Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: 4fI3EVk3EyhulhkI5u8nDiRx7SmQgT+elOBFePzDMp4=
Subject key identifier: D2:F0:10:58:F0:64:9B:3B:7A:03:88:53:F1:40:13:A7:39:D3:10:40
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 01A001013570559620FC455631A9615E17D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 16BB
Signing time: Fri 14 Aug 2026 16:00:51 +0000
Manifest this update: Fri 14 Aug 2026 16:00:51 +0000
Manifest next update: Sat 15 Aug 2026 16:00:51 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: SprfcQH4AYhxjb71n/1RWgNcvuptOTmjaooLG0IszZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:35:70:55:96:20:fc:45:56:31:a9:61:5e:17:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Aug 14 16:00:51 2026 GMT
Not After : Aug 15 16:00:51 2026 GMT
Subject: CN=d2f01058f0649b3b7a038853f14013a739d31040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:31:45:db:4a:27:37:82:11:d2:f8:64:8b:
72:43:a9:3d:fe:e7:7d:c2:1d:24:5c:88:77:2f:00:
eb:3f:5a:b1:72:5a:c8:f9:65:98:a0:09:36:19:dc:
26:ed:46:30:c8:83:d7:ed:e9:df:bd:b7:aa:a0:d2:
b6:66:95:99:37:67:f7:20:52:0a:c8:e8:f2:7b:b1:
1b:c9:b3:43:66:94:57:42:22:ce:6f:c1:8e:94:27:
81:fd:03:94:78:58:67:b2:d7:09:85:37:87:da:11:
ef:56:25:d3:b1:ce:4d:3b:9d:cb:33:ab:f3:05:c5:
7a:31:20:9e:be:4d:41:b8:16:b5:be:34:82:5e:2c:
de:9f:7f:02:42:2e:6e:06:46:d0:ad:12:e4:0f:b9:
74:d9:60:08:83:61:59:c2:76:1f:8a:4e:73:7a:60:
17:ee:7a:4c:d5:71:23:29:c2:73:35:fd:6f:75:3a:
03:aa:3f:cc:38:70:40:8f:81:c1:f6:f3:df:66:db:
57:63:61:d8:fb:1e:31:a4:9a:6f:56:d8:d3:ec:96:
ad:8f:5f:68:c8:dd:0d:d0:a6:32:fa:6d:c4:03:01:
b1:d4:3c:17:39:c2:47:08:ef:b9:65:ed:ba:c2:dc:
97:9f:0e:15:c8:7b:a3:c6:72:3b:bf:47:57:aa:1f:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:10:58:F0:64:9B:3B:7A:03:88:53:F1:40:13:A7:39:D3:10:40
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:cf:f7:9a:5b:98:3f:e6:15:b0:c8:c1:c1:62:70:c0:c4:
77:fe:59:a2:d0:41:da:73:9d:46:56:54:03:7c:58:2d:2e:98:
17:a6:d8:09:0f:40:86:bc:21:72:a9:51:af:79:18:7d:db:99:
06:74:76:4a:15:75:d1:5c:eb:e4:ec:64:8b:b2:ce:77:88:75:
b5:26:8b:a1:0a:27:d6:da:06:a0:81:da:68:01:c3:12:65:05:
97:91:54:db:c4:5e:6f:73:bf:7d:50:e3:64:bc:9d:a5:55:fc:
da:9e:51:b4:33:23:0a:2c:56:2a:7a:d7:1d:58:33:83:ad:8b:
1a:6a:88:61:1f:ac:ba:4d:85:f9:d0:96:91:96:88:00:cb:6e:
18:d5:e6:4c:87:53:3a:44:39:2f:f4:e8:ff:74:53:87:5f:59:
8d:49:26:0e:b5:11:6e:fb:4f:a3:1d:71:94:f7:dd:fb:73:37:
38:99:48:b8:4d:c3:3d:c6:2b:c3:81:7a:52:b4:2a:d7:15:c3:
24:f1:d1:b3:0b:51:30:b6:3b:78:9d:2f:1d:21:63:45:c5:c5:
0a:e9:34:04:8f:fa:27:7f:f1:bc:e3:0c:52:33:76:44:ce:65:
96:82:e5:a5:57:ab:c2:dc:89:c8:98:02:43:10:ab:74:19:a7:
e0:7f:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:48 2026 by rpki-client