Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: iu/EeGkVFhRr62ZvbA3ZoL/ojUlsXw8QRGtHrlr19pc=
Subject key identifier: 7B:8B:D0:49:15:F3:CD:A0:C1:BA:B1:81:2F:6A:9D:85:61:6F:2E:1D
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019F8F7DE310BF47B1E6B3742798500B301D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 19C0
Signing time: Thu 23 Jul 2026 15:00:19 +0000
Manifest this update: Thu 23 Jul 2026 15:00:19 +0000
Manifest next update: Fri 24 Jul 2026 15:00:19 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: ngQ4rEKCpkM+M3Hw43h3id7Iwbu3/rFMZnyKe8RWvRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e3:10:bf:47:b1:e6:b3:74:27:98:50:0b:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Jul 23 15:00:19 2026 GMT
Not After : Jul 24 15:00:19 2026 GMT
Subject: CN=7b8bd04915f3cda0c1bab1812f6a9d85616f2e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:25:31:a7:1d:71:54:20:3a:1c:80:0f:3f:
49:b2:af:f4:d9:cc:b3:cd:39:da:43:f8:99:13:22:
67:e7:d5:0b:52:b8:24:0d:56:54:c5:ff:9f:33:03:
99:fd:5f:02:31:da:9a:3d:9d:d0:7c:b9:80:1e:98:
1d:e0:1e:5f:bb:45:2c:e0:e2:8a:84:cb:1d:82:65:
55:bc:0f:4a:76:f2:38:e7:b4:43:f1:9f:49:6b:d6:
6d:10:11:18:fb:9f:a2:c0:ed:b6:4b:9b:fc:ed:cf:
04:e7:7a:fc:4b:58:7a:9f:0a:d7:a3:ab:66:10:fe:
f8:9b:fd:db:68:b9:ad:e0:76:96:ad:d9:5a:9e:30:
88:90:f4:fb:75:06:20:36:bf:81:62:ca:ec:4c:f1:
a2:bc:f9:69:f2:45:28:e8:b1:a7:9f:00:ec:1a:f5:
ea:2a:ef:08:8b:dc:0f:c6:33:2e:d9:48:c9:1f:d2:
c1:2b:dc:a6:99:66:f4:b7:11:3c:df:71:06:32:1d:
73:13:05:8c:fa:09:54:16:7c:c3:5c:e4:bc:79:1f:
90:f0:3c:65:78:7f:6c:40:c2:b3:25:f6:35:6c:71:
17:7d:f6:04:8b:8a:d8:ad:4b:8c:5a:07:bd:a9:5e:
c0:36:d6:86:a3:0b:29:a1:7b:3a:9e:a8:a0:b1:c9:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8B:D0:49:15:F3:CD:A0:C1:BA:B1:81:2F:6A:9D:85:61:6F:2E:1D
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:c9:95:47:12:9f:25:89:73:ef:65:74:9c:30:b9:30:1f:
d6:7d:b1:de:88:cb:1c:cc:21:fd:75:1e:6f:33:92:25:d6:95:
b0:0d:7e:6b:74:9b:8d:92:e8:0a:5d:8c:f7:08:fb:d8:7c:a2:
61:52:9d:83:00:1b:f0:8e:03:36:f5:28:14:2c:ff:52:c3:5f:
b8:a9:5b:5a:23:e7:27:d7:07:6f:ef:13:9f:50:1a:23:5e:c4:
36:c5:63:e0:05:b0:fb:e0:ca:84:8d:fd:25:3a:f3:94:a3:7e:
ca:3f:58:72:57:f2:8f:90:c9:8a:7f:90:b4:48:8f:bd:d6:44:
96:59:79:b1:a7:a3:96:0f:4f:e5:78:24:49:06:84:15:54:ac:
42:da:0b:ba:15:3f:97:ad:45:23:15:a3:09:33:44:be:9f:4d:
70:da:bc:3b:80:b9:53:bf:75:eb:0b:75:0c:29:83:79:f1:f4:
fb:46:4b:71:24:77:e7:cc:18:b9:86:7f:44:47:60:be:b8:f1:
2d:d8:6a:45:6b:d8:3f:a9:b3:24:74:4a:91:d9:90:a3:63:e3:
86:96:2f:ab:1f:08:a2:16:e3:ec:ef:ab:96:15:f1:ee:ba:47:
04:39:5b:7b:97:4f:54:50:1c:42:03:24:fb:91:34:ae:43:ff:
3f:6b:e5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:34:08 2026 by rpki-client