Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: 5E2ogjklgrUKzFW33Uw8VWGp130b+QNI6VJ37J0qE3U=
Subject key identifier: 69:0B:73:66:EA:4A:03:0F:09:53:5D:AD:9E:1F:4B:8D:DB:E8:86:66
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019F17C3405F0A1D3DE0192C67D635129769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 1982
Signing time: Tue 30 Jun 2026 09:01:39 +0000
Manifest this update: Tue 30 Jun 2026 09:01:39 +0000
Manifest next update: Wed 01 Jul 2026 09:01:39 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: Rq5o6omsBqs/L6QQ0vfCLkKi/f7IYnRz1AJhp2VTwx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:40:5f:0a:1d:3d:e0:19:2c:67:d6:35:12:97:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Jun 30 09:01:39 2026 GMT
Not After : Jul 1 09:01:39 2026 GMT
Subject: CN=690b7366ea4a030f09535dad9e1f4b8ddbe88666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:12:61:b2:68:2a:62:77:5e:37:d1:5e:09:
f2:95:21:ca:93:5d:08:cd:75:0d:6c:6e:ec:67:5f:
86:cd:e5:b0:1c:73:0b:17:b7:e5:c2:cc:19:53:24:
98:cf:a4:6d:55:f4:ef:e7:e0:9b:06:a1:7f:b0:92:
bc:2f:cf:f0:33:cd:a8:f9:98:45:46:16:58:5b:ee:
7c:fc:26:a2:d0:e2:6f:3f:1e:83:ef:e6:cc:22:32:
7a:bc:2e:7a:6e:3c:d1:49:20:ba:e2:8f:84:d1:04:
a2:c2:ee:05:d3:21:bd:11:c2:67:db:d3:a8:49:2c:
d8:3c:9f:86:6b:37:fc:da:d7:ec:15:ae:9b:a6:52:
5d:af:24:7b:2f:7d:98:2c:92:43:c2:77:34:c7:a6:
3a:c5:d3:44:d4:10:d7:e3:e1:48:b2:a5:a5:83:d6:
a6:62:5e:eb:21:3a:a1:a7:01:20:01:50:de:70:00:
d5:8d:82:cb:fe:6d:03:6c:a1:53:df:5c:7d:87:f6:
07:f3:ca:fd:c6:63:be:00:08:bc:cf:e0:95:fe:a3:
ec:5c:cb:cd:0d:34:5a:05:7f:c2:8f:a0:de:3f:2c:
f9:d9:18:ff:04:0a:a5:8d:de:83:0d:36:54:13:ca:
68:e6:c7:65:77:85:3a:9e:4d:c0:08:be:39:ae:35:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:73:66:EA:4A:03:0F:09:53:5D:AD:9E:1F:4B:8D:DB:E8:86:66
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4e:cf:54:99:12:81:cd:8b:2e:c6:b9:a8:48:57:e3:da:f6:
41:f9:f8:15:03:a7:b8:a6:1b:0e:5b:a5:b6:5f:03:bd:e0:c3:
15:e5:79:fb:dc:b4:f9:35:c1:76:84:b3:74:7d:4b:41:1e:e1:
80:75:c5:f7:4a:bc:25:d4:01:75:d6:89:86:04:6f:06:97:6a:
22:75:45:9e:63:32:3d:84:03:1f:bd:30:1a:93:26:8d:51:c4:
a4:66:1b:7f:17:20:a4:ee:32:48:e4:ec:32:6f:c0:b8:88:56:
75:db:44:8a:80:f5:ec:fa:50:3d:b9:10:32:8e:11:99:06:e7:
b4:e7:d4:35:a6:bc:0a:0b:37:8d:7d:7a:1b:04:28:0d:f4:71:
ad:65:ca:f7:64:a9:e4:0d:86:98:4c:1c:c9:01:37:51:47:ba:
98:d5:9c:fb:12:10:ac:a1:0d:c4:e9:c5:cf:b9:c7:5c:22:ed:
1b:b5:ec:20:f4:f5:ff:af:fb:77:55:72:25:92:5a:01:69:d8:
63:88:b0:fd:03:19:91:90:ce:f4:87:67:9e:d9:40:a8:d7:81:
0a:4b:8e:4e:d9:07:97:00:26:9b:3d:b0:52:c9:50:36:23:1d:
70:21:b9:01:d4:6a:ca:29:c5:a7:4d:92:f2:50:0d:ba:53:a7:
16:6a:1a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xw0BfCh094BksZ9Y1EpdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj
YTllY2UwHhcNMjYwNjMwMDkwMTM5WhcNMjYwNzAxMDkwMTM5WjAzMTEwLwYDVQQD
Eyg2OTBiNzM2NmVhNGEwMzBmMDk1MzVkYWQ5ZTFmNGI4ZGRiZTg4NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRYSYbJoKmJ3XjfRXgnylSHKk10I
zXUNbG7sZ1+GzeWwHHMLF7flwswZUySYz6RtVfTv5+CbBqF/sJK8L8/wM82o+ZhF
RhZYW+58/Cai0OJvPx6D7+bMIjJ6vC56bjzRSSC64o+E0QSiwu4F0yG9EcJn29Oo
SSzYPJ+Gazf82tfsFa6bplJdryR7L32YLJJDwnc0x6Y6xdNE1BDX4+FIsqWlg9am
Yl7rITqhpwEgAVDecADVjYLL/m0DbKFT31x9h/YH88r9xmO+AAi8z+CV/qPsXMvN
DTRaBX/Cj6DePyz52Rj/BAqljd6DDTZUE8po5sdld4U6nk3ACL45rjWnzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkLc2bqSgMPCVNdrZ4fS43b6IZmMB8GA1UdIwQY
MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt
ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh
LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk7PVJkS
gc2LLsa5qEhX49r2Qfn4FQOnuKYbDlultl8DveDDFeV5+9y0+TXBdoSzdH1LQR7h
gHXF90q8JdQBddaJhgRvBpdqInVFnmMyPYQDH70wGpMmjVHEpGYbfxcgpO4ySOTs
Mm/AuIhWddtEioD17PpQPbkQMo4RmQbntOfUNaa8Cgs3jX16GwQoDfRxrWXK92Sp
5A2GmEwcyQE3UUe6mNWc+xIQrKENxOnFz7nHXCLtG7XsIPT1/6/7d1VyJZJaAWnY
Y4iw/QMZkZDO9IdnntlAqNeBCkuOTtkHlwAmmz2wUslQNiMdcCG5AdRqyinFp02S
8lANulOnFmoahg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client