Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: FGOx8Et9F+1TLl/EFUclP0fIsS7CVhlCAMoU78YQCxw=
Subject key identifier: 0F:6C:02:C9:25:E5:B4:A3:19:6D:2D:4C:07:65:3F:C2:63:64:C8:23
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 019E303B87245521D23D14BCFCBF56D8E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0F7C
Signing time: Sat 16 May 2026 10:01:07 +0000
Manifest this update: Sat 16 May 2026 10:01:07 +0000
Manifest next update: Sun 17 May 2026 10:01:07 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: kExIylPv1NWpblsmmqkkS5FIgaAOcS7q+jcNGSLinMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:87:24:55:21:d2:3d:14:bc:fc:bf:56:d8:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: May 16 10:01:07 2026 GMT
Not After : May 17 10:01:07 2026 GMT
Subject: CN=0f6c02c925e5b4a3196d2d4c07653fc26364c823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:3c:0c:bd:37:eb:ea:33:80:f1:28:19:e3:
d2:5c:50:19:46:71:63:22:3d:07:61:74:fe:28:e5:
5a:e6:fe:f3:fb:7a:a2:88:50:cb:9c:36:a3:08:80:
37:b5:b1:4b:98:0e:13:c3:c3:be:84:9d:a3:20:34:
da:2f:eb:03:c3:87:fd:0c:2c:83:85:be:82:17:eb:
d2:0d:08:15:15:7f:73:f8:43:0f:41:95:e4:52:c8:
c2:a9:8f:17:80:99:e5:5a:47:0f:15:d5:e4:8a:e2:
83:81:a7:63:87:5e:fc:6e:3b:f7:5e:cd:37:be:92:
e9:69:21:46:61:68:ff:e2:d3:a3:ce:3a:d9:2c:83:
24:c6:29:a6:c3:a7:82:fc:8f:fa:44:bb:23:78:fe:
68:e0:a1:03:57:ff:5a:1a:f3:03:81:73:43:d7:7c:
0c:31:98:9d:76:8a:81:13:60:02:76:0e:a0:16:11:
78:91:50:8e:4f:4b:ee:39:38:d5:91:55:00:fd:04:
0f:15:5d:85:e5:61:12:13:79:fb:10:56:4d:8e:29:
46:5c:52:5a:b0:70:55:76:28:d0:3c:d2:85:24:83:
0d:a4:f9:37:89:1c:1e:80:75:51:80:ad:54:0d:b2:
9d:a8:d6:c4:ba:36:72:18:67:16:e9:69:ee:f4:2d:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:02:C9:25:E5:B4:A3:19:6D:2D:4C:07:65:3F:C2:63:64:C8:23
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6b:66:bb:db:6f:7f:f8:cf:f0:26:d5:75:cc:4b:7e:ac:f6:
b7:91:22:63:7b:17:6d:15:a5:32:da:4c:6d:6a:e2:fb:a3:87:
19:e4:9a:b4:da:61:e7:1f:9b:96:2d:3e:93:a4:4a:5d:5e:3e:
08:a4:a2:9e:db:fb:82:3a:d9:b6:95:d8:70:cc:29:c6:c4:37:
b1:df:c4:18:c5:37:9f:1f:47:26:9c:76:aa:ce:39:7e:33:49:
06:64:d9:0c:02:df:ac:1c:61:12:e1:9c:a0:a2:ec:f8:7e:94:
57:57:c9:2a:5e:e6:a3:db:34:90:7a:65:7b:4d:3c:81:7d:18:
3d:a7:45:87:d4:b3:e7:fb:d0:9c:15:3d:eb:be:80:9a:d1:9d:
01:2c:5e:9a:e7:e9:55:cf:c6:23:8a:22:b6:9b:e2:f5:a5:f7:
5d:23:bd:63:a0:16:85:6f:07:a1:a3:ff:68:85:a0:6b:3e:16:
dd:29:c8:ef:62:b1:31:a2:0a:e5:92:a2:0d:7f:5e:40:7f:70:
76:7b:59:ef:50:8f:e2:f6:74:b8:92:a4:06:5e:63:a8:50:de:
38:c6:f6:7f:49:df:c9:80:de:03:9b:49:85:aa:83:0f:70:d6:
e4:7d:35:0a:c8:27:68:39:56:ba:5f:85:c0:5a:af:27:17:e9:
d9:f2:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:42 2026 by rpki-client