Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: kKS1fZKv0jw3y6yxV9lkw+M9WSLH3V+tQwRrmjuWH1U=
Subject key identifier: 1B:2E:08:B3:C3:E8:45:60:D1:AA:AE:79:7B:7E:E1:B9:97:6C:C3:40
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019D37522B46969ECA0E0083BCDAE11BF475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0F6E
Signing time: Sun 29 Mar 2026 02:00:25 +0000
Manifest this update: Sun 29 Mar 2026 02:00:25 +0000
Manifest next update: Mon 30 Mar 2026 02:00:25 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: ebL6WXCqyjx+K4acifVvJmApgcbRgYN/5RjNVuNEWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2b:46:96:9e:ca:0e:00:83:bc:da:e1:1b:f4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Mar 29 02:00:25 2026 GMT
Not After : Mar 30 02:00:25 2026 GMT
Subject: CN=1b2e08b3c3e84560d1aaae797b7ee1b9976cc340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:79:7c:b6:ec:5a:a3:a0:ab:01:ca:2a:94:
be:d0:8e:f9:21:2a:3f:54:d6:62:85:ce:79:f4:cb:
d4:20:ea:96:a8:20:65:4a:f6:d9:9a:f9:42:a2:b7:
78:37:e5:e6:47:65:7f:48:ba:f4:c4:df:1f:e7:33:
2c:68:fd:de:01:43:91:a4:9a:46:bc:08:ab:24:72:
d3:33:88:04:a8:f1:95:d3:5e:fa:e8:f7:31:95:1e:
2b:9a:be:0b:f5:72:8c:8e:41:fd:53:20:19:c4:f1:
94:cd:f0:ed:9c:f6:b2:d7:e4:77:36:1d:6e:34:b2:
20:23:45:b1:ad:ce:d4:54:10:7a:f9:96:a7:bb:9e:
55:6c:72:b5:08:57:7d:11:38:24:e0:8c:0f:8e:a3:
18:73:27:90:2c:f2:7b:a9:46:da:a5:bf:57:71:96:
80:b1:05:50:ae:58:13:6f:6f:c9:d3:5b:74:41:19:
6d:57:3e:e8:fd:07:ab:62:58:b1:93:c9:4c:04:09:
ce:5e:70:90:5d:09:93:2f:21:d1:a7:78:dc:8c:14:
48:d8:e4:f0:48:5e:49:01:46:bb:05:de:40:2f:6b:
d5:8b:6c:ec:59:90:3e:19:65:82:7d:85:34:54:11:
15:d3:d8:c9:42:2e:46:f6:ec:ae:cc:b1:f2:9f:d3:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:08:B3:C3:E8:45:60:D1:AA:AE:79:7B:7E:E1:B9:97:6C:C3:40
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:c3:79:18:98:9a:b6:a8:c3:c0:c0:1e:4b:6b:5e:0c:b1:
ae:82:57:45:01:5c:68:fc:bd:9f:a7:91:ae:6d:e9:18:d6:0b:
6f:32:25:77:bc:0f:8e:e4:78:68:90:70:d8:65:6e:69:a7:77:
bc:7d:5f:bc:57:66:3b:1d:ce:4d:78:a7:db:07:3b:ec:13:a2:
38:30:4a:bf:1a:ca:e8:a3:d4:15:ff:cd:84:fa:68:68:57:b2:
38:15:3e:9d:2e:90:5b:a8:79:ab:61:59:5f:8a:1e:eb:51:aa:
ce:0b:fe:fc:45:ea:68:ab:de:d8:d2:10:7a:06:ad:ca:bb:ae:
7a:3d:2c:0f:ea:1c:28:8a:56:73:cb:d0:59:24:24:cb:ba:82:
7c:7c:fc:99:59:15:21:be:6c:29:07:2d:31:48:c2:8b:6e:6f:
df:2e:c9:4b:94:fb:47:e9:69:c3:fa:aa:b1:52:14:a4:ed:90:
cd:44:d6:ff:9c:af:1e:db:5e:c2:12:b9:ff:5c:78:64:2a:50:
e9:c5:6f:f7:9a:97:b3:f3:7f:90:66:88:3c:c3:d5:b2:d8:9f:
b7:ac:40:ba:ec:0c:cf:c0:41:45:6e:72:9b:92:7d:6f:a6:8b:
06:dc:da:db:8d:66:81:54:cd:02:49:77:90:72:82:8c:e0:b6:
be:49:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:26 2026 by rpki-client