Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: 3cTix2gpU8oICSVBTVYNZ4dDibuf3n+cDwam56JKiUI=
Subject key identifier: F1:8B:5B:4A:87:D9:E0:D8:42:34:54:52:AF:98:D6:3E:0C:B5:EE:6A
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019D2961227746387F651B7ADAE1530C552A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 09:02:04 +0000
Manifest this update: Thu 26 Mar 2026 09:02:04 +0000
Manifest next update: Fri 27 Mar 2026 09:02:04 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: EtUZsFHuJHpB6mLB3lNoV7yEPZPD90+PP30v/L0xFf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:22:77:46:38:7f:65:1b:7a:da:e1:53:0c:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Mar 26 09:02:04 2026 GMT
Not After : Mar 27 09:02:04 2026 GMT
Subject: CN=f18b5b4a87d9e0d842345452af98d63e0cb5ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:1e:4c:61:dd:cb:1f:29:c8:99:ee:cd:4d:
e5:a5:fa:b5:9f:91:6d:cc:be:74:54:4e:05:72:9e:
37:75:01:f7:d9:76:97:e7:df:e6:1d:3c:cb:2e:24:
7c:0b:86:10:a2:a2:2c:d1:e4:9e:d3:ef:cd:60:21:
63:2a:6c:b7:68:3a:47:c8:87:8b:4c:f6:53:61:f1:
79:30:b7:9b:fe:ad:f3:2a:ad:98:9c:4c:7d:bb:d2:
9c:ee:73:38:b3:bb:63:c0:e7:05:e0:d6:48:f5:65:
c3:72:11:ee:e6:5a:99:59:cb:32:02:75:4a:25:15:
38:88:7a:52:71:38:f6:ee:73:b3:06:7b:66:97:cb:
9b:c1:b3:69:78:b0:eb:e2:ef:ae:f8:68:0a:7e:a8:
52:ee:fc:22:3a:6d:e7:c6:63:cb:db:6b:86:2d:7e:
b2:58:33:35:6d:a1:f7:ab:7c:84:9a:78:95:a2:94:
c9:ef:61:78:b7:28:00:7d:0e:cd:81:a7:f5:72:d5:
d2:b9:03:b9:5d:59:da:66:79:9f:03:73:fa:98:ef:
1b:a9:7e:cd:31:4e:25:b2:30:d3:f3:49:91:3f:62:
26:74:c6:da:88:39:85:97:32:21:a1:c8:3d:e7:57:
30:c1:a1:73:68:9f:99:eb:34:08:a1:87:1b:38:6d:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8B:5B:4A:87:D9:E0:D8:42:34:54:52:AF:98:D6:3E:0C:B5:EE:6A
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:03:a3:2e:bb:0f:8a:96:49:36:2d:e2:b6:cf:46:28:55:
78:1a:6e:52:59:f1:cf:3b:13:53:6d:54:2b:1b:b6:62:e5:df:
63:cb:58:8a:7e:9f:c3:b4:b4:1c:96:7d:3f:19:82:d2:75:89:
ce:d9:d3:94:38:99:60:2f:6f:21:8a:ca:c8:90:ab:eb:27:c6:
a7:f2:de:ac:58:7f:55:3a:a8:91:7f:d8:ac:11:77:f1:5d:74:
cc:00:ea:bd:88:20:c1:ac:aa:b8:38:8c:fc:da:cc:87:9a:14:
15:0c:61:9f:d6:2f:b6:8d:f0:48:01:3f:7b:f8:24:43:1d:95:
14:b4:54:d6:f0:49:59:60:84:7b:64:6a:85:16:f5:97:77:81:
16:93:c6:f2:03:19:f3:0d:c8:24:dd:58:1c:1a:ef:fb:31:57:
f4:0a:80:f4:9f:ca:9d:48:9b:c0:2c:52:3f:29:73:83:35:02:
4a:ee:e9:48:3f:03:56:8a:cb:05:e7:96:ea:fd:21:cb:93:32:
5d:79:2c:7a:43:2b:d7:4f:be:5e:62:ff:ee:25:6d:b8:7a:12:
7f:1a:71:12:9b:1a:59:86:78:3a:f6:00:e3:dd:45:76:32:d1:
ba:72:a4:c6:7c:42:ab:43:54:22:6f:f7:a0:c3:ae:65:ac:06:
d3:11:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:17 2026 by rpki-client