Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: BJsruS+pynVozPXJJI4SzTpq0/UZso73IwSFmlgERug=
Subject key identifier: D4:26:47:A8:86:9F:2A:14:E1:E1:D6:B4:A7:3E:E7:F6:E5:EF:76:49
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019D3865D70F1542027DF173454422B4139D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 154A
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: ++VcSTH0OAguriefpbwOqejI6auFwXz4o4Tt6I7zPUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d7:0f:15:42:02:7d:f1:73:45:44:22:b4:13:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=d42647a8869f2a14e1e1d6b4a73ee7f6e5ef7649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:86:4f:3c:1f:7c:57:bc:c0:2a:92:25:64:
6b:24:ee:f8:1b:50:3b:20:7c:2e:e5:70:0e:4e:06:
8c:17:39:93:ca:1c:77:96:80:44:e5:bd:8b:a5:de:
82:4f:ea:8d:48:3e:56:cc:38:0e:71:94:5f:ff:01:
4c:b7:4c:70:df:9b:4f:fc:65:e4:4d:19:5d:f9:4b:
05:04:02:e0:41:94:1e:f3:0f:8c:08:5f:fd:28:eb:
d0:08:2d:c3:37:b3:ec:28:04:9a:75:c5:f6:2f:51:
7c:dc:d8:38:c8:a4:8c:af:1c:72:6b:11:58:0e:22:
78:1e:35:7a:62:05:99:0b:23:5f:bc:45:08:03:a5:
4f:53:b4:37:29:f4:bc:c9:7a:c9:a2:3e:d0:60:52:
82:3d:84:0a:9e:57:5f:a6:c0:52:fe:4c:bb:8d:2f:
c3:ff:a9:46:35:a9:9d:7b:31:48:30:26:ab:d6:74:
7b:68:17:d0:83:56:18:9e:67:0c:dc:34:2d:81:66:
ba:7f:83:e7:c2:b4:c0:00:60:07:5f:f6:ac:2a:3d:
eb:47:bb:78:29:c1:d9:59:b9:f6:cd:b5:e4:e7:3f:
42:23:30:90:ea:ed:36:fe:0a:0f:dc:f3:09:96:22:
02:2d:19:35:92:93:e8:ed:4f:68:cd:23:5e:cb:d1:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:47:A8:86:9F:2A:14:E1:E1:D6:B4:A7:3E:E7:F6:E5:EF:76:49
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5a:02:fd:01:5e:f6:4f:e9:2b:60:e7:84:49:07:c1:5a:07:
3a:ca:2e:52:5a:fb:00:03:32:95:48:f9:b3:e5:93:bf:c2:1a:
d4:1c:1a:6f:82:e5:93:73:fc:2d:fb:cb:8d:0e:a9:41:2e:26:
52:b2:54:96:46:49:04:30:5f:43:ec:2c:ba:14:ec:72:83:82:
7c:9d:d1:7e:31:cd:d6:e4:33:10:31:86:4b:fb:73:fe:a4:52:
3e:e4:58:e9:7b:72:95:d6:64:e2:fe:d7:04:ab:70:5d:3b:25:
80:85:24:88:b5:c1:0d:da:a0:b2:46:39:dd:08:30:ad:92:36:
6a:89:61:a8:f8:5f:b1:d4:d2:2c:7e:45:1e:e0:37:9c:cb:65:
30:bb:9d:51:a1:45:20:3e:c0:7b:68:b9:1b:89:5f:5a:82:9e:
82:bf:6e:d4:93:b6:42:d9:6c:19:44:24:56:40:d9:1a:23:1a:
4c:7c:9e:4e:c9:1a:1c:0f:6a:f6:25:f6:56:a6:c6:9f:6b:53:
a2:dd:74:3e:72:66:8c:bf:b1:03:ab:8c:d6:60:7d:2c:57:3a:
75:f7:db:34:3b:83:b6:0c:a2:6b:ae:68:18:98:2a:e9:ab:a3:
78:c2:41:0b:9d:25:ad:22:2f:29:83:a0:fc:e7:af:6a:53:54:
51:08:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:12 2026 by rpki-client