Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: IrAvRhYgAv6j9czrEdq7z1LSSD+jExMSZNt3u2DsnTw=
Subject key identifier: C8:BB:CC:30:B8:8A:FC:97:EE:AF:04:78:37:70:05:91:A9:6F:78:41
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 01A001015FEFC19F623B01B492302FD6EEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 16A0
Signing time: Fri 14 Aug 2026 16:01:02 +0000
Manifest this update: Fri 14 Aug 2026 16:01:02 +0000
Manifest next update: Sat 15 Aug 2026 16:01:02 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: zU0nfJVEUC1oSV3t31ISJkfRxBo5ZZyG9XE464WnVVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:5f:ef:c1:9f:62:3b:01:b4:92:30:2f:d6:ee:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Aug 14 16:01:02 2026 GMT
Not After : Aug 15 16:01:02 2026 GMT
Subject: CN=c8bbcc30b88afc97eeaf047837700591a96f7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:cf:22:8a:da:f3:b2:b5:1d:b6:8c:e9:c8:
ce:bd:a6:9d:11:97:9d:69:7c:30:fa:0b:fd:4e:2e:
a6:07:ff:47:cf:4e:81:77:9f:8d:d3:be:d0:b7:96:
20:95:23:cb:1d:25:71:98:9a:9e:21:0c:21:97:85:
f4:2a:6a:18:20:36:89:50:2b:12:e0:ae:1f:63:4f:
f5:48:4c:f5:54:0b:55:11:bf:57:df:dd:65:8e:9b:
81:4a:32:f1:d7:f8:a5:c2:2e:5e:fe:a9:2b:60:26:
94:d8:48:96:30:db:d6:17:be:aa:96:cc:fc:ae:85:
fe:e0:aa:16:33:de:20:ef:23:51:1d:f1:dc:bb:13:
84:24:69:c7:dc:fc:95:ba:4f:30:05:1a:c3:99:46:
41:2c:e3:94:22:15:fd:6a:45:aa:f8:fd:5c:c4:63:
c4:c8:a4:f2:ac:ee:e3:b4:18:c7:4f:43:75:75:42:
20:da:26:15:d7:bf:44:19:8b:d3:b7:ee:ec:f6:b9:
08:a6:be:8b:64:74:92:b7:c0:77:32:5e:09:71:69:
25:0c:e6:94:ec:c9:23:d3:d8:7b:74:bd:7e:e0:d4:
63:71:b8:4a:0d:14:3a:b8:c6:ca:cf:fb:d9:91:ed:
c6:d2:c5:c7:1e:b8:d1:11:b1:28:ab:e8:a2:2b:50:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:CC:30:B8:8A:FC:97:EE:AF:04:78:37:70:05:91:A9:6F:78:41
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c2:71:a5:bc:88:24:93:70:7e:7d:31:9b:24:02:b3:9b:30:
58:3b:cf:97:a9:a4:4e:c9:29:80:50:56:c3:ea:4d:46:4a:f1:
cc:fa:a3:01:07:1b:e2:a4:0f:ac:0c:01:7b:b2:14:2b:b6:8e:
77:26:ce:cb:24:30:d1:38:fb:54:35:a7:e8:97:0d:5c:1a:6b:
ed:66:05:f5:33:1b:d8:67:9b:56:d1:ac:fc:7e:cd:6b:59:22:
08:a1:2a:1c:92:29:cc:66:d8:e7:63:07:71:e5:fb:0f:74:fe:
e2:57:ac:8f:fb:dd:6f:bc:2f:15:28:00:46:e9:f9:16:ea:b9:
d4:e9:29:22:35:28:0c:a3:fa:93:18:da:01:e8:fe:95:55:5c:
74:21:1a:a6:57:97:b4:98:13:5d:72:5c:5f:37:65:66:0f:bc:
de:02:ab:d2:04:14:0f:12:b8:e1:68:c6:64:09:58:f1:7d:67:
33:fd:7f:90:dd:bf:b5:ca:c1:a4:41:13:b4:61:b3:ff:c7:bd:
c5:65:58:fb:7e:b4:d2:d0:2a:8e:35:6a:94:62:50:d1:1e:d6:
2b:35:0a:95:27:39:f3:c0:eb:77:a9:16:77:b4:d4:a9:f8:34:
51:49:38:c8:87:ee:8a:cb:f7:e9:ac:ea:55:be:c1:77:d0:e2:
57:73:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:05 2026 by rpki-client