
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: HI/cqdUPLRwv0f/lZ3MNLli0bfEtLIUmNNJ8tvObVu0=
Subject key identifier: 5A:33:47:09:F8:01:26:33:B1:EF:BF:2D:82:CE:0F:58:F7:9A:12:A0
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 019F1754829127E13B7CA9E2E4212C0ECFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0F1B
Signing time: Tue 30 Jun 2026 07:00:42 +0000
Manifest this update: Tue 30 Jun 2026 07:00:42 +0000
Manifest next update: Wed 01 Jul 2026 07:00:42 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: TiJaBPiGH6SmD44fGff5cgzYDkpaEPlmPBwulj9tdBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:82:91:27:e1:3b:7c:a9:e2:e4:21:2c:0e:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Jun 30 07:00:42 2026 GMT
Not After : Jul 1 07:00:42 2026 GMT
Subject: CN=5a334709f8012633b1efbf2d82ce0f58f79a12a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:8a:4a:20:a2:f9:f6:6a:3f:c2:8e:7e:b1:
74:22:c0:c6:70:d3:95:d7:f3:ee:16:60:e2:fc:4a:
ec:7d:2a:cc:ab:91:90:d5:3f:80:9b:57:72:7e:8c:
89:8b:cd:2c:2a:39:9f:a4:9d:d9:35:aa:c5:bb:da:
59:44:5d:b6:90:fe:65:8a:c5:b8:c9:43:9c:c3:bf:
a9:e3:51:82:42:62:ad:90:5d:f0:55:c6:7c:98:96:
d9:b3:c0:76:d0:a6:26:43:4c:6f:85:10:0b:15:33:
87:eb:6c:69:c5:18:d9:48:0e:36:e2:04:0f:0b:5d:
c7:11:4d:7a:d0:fa:55:7d:0f:f8:50:3c:b7:e2:3c:
b3:7f:3b:0d:67:8b:17:1b:b1:d6:68:be:7f:78:6b:
4f:c4:6b:08:a6:0d:bc:53:fa:8d:60:37:7a:77:d8:
e5:ef:72:a1:a8:7b:34:ba:db:70:9c:e3:af:c5:42:
27:2b:01:01:81:2b:86:54:13:bd:fb:e0:87:d8:7d:
60:e4:84:4b:35:14:eb:a5:c3:ae:dc:46:1c:6a:a1:
55:e6:ec:c2:2f:6e:6a:b9:af:fb:62:2e:28:e4:21:
6e:0f:e8:c8:62:e1:cc:ae:4d:3c:63:c9:5b:8e:0f:
11:56:c5:67:b2:e2:c4:97:34:ee:db:42:b6:c6:7e:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:47:09:F8:01:26:33:B1:EF:BF:2D:82:CE:0F:58:F7:9A:12:A0
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:52:ad:89:e2:de:80:b6:99:b4:5c:eb:9a:e5:fd:4c:f9:bf:
aa:85:41:f5:17:f8:5d:db:e8:ca:63:96:63:e6:89:9a:40:48:
1f:94:26:e9:00:07:98:71:ac:9c:38:c4:44:bc:8e:82:06:8a:
11:86:fd:a4:cb:e5:a5:9d:1f:d5:8f:21:c8:07:04:c2:3e:33:
e5:ad:a3:f0:36:a3:f9:15:aa:f1:bf:d8:23:00:78:b7:0f:91:
3e:26:9a:85:32:61:9d:05:24:42:63:22:70:49:95:52:55:28:
42:14:99:cd:e6:df:e9:f8:25:e1:59:9f:cd:d0:3e:4e:db:cb:
a8:7e:02:2e:51:5b:62:86:1d:96:a3:4b:bf:42:54:7c:51:b0:
84:df:8f:38:ca:41:c3:65:36:03:37:ce:5c:8d:86:20:ed:10:
eb:3a:b8:e6:de:7b:12:7d:ee:9d:cf:ca:97:06:1a:30:76:3f:
0c:28:de:4b:e2:75:df:95:5c:22:f5:50:ff:dc:ca:10:f4:80:
4c:e0:05:96:96:4c:00:e1:4b:77:8e:64:2c:2f:36:3c:38:72:
7b:6c:1d:fb:91:0c:5a:92:cb:f9:2c:e2:d3:5e:a6:47:14:81:
3b:d5:49:66:fc:d7:72:0d:88:72:58:45:33:ea:40:eb:8f:7b:
83:fc:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:10:28 2026 by rpki-client