Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: 2vlo/pcQa40jpuYXWLerL1TwrkIrR4uyEc5HBxjGYuY=
Subject key identifier: AD:F2:71:A2:BD:60:E2:8B:AB:85:8E:21:8F:7D:F1:B2:B5:89:E2:96
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 019E3185A200CF1FF1E00B0F2F1A4F927755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 15CB
Signing time: Sat 16 May 2026 16:01:41 +0000
Manifest this update: Sat 16 May 2026 16:01:41 +0000
Manifest next update: Sun 17 May 2026 16:01:41 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: y2WovAKA/yv1mTKqHTL56hm4JNcVlbdqh5Wn0ZuXl4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:a2:00:cf:1f:f1:e0:0b:0f:2f:1a:4f:92:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: May 16 16:01:41 2026 GMT
Not After : May 17 16:01:41 2026 GMT
Subject: CN=adf271a2bd60e28bab858e218f7df1b2b589e296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:b4:df:7b:9d:74:12:85:34:83:80:83:c4:
1a:26:3b:a8:5a:76:f8:e3:40:c6:4d:2e:ec:75:c1:
ba:4a:04:3f:c4:63:d6:69:de:0a:60:e7:b0:e7:1c:
d0:d2:5d:06:18:4f:6d:77:6f:12:59:5f:2e:3c:03:
7f:00:14:d9:93:33:2d:91:e5:94:70:bc:b0:65:26:
79:a2:a9:ba:3c:da:8e:02:c7:5a:aa:67:34:06:37:
ca:38:48:10:f9:d4:dd:dc:64:66:2a:94:8f:7b:48:
fe:64:72:c2:7d:01:cb:fb:7e:eb:1e:2b:83:a8:75:
c9:c2:81:c4:ac:63:77:1d:1d:91:81:8f:42:4b:be:
e8:f4:b5:8e:c1:ba:7e:4c:74:01:0b:eb:4a:df:2f:
4b:09:fb:e6:cc:c9:c2:a4:79:6e:a8:62:41:44:12:
c9:14:c0:ff:2e:ba:db:6d:7c:10:ac:16:44:a7:50:
ce:78:fc:16:f9:e3:2a:e6:8c:fc:2c:f0:50:dd:62:
d7:96:e2:7b:7f:7c:5f:57:90:9d:da:92:bc:eb:a6:
d0:e9:44:8b:c4:77:8b:82:0d:cb:e2:cd:8f:7d:c0:
94:35:3f:f6:7f:0c:9f:f4:3e:53:b0:a6:3d:3f:f8:
55:af:10:2b:d8:f6:f0:bb:42:15:97:b7:81:ba:18:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F2:71:A2:BD:60:E2:8B:AB:85:8E:21:8F:7D:F1:B2:B5:89:E2:96
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:c7:2a:b2:a4:e6:d4:ad:ed:7b:f7:7a:27:ee:c9:1c:d6:
eb:48:80:7f:6f:fb:5b:46:39:93:ed:ab:0b:55:47:bc:15:87:
ec:dd:26:81:c7:c6:06:43:b2:27:cf:df:a4:85:11:f9:33:f0:
f6:ff:91:39:1d:98:c3:b6:a0:dd:57:42:92:45:6a:19:0d:0a:
83:9c:65:ca:76:82:ab:e4:9b:38:aa:43:bf:fb:c6:de:fe:ae:
88:1e:af:51:15:bd:54:6b:b0:d1:b7:5d:b5:24:72:e9:bb:19:
16:a7:32:9d:58:5d:71:67:78:d0:0b:c5:24:3c:21:39:ad:f2:
e7:75:03:88:e6:ca:a8:32:26:9f:b8:f1:67:68:ac:10:1f:b1:
37:b0:69:34:56:cc:1b:c6:f9:a7:ea:ee:a9:9e:4a:74:82:7b:
20:9d:39:55:29:0a:bf:2f:05:f7:e6:ce:ac:e2:2c:c4:c8:cf:
cd:d1:4c:0a:bd:53:f3:f1:bf:80:e7:68:61:78:92:dd:ee:b5:
ae:a3:14:33:4f:62:1c:c0:56:da:0a:44:3e:a7:33:d1:01:38:
36:5c:e9:52:b5:c6:6e:96:80:d8:b0:0f:c9:17:1b:df:51:a2:
c8:2f:dd:b2:c5:1f:17:58:cb:1a:29:78:90:50:80:a9:1e:bf:
95:fd:08:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhaIAzx/x4AsPLxpPkndVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjYwNTE2MTYwMTQxWhcNMjYwNTE3MTYwMTQxWjAzMTEwLwYDVQQD
EyhhZGYyNzFhMmJkNjBlMjhiYWI4NThlMjE4ZjdkZjFiMmI1ODllMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT2033uddBKFNIOAg8QaJjuoWnb4
40DGTS7sdcG6SgQ/xGPWad4KYOew5xzQ0l0GGE9td28SWV8uPAN/ABTZkzMtkeWU
cLywZSZ5oqm6PNqOAsdaqmc0BjfKOEgQ+dTd3GRmKpSPe0j+ZHLCfQHL+37rHiuD
qHXJwoHErGN3HR2RgY9CS77o9LWOwbp+THQBC+tK3y9LCfvmzMnCpHluqGJBRBLJ
FMD/LrrbbXwQrBZEp1DOePwW+eMq5oz8LPBQ3WLXluJ7f3xfV5Cd2pK866bQ6USL
xHeLgg3L4s2PfcCUNT/2fwyf9D5TsKY9P/hVrxAr2Pbwu0IVl7eBuhiu+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3ycaK9YOKLq4WOIY998bK1ieKWMB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM3HKrKk
5tSt7Xv3eifuyRzW60iAf2/7W0Y5k+2rC1VHvBWH7N0mgcfGBkOyJ8/fpIUR+TPw
9v+ROR2Yw7ag3VdCkkVqGQ0Kg5xlynaCq+SbOKpDv/vG3v6uiB6vURW9VGuw0bdd
tSRy6bsZFqcynVhdcWd40AvFJDwhOa3y53UDiObKqDImn7jxZ2isEB+xN7BpNFbM
G8b5p+ruqZ5KdIJ7IJ05VSkKvy8F9+bOrOIsxMjPzdFMCr1T8/G/gOdoYXiS3e61
rqMUM09iHMBW2gpEPqcz0QE4NlzpUrXGbpaA2LAPyRcb31GiyC/dssUfF1jLGil4
kFCAqR6/lf0I3A==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:24 2026 by rpki-client