Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
File: 8UOb0DqCBvrN-S-zIOAlBUVivLc.mft (raw, json)
Hash identifier: SeARRKjKTxP19STmcQ94RUEd7EzNOcsVj2mUAshfwdY=
Subject key identifier: 2D:2C:66:FC:70:11:B7:34:37:A4:FC:15:0C:19:D6:15:0D:B6:1E:0F
Authority key identifier: F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
Certificate issuer: /CN=f1439bd03a8206facdf92fb320e025054562bcb7
Certificate serial: 01A0419812451AF19FCC578B53977705B9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
Manifest number: F4
Signing time: Thu 27 Aug 2026 05:01:20 +0000
Manifest this update: Thu 27 Aug 2026 05:01:20 +0000
Manifest next update: Fri 28 Aug 2026 05:01:20 +0000
Files and hashes: 1: 8UOb0DqCBvrN-S-zIOAlBUVivLc.crl (hash: L1KBrFkeyO/tEhC6EcTEjUAw23DKyEQlrYrzjcvV2+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:98:12:45:1a:f1:9f:cc:57:8b:53:97:77:05:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1439bd03a8206facdf92fb320e025054562bcb7
Validity
Not Before: Aug 27 05:01:20 2026 GMT
Not After : Aug 28 05:01:20 2026 GMT
Subject: CN=2d2c66fc7011b73437a4fc150c19d6150db61e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:0a:5a:fa:ca:bd:f5:1e:79:f4:37:f8:d9:
70:6d:8d:32:fd:cd:4a:55:82:82:de:68:75:f3:d8:
87:39:64:24:e3:8f:50:6c:d1:1f:68:dc:e5:24:f4:
a2:1a:05:26:c7:e6:07:7b:89:b0:41:a7:be:2c:5a:
13:5f:ad:29:2c:8c:f7:db:6a:f7:23:a5:22:22:0f:
82:4a:6a:57:56:bd:83:f2:dd:9f:e0:5d:68:4b:8e:
04:20:70:a3:31:da:f8:5b:ae:5b:d0:ce:7e:ed:e5:
10:71:7d:2e:f2:fb:ec:42:93:18:1a:63:7b:9e:0e:
6b:97:a5:72:d9:88:86:0b:ee:af:2d:e9:9a:0a:a8:
c5:c6:ef:ec:62:7c:34:21:ab:7c:04:53:88:60:4c:
d6:93:27:6d:e7:9e:97:a0:28:d3:56:7a:6a:73:45:
c4:72:f5:3f:9c:d7:33:e6:4c:d3:0e:50:7b:03:e6:
1e:de:a8:bb:e7:ea:94:e6:3a:aa:ee:11:e0:72:a5:
a0:bd:8e:76:dc:25:6d:47:8c:ee:8e:b9:3e:c6:5a:
ae:94:cf:e3:86:06:5c:1f:bc:02:cd:72:d1:31:82:
84:5c:c7:cd:bf:e4:7d:35:7e:a8:8f:0a:ce:04:3a:
5f:73:51:8a:97:fc:dc:80:1d:41:d9:3b:94:8c:b0:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2C:66:FC:70:11:B7:34:37:A4:FC:15:0C:19:D6:15:0D:B6:1E:0F
X509v3 Authority Key Identifier:
keyid:F1:43:9B:D0:3A:82:06:FA:CD:F9:2F:B3:20:E0:25:05:45:62:BC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UOb0DqCBvrN-S-zIOAlBUVivLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/189ffa-f042-45be-8e24-63a33b0436d6/1/8UOb0DqCBvrN-S-zIOAlBUVivLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a9:c7:af:d0:31:0b:ad:00:eb:50:e3:56:72:42:b6:85:f3:
af:ef:1e:c3:ed:1c:b5:14:88:87:58:f9:f0:1e:43:2b:b1:ab:
6d:c9:30:51:63:32:c7:e6:16:1e:76:11:f6:9c:38:e0:c3:74:
df:f5:cb:31:63:0d:5f:20:d9:6b:88:a0:b9:5c:c7:ba:4a:c3:
21:ba:02:9c:dd:dc:79:d3:23:21:d8:eb:98:66:7a:12:83:45:
46:0a:d7:7d:d5:31:b9:96:47:92:8d:33:67:53:fd:6b:43:cf:
8f:05:7c:b1:72:95:0f:cd:a8:01:a6:25:44:6c:60:99:0a:40:
65:6f:94:87:6b:51:8f:f7:19:5e:f6:ef:4c:bc:50:bc:68:9e:
03:ff:78:07:76:9a:db:b5:01:5c:12:7f:c6:70:ec:6e:63:7a:
86:c8:50:26:60:e7:09:0a:eb:55:56:24:1c:f8:bc:5a:de:89:
86:38:d9:19:7b:c5:d4:a5:d6:c6:cb:3d:96:03:3b:68:d9:8d:
9f:67:12:bd:93:1b:58:35:47:44:c8:54:8a:31:ff:c1:6d:37:
04:5a:bc:af:93:99:03:c7:84:d0:7a:f5:7d:fb:98:92:8b:e6:
10:3c:48:72:dd:8c:27:cd:36:6f:b5:9c:41:f8:96:d8:b5:57:
78:89:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:41:14 2026 by rpki-client