Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: UETEVI4bSKRvg/Lk117Ym0jjmQcb3RwTko38qKgT+BE=
Subject key identifier: 5B:43:92:94:CE:14:77:1E:28:AC:C9:3B:E6:02:0A:96:28:9F:1B:3E
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 01A14D2B6371D0CDDB6B313274BFFFAF6CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1767
Signing time: Sun 18 Oct 2026 04:00:51 +0000
Manifest this update: Sun 18 Oct 2026 04:00:51 +0000
Manifest next update: Mon 19 Oct 2026 04:00:51 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: RU0h70Nf3dCOCMaKHAFYTvxXLzId/LQDoUQEa7z2qpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:63:71:d0:cd:db:6b:31:32:74:bf:ff:af:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Oct 18 04:00:51 2026 GMT
Not After : Oct 19 04:00:51 2026 GMT
Subject: CN=5b439294ce14771e28acc93be6020a96289f1b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:2a:e5:32:13:19:3c:59:ee:18:61:d0:69:
3f:22:3c:1a:2d:27:cd:29:8e:6f:e6:e4:d1:ba:f9:
f8:84:e7:ef:1e:90:58:2b:e8:fd:1b:42:4d:2d:ee:
d2:f3:b2:7e:a5:9a:c2:d9:a5:8f:c0:72:d4:2e:1c:
49:32:7b:b8:87:ff:30:fd:6d:27:a9:d0:8d:16:b3:
3f:0c:12:9f:7e:ee:0d:8f:a0:cb:fd:f2:61:21:f2:
97:a6:35:94:08:32:61:e6:b8:6e:17:2d:fc:bd:8a:
8d:56:39:35:2c:5c:71:57:64:e9:9d:86:a2:44:d3:
10:ac:2c:24:bd:cb:1b:66:21:3a:82:13:cf:a9:b2:
2e:08:9e:ce:a0:2c:28:e7:93:0e:78:7b:ac:91:e8:
19:10:f0:07:68:35:2b:c3:47:39:be:25:67:de:4a:
e7:ba:01:b5:0d:76:bd:a4:a9:84:e2:f6:11:3c:d1:
65:16:1f:93:02:30:e0:be:11:02:f1:79:85:cd:f6:
bd:30:ed:1f:03:b4:25:50:85:35:e0:ca:39:bc:60:
a8:b3:a9:e1:27:4b:bc:c0:4b:34:d8:dd:45:98:5c:
04:9b:0d:ab:74:a9:6f:e7:ff:37:f1:68:43:2f:80:
45:cf:c7:e9:de:80:c8:e5:6d:df:3f:dc:5a:f9:61:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:92:94:CE:14:77:1E:28:AC:C9:3B:E6:02:0A:96:28:9F:1B:3E
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:d8:3a:b9:ab:70:5e:c4:46:6b:25:02:0e:91:6e:39:ad:
89:66:b0:5a:7d:af:06:ac:4f:98:ab:a6:c2:07:97:76:bf:a7:
09:da:60:d7:16:62:c7:99:dc:f1:29:64:78:5b:eb:10:29:c2:
6e:1e:b3:fb:5c:6a:db:50:04:20:3d:9a:79:e8:a2:57:57:3a:
4d:ff:9d:43:09:f4:c3:67:8e:2b:87:a7:21:d0:99:84:21:99:
df:4f:1c:f9:b9:28:48:d3:5c:b8:6d:8b:9b:ab:48:d6:f7:4d:
47:18:9a:e5:75:38:2b:cc:6f:99:64:78:a7:e7:24:c5:43:1f:
5c:12:f8:ad:68:f9:c6:bd:e0:70:92:25:bb:42:f6:a7:81:f2:
23:de:18:60:5a:45:91:bf:d3:17:5f:e5:36:07:fd:40:28:3b:
f4:38:33:45:d5:55:00:fc:11:ca:69:c3:b7:95:50:0d:a7:00:
06:cf:c1:02:c0:f7:7d:a2:4c:0a:81:8b:2c:ca:9e:ae:38:95:
5c:b0:de:a4:ba:22:15:46:cc:b2:18:e7:83:60:0f:1d:c8:86:
83:dd:82:ae:80:3b:a7:d8:6a:65:bd:b2:e0:0b:c8:7f:9b:d1:
86:63:2c:17:f1:d3:7a:12:09:8e:45:9f:46:31:3f:d5:35:c7:
da:74:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:28:50 2026 by rpki-client