Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: LqrX6nJI1YmhqaUnnYfxGdsUkF5/4M5jYFpsg4fnzrc=
Subject key identifier: D0:1E:CB:CC:49:E7:80:D7:16:99:79:B1:61:E0:10:98:63:12:C7:20
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 019F17C2943BD41D292145D2FF8E982819EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1680
Signing time: Tue 30 Jun 2026 09:00:55 +0000
Manifest this update: Tue 30 Jun 2026 09:00:55 +0000
Manifest next update: Wed 01 Jul 2026 09:00:55 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: yv04m+8VvKSNUyt2YyWZ9Rx9LeCjSW0sxWgsXzv0x9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:94:3b:d4:1d:29:21:45:d2:ff:8e:98:28:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Jun 30 09:00:55 2026 GMT
Not After : Jul 1 09:00:55 2026 GMT
Subject: CN=d01ecbcc49e780d7169979b161e010986312c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:4b:73:01:ac:d3:e0:70:ee:72:e8:93:11:
55:5e:8b:28:97:f1:aa:e0:c4:3d:9f:b2:02:04:a4:
6b:98:3a:a3:26:74:2f:da:40:41:88:f3:3f:b2:2b:
eb:a9:89:df:e4:33:e7:2f:3b:d4:d3:bc:82:84:f2:
bb:10:1d:ca:b1:e9:ad:2c:94:a5:b7:b8:2a:6b:1d:
ce:7f:f9:38:58:70:80:d5:30:93:80:f8:7c:eb:f7:
37:53:d6:9d:bc:9e:ab:c2:ab:92:20:a3:6f:99:db:
75:dc:fa:c6:5c:ce:16:4a:ba:60:a2:11:8d:95:84:
d2:f5:7f:be:be:fc:39:49:6d:4d:c3:96:17:f2:c1:
f5:38:77:09:e6:ed:b4:7c:e9:32:fd:28:38:ad:e9:
0c:1d:2c:70:7c:df:0f:71:7b:38:a4:70:d6:d8:0a:
dc:09:83:4c:96:12:17:da:ae:66:94:2f:57:78:20:
99:25:59:8d:9a:00:f3:89:58:9b:20:85:73:38:ca:
58:95:45:e2:15:a3:6e:f1:56:16:13:e5:32:8b:7a:
e2:85:56:f4:f0:c4:d5:71:2e:0c:a5:1f:b5:e8:75:
ab:a5:ff:8d:c8:6f:04:ff:27:4d:16:f2:eb:3d:47:
d3:9f:75:d3:4e:86:d1:2d:8f:f9:b2:f0:19:3f:57:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:CB:CC:49:E7:80:D7:16:99:79:B1:61:E0:10:98:63:12:C7:20
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:37:aa:31:68:17:a6:3f:50:40:24:98:bc:b5:18:b4:a0:49:
34:5f:d3:94:c8:ee:fb:3f:a5:2a:b5:a1:22:39:e8:b1:22:5f:
28:98:36:cb:e9:36:e8:3b:e6:7d:03:fc:22:b4:a0:ec:97:cf:
7b:a8:08:57:be:4e:fd:87:0f:64:07:78:23:7c:39:55:7e:1d:
7c:ab:45:29:bf:4d:51:88:61:ea:c6:76:0c:03:14:d8:b0:fc:
82:bb:91:f9:a8:b1:67:9f:70:d7:cd:a5:35:2d:43:52:fc:c4:
ed:1b:e0:75:51:69:a1:c6:c3:4f:3b:d0:f2:81:b4:10:b8:b5:
72:20:e4:d2:aa:f1:3c:ed:15:2a:fd:69:2d:ab:fb:f6:80:de:
41:60:cb:35:79:05:ca:67:9b:8f:d0:80:c6:76:1d:87:b7:45:
63:fc:bc:0f:b2:ef:8a:2a:9f:0c:0b:7c:cd:44:cd:ae:b6:5b:
3f:5c:b2:54:d7:c4:7a:83:1e:3d:d6:61:f9:5a:81:25:1d:a3:
65:21:bc:db:78:8d:74:ed:ee:af:fa:dc:55:ee:34:48:10:e8:
15:07:88:12:8c:eb:2a:a8:93:6e:c9:c1:e2:ae:bc:fd:8e:5e:
2b:e7:c9:d6:ac:76:54:09:43:48:23:3d:de:ec:5e:58:b5:2e:
cb:00:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:51 2026 by rpki-client