d1:2c:e6:00:ec:8d:
f9:6e:34:db:85:c1:a7:43:97:10:17:85:57:54:7a:
bd:3e:d6:4c:5c:a0:8d:45:ca:69:2a:55:bb:c2:dc:
fd:ff:0d:e1:36:fd:9d:ce:8c:7e:87:ad:ed:c4:dc:
b1:f9:9e:f4:57:65:fe:39:aa:02:04:e6:25:95:2d:
af:c8:93:e6:3a:c4:05:15:a7:99:3b:5f:76:ab:fb:
99:33:e5:86:77:08:29:b2:17:e2:0c:7d:e8:ab:2e:
c8:9f:dc:b8:90:d6:3a:04:6e:b4:e4:26:8b:1f:fa:
e1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C1:EB:3F:85:21:E7:3C:45:E5:E9:B8:A0:C6:D0:98:7E:A9:D4:FC
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:5f:b1:49:b5:b4:9d:7c:72:bc:d9:80:79:70:f8:e3:67:
1b:9f:ae:68:15:95:92:fd:c5:47:6a:e2:dc:85:50:5c:4a:25:
4d:78:8e:25:96:80:ec:d5:a9:53:6b:6b:a7:fc:42:74:3c:ad:
00:d3:d8:1b:88:77:f3:55:bd:9d:9f:12:b1:f1:63:50:8b:96:
ef:dd:ff:66:7e:38:c0:41:1a:90:62:1d:12:e0:af:16:95:a3:
f0:c8:30:b5:4a:ec:55:f0:4d:1c:de:d3:d4:db:79:ba:1a:e3:
ff:f7:d1:ee:d2:57:6d:0a:c7:f9:23:66:3c:07:a2:61:96:a0:
d9:70:55:9c:89:d3:9f:82:47:21:6b:29:bc:a3:82:45:da:01:
34:85:fc:fb:f1:9d:73:79:ec:8a:c9:bb:d6:61:8f:6c:4b:18:
a9:10:87:27:a4:0d:19:fc:3a:4a:1b:f5:5c:c2:0a:8f:76:ce:
ca:d5:a9:40:cd:93:14:66:6b:e1:91:44:5a:75:35:18:83:bc:
15:f1:6c:4b:a6:00:44:f1:ce:71:f3:d4:1f:85:b5:81:62:4a:
fd:1c:d2:59:56:21:5c:de:e6:79:b9:66:3a:a6:93:dd:e9:4c:
5e:65:1b:72:6c:bf:f4:de:34:fc:f2:a0:18:78:32:ba:f9:aa:
50:d7:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:46 2026 by rpki-client