Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: ZvVDcJIG/vA4zLJO1Wzmw2SVxh+fe5yGHNzadEPZhGg=
Subject key identifier: 28:09:9E:53:38:76:21:78:28:38:D4:AD:21:20:5F:E5:D7:61:29:30
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019D3AC1186ECABA0D144B91272D6ED96022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 18:00:26 +0000
Manifest this update: Sun 29 Mar 2026 18:00:26 +0000
Manifest next update: Mon 30 Mar 2026 18:00:26 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: ocmN/OahU6QghcRm70sJok0lnvkz4x2Pt2HeUu8PykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:18:6e:ca:ba:0d:14:4b:91:27:2d:6e:d9:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Mar 29 18:00:26 2026 GMT
Not After : Mar 30 18:00:26 2026 GMT
Subject: CN=28099e53387621782838d4ad21205fe5d7612930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1c:e5:93:b2:ab:86:a4:87:35:91:dd:92:df:
48:95:57:2a:d2:fb:4d:3e:a3:79:29:72:e1:b7:28:
02:c5:55:fb:e2:47:99:38:bc:01:43:72:c5:60:f4:
8e:24:09:2d:bd:25:38:7a:73:c0:f3:95:0e:37:ad:
a0:93:43:f3:b7:72:81:00:b7:c3:24:ba:5b:19:9b:
32:67:97:95:4f:17:7f:b5:7c:e6:87:82:06:d8:07:
67:96:72:67:18:63:60:8c:53:d4:75:06:df:15:1d:
e8:83:b3:c5:1f:46:83:eb:40:0c:f1:23:1f:86:1a:
de:ed:2b:69:40:f8:01:60:06:ee:be:36:c5:32:e7:
90:4c:8d:cd:26:b1:c5:1a:fc:8f:87:8d:41:09:c3:
8d:19:13:4b:a5:03:70:51:5b:b9:34:51:9c:0a:0d:
93:77:e7:b7:42:5b:f3:02:71:79:73:ce:1f:e1:2e:
94:1c:7d:73:ea:22:5c:bd:ea:e1:69:11:d6:0e:86:
af:fd:7a:73:3b:24:b8:c4:13:32:21:b2:0b:63:32:
90:c9:d3:99:b7:5e:26:65:d8:3f:59:a8:a7:f5:ad:
f8:1b:44:86:a7:57:7b:60:af:6c:73:e0:3a:cd:08:
bd:3e:76:59:28:30:38:34:f4:69:8d:7e:26:91:fe:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:9E:53:38:76:21:78:28:38:D4:AD:21:20:5F:E5:D7:61:29:30
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8f:82:1a:26:53:11:1f:78:07:84:20:77:ee:84:ae:e1:7e:
53:b6:85:ac:3f:d2:f7:07:2f:7c:e1:06:ec:57:8d:0b:70:c3:
17:79:c6:b2:10:09:df:23:ec:ac:33:1b:81:55:c5:0c:10:0c:
f7:bc:f6:9a:2d:62:f2:8f:59:c5:30:9f:fd:3c:13:05:8a:e7:
3e:e6:7b:ee:a9:ef:9d:f5:c3:b1:00:59:e5:19:84:65:df:1b:
be:c7:5c:81:76:17:fd:4c:6e:19:3b:d4:cc:83:6e:d9:bb:b6:
de:dd:2d:ae:59:45:bc:fb:3e:7b:3e:35:2f:91:07:1b:07:3c:
79:e1:7c:5e:b4:23:f6:63:cf:57:bb:37:20:a8:d1:97:42:19:
46:e4:c1:6e:d5:28:0c:9f:53:b1:cb:3e:d9:a7:22:85:e3:21:
d2:a3:7d:40:30:28:ea:ed:e0:3e:92:a3:f9:0c:62:78:8a:d2:
11:0c:c6:c2:e1:5f:07:26:4f:54:fa:75:9b:fa:70:73:d4:b6:
4b:cf:4e:41:04:51:63:f6:d4:b9:1a:6c:75:ce:d1:2e:04:70:
6f:1a:04:6c:a5:b4:76:cd:45:5d:94:1e:55:f3:06:08:3e:61:
02:af:33:cd:cd:fa:7e:4a:32:23:07:1a:06:41:e0:c4:aa:ea:
28:7d:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:53 2026 by rpki-client