Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: xOdFSAt9gKebfh3FeUTgvzbEhBheiTjLelcf4Z5YHIc=
Subject key identifier: 8F:F8:85:48:B0:5C:AA:89:56:FC:38:64:13:9F:84:31:CF:A2:56:25
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 01A00101BB3EE82B74C411F7AF5F4D56DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0F0C
Signing time: Fri 14 Aug 2026 16:01:25 +0000
Manifest this update: Fri 14 Aug 2026 16:01:25 +0000
Manifest next update: Sat 15 Aug 2026 16:01:25 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: zZUX5kvjAekFaNDTgf9QKyZRUiJNwWEhS1M1TyEe45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:bb:3e:e8:2b:74:c4:11:f7:af:5f:4d:56:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Aug 14 16:01:25 2026 GMT
Not After : Aug 15 16:01:25 2026 GMT
Subject: CN=8ff88548b05caa8956fc3864139f8431cfa25625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:db:79:15:ac:85:da:28:e7:2d:55:2d:75:
66:5f:30:dc:39:c5:5d:6d:83:a6:77:6a:c7:3e:fe:
e4:a1:49:6b:0e:e4:8e:44:fb:71:f2:e6:80:42:63:
2e:0e:79:8f:40:51:b7:e7:48:4d:b1:23:7b:65:fb:
a5:b6:ef:a7:6f:c4:00:67:b1:8f:44:2f:08:eb:bb:
c6:48:03:b9:c6:df:a2:26:31:28:16:68:1d:cf:48:
0d:d0:52:75:db:17:a0:ca:21:67:95:4f:51:b7:c9:
14:02:91:cf:3f:bb:23:19:3e:47:f2:59:95:57:b9:
19:a9:59:3b:34:13:13:b0:4c:d5:02:b1:db:03:af:
0f:0b:85:d2:da:60:41:b5:51:2e:0d:02:0e:e7:e9:
6b:02:75:bd:c9:c3:d3:72:bc:98:2c:71:30:88:f2:
3b:a9:b5:41:80:7c:de:46:b0:7e:f3:26:4e:47:d1:
ba:86:98:31:24:37:a6:8b:75:1c:f3:4f:77:3b:a5:
99:02:ed:9d:1f:30:b4:7e:ba:39:d8:54:84:5c:9e:
ee:64:88:17:b5:4a:7d:4b:25:5d:a7:a5:d2:4c:ca:
89:b7:dd:ac:6c:8f:b3:c9:10:e7:11:18:d2:3d:5d:
cf:f6:f1:2c:0c:f6:86:31:95:16:36:98:ac:a9:bc:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:85:48:B0:5C:AA:89:56:FC:38:64:13:9F:84:31:CF:A2:56:25
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4c:22:d1:f3:cf:07:f1:ee:15:e7:cf:25:71:72:4f:72:f2:
12:6a:af:51:a3:13:18:e4:d8:d1:e3:6d:5a:78:cc:3a:2b:ce:
e7:c5:78:60:fe:5f:15:86:7f:50:90:eb:9d:fd:ab:a3:c5:b0:
fd:ae:55:ac:54:f1:50:c3:29:2b:13:c2:5d:47:b0:7f:64:76:
35:fd:86:18:aa:b0:c5:9a:14:93:fd:8c:4a:eb:bb:e0:b1:45:
c7:32:41:38:22:97:88:08:e6:f3:b1:60:56:36:34:9d:8f:90:
9b:22:d5:20:8f:e8:1e:b7:fa:66:29:1b:2a:18:a6:1b:d5:d1:
e7:db:eb:ab:15:b7:86:cb:4f:ae:8b:73:3b:14:60:eb:b4:96:
86:45:03:73:66:cb:68:a8:7d:1f:0d:c4:85:c0:10:20:6f:5c:
48:aa:ba:34:b6:23:4d:e9:d0:c3:a4:32:76:fd:3d:20:13:7d:
b8:33:bd:90:25:01:46:5f:6a:74:d6:b5:c2:fb:f4:8d:eb:a3:
59:d4:76:3e:70:c1:11:37:15:d5:69:1b:99:54:71:f0:7a:bd:
b2:8b:6c:65:94:97:08:31:f0:3f:ba:d4:49:7b:a7:ae:08:7c:
1d:24:08:e9:1e:e0:19:83:a2:05:d9:09:45:bd:dc:aa:71:7e:
5b:47:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:10 2026 by rpki-client