Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: xIANRE6P0qeSJS1C2mRUlD1z7GRkvcUeMxmFF9e72wo=
Subject key identifier: CD:4B:96:47:CC:EC:87:BC:76:3B:61:0B:CE:9F:08:73:71:E4:09:6C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019E1D90747DBFA0BE4E038C2F8593F3D63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1387
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: pYJ+iATzftdhNb+4nq5iqyUcO1VcnPsKdxwClMwcVNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:74:7d:bf:a0:be:4e:03:8c:2f:85:93:f3:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=cd4b9647ccec87bc763b610bce9f087371e4096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:5a:94:b1:94:0a:20:7d:e1:ef:c2:8a:10:
a1:0e:31:4a:ca:95:e9:5e:26:0f:eb:45:a2:59:f1:
36:9b:18:e5:a8:82:ae:a0:2a:9a:80:99:8b:84:6e:
c1:19:0e:20:5f:2d:93:fa:38:ad:18:a4:50:47:46:
02:82:88:30:17:59:d2:ba:25:e1:a1:27:76:44:ac:
56:82:8f:97:d4:2c:04:4d:86:31:cf:d7:bc:fd:92:
75:40:f7:0b:64:81:fd:1c:5f:7a:25:b9:0d:29:ea:
dd:8e:7e:02:96:03:b3:b3:2f:78:3c:37:a2:d8:26:
8a:cb:bc:f3:66:23:cf:7d:fd:8f:3d:f1:c9:e0:d0:
02:86:a9:01:8b:cd:cc:84:84:1a:cf:d2:5c:98:65:
0e:35:13:c9:6c:b3:f0:a7:be:75:45:05:34:bd:1d:
67:8b:f2:06:67:18:90:36:43:3c:c5:66:b7:ae:42:
8d:ac:06:39:95:39:a9:7b:77:32:b1:cc:b7:8b:ff:
00:d3:cc:3d:b0:ad:a1:c2:26:28:38:19:3c:9b:bd:
d7:ce:50:87:d3:f0:13:f7:13:bc:be:aa:07:8a:2a:
f1:f4:32:cb:97:dc:1e:af:96:5d:d5:95:28:6a:d8:
b9:cb:de:4b:c0:f9:74:0f:7d:f7:b4:f3:2b:7b:e9:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4B:96:47:CC:EC:87:BC:76:3B:61:0B:CE:9F:08:73:71:E4:09:6C
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:65:f9:71:60:9c:80:3b:8f:e3:9b:8b:a1:e0:eb:1d:0c:6b:
c6:da:f9:1d:1a:b5:ad:87:75:d6:3c:b1:b4:6a:53:28:b6:26:
7c:d2:3d:46:ef:0c:f0:8b:22:15:30:e3:f7:81:b4:ec:4c:1f:
7c:d7:73:ae:d1:7e:8e:46:96:30:91:41:8d:2e:f9:d7:45:c4:
47:32:48:b7:95:80:33:03:1c:90:e5:1b:ce:fc:f9:81:32:85:
61:04:95:46:5a:95:b6:08:cf:57:8d:2a:ec:2f:3b:f8:43:a9:
e8:54:48:45:e9:1e:16:24:b7:77:8e:00:a3:cf:75:7c:45:3c:
66:f3:2b:d2:2f:26:55:de:02:e9:b0:e7:6e:dd:a3:3b:25:cd:
f1:3a:34:98:a5:c9:76:b1:31:65:c8:7d:3b:59:23:60:17:c2:
36:41:5a:eb:d0:d2:ef:68:21:22:80:83:e8:6d:1e:57:49:6b:
c1:12:a8:33:81:24:87:cc:4d:07:99:43:0d:6b:78:97:d7:45:
5c:18:4f:8c:40:5e:16:4d:b7:7f:e7:05:a1:46:a6:74:d5:e3:
74:d8:18:98:53:18:05:65:94:d8:2e:54:b2:6d:73:eb:68:cd:
d7:6e:bc:39:fb:3f:d8:35:88:5b:d7:64:1e:df:d3:65:43:be:
39:00:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:49 2026 by rpki-client