Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
File: 8QWrHat_7AP-udSdSgFaU2tXlZo.mft (raw, json)
Hash identifier: 0zwhNwpkM+Hvf+T9sjWXojT0H7a6iMdlMlTBuPQgiKw=
Subject key identifier: FD:DD:D3:9B:5B:1D:8A:6A:76:16:53:ED:40:CC:DB:FA:5A:00:84:06
Authority key identifier: F1:05:AB:1D:AB:7F:EC:03:FE:B9:D4:9D:4A:01:5A:53:6B:57:95:9A
Certificate issuer: /CN=f105ab1dab7fec03feb9d49d4a015a536b57959a
Certificate serial: 019E1C47001F4C9965CD3331D7F263B2FA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
Manifest number: 39
Signing time: Tue 12 May 2026 13:01:15 +0000
Manifest this update: Tue 12 May 2026 13:01:15 +0000
Manifest next update: Wed 13 May 2026 13:01:15 +0000
Files and hashes: 1: 8QWrHat_7AP-udSdSgFaU2tXlZo.crl (hash: JeeyDxd5DXdBRKrlS/Gq5pjyyZk34ii8jj7a9cRhYT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:00:1f:4c:99:65:cd:33:31:d7:f2:63:b2:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f105ab1dab7fec03feb9d49d4a015a536b57959a
Validity
Not Before: May 12 13:01:15 2026 GMT
Not After : May 13 13:01:15 2026 GMT
Subject: CN=fdddd39b5b1d8a6a761653ed40ccdbfa5a008406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:1f:44:ff:ef:37:b8:88:e9:40:56:1c:3e:
68:eb:e2:47:29:4d:90:c3:74:58:b1:7e:c0:4f:c7:
d7:3c:e7:47:19:83:86:93:ec:3e:92:c0:46:e9:31:
e5:40:18:2a:bc:d1:fa:e6:e6:60:fe:6d:c0:1b:b7:
60:a7:ef:2a:37:ad:1a:f8:e7:37:43:43:1f:e2:ad:
52:bb:24:eb:8d:87:f7:64:07:68:32:bd:0d:15:a1:
e5:7b:09:4d:c8:a8:fe:21:c5:b3:1b:8a:f9:30:74:
53:e2:23:50:a3:5e:eb:6e:38:95:e3:ed:49:4c:99:
fb:13:24:40:3b:41:05:00:f1:20:b8:3e:2f:f3:0e:
15:03:8b:6f:0c:e0:c0:18:b0:46:3f:48:05:7e:dc:
33:ad:8c:8f:a6:e8:1b:ca:95:10:84:67:b5:07:bd:
94:74:64:35:e5:e5:c8:51:78:a9:98:0d:b6:d0:ff:
39:48:7a:98:17:1f:cc:44:21:3f:41:ec:66:31:7d:
62:6b:8f:aa:74:84:8b:43:f1:b4:25:38:22:0d:a9:
f7:dd:e5:50:e8:c1:e9:1e:cf:7c:67:4b:e1:a5:7c:
b3:07:b0:e4:d7:e0:2b:87:bb:8b:be:b8:e0:27:bd:
ea:72:ce:14:4f:95:ae:33:5c:42:ab:8d:d3:e8:17:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:D3:9B:5B:1D:8A:6A:76:16:53:ED:40:CC:DB:FA:5A:00:84:06
X509v3 Authority Key Identifier:
keyid:F1:05:AB:1D:AB:7F:EC:03:FE:B9:D4:9D:4A:01:5A:53:6B:57:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:10:4c:3d:43:cc:fb:fb:52:9e:30:22:a2:7a:21:3e:ad:
c8:80:36:d8:c7:e8:c8:bf:83:28:0c:0d:f2:b3:70:78:e7:5a:
6f:84:e3:24:3e:49:98:a2:b7:ab:01:d6:64:15:f0:44:9c:1b:
84:92:2e:1b:40:dd:60:6a:dd:05:33:50:38:7c:fc:0b:e0:b7:
fd:fa:cc:b3:bb:d1:e6:c2:f3:49:d3:03:3b:0e:a9:1e:dd:19:
23:0d:82:da:3f:85:1f:dc:6b:1a:ed:8b:c4:27:a9:a8:70:bc:
e6:13:48:1c:49:34:54:6a:54:65:f3:df:50:d7:9b:22:40:a1:
53:ec:26:60:d9:f1:c5:9a:9f:59:57:b6:84:ca:94:16:fd:b2:
c3:aa:72:7a:25:4a:80:be:56:03:73:0c:89:af:d9:ab:cd:c5:
b7:11:67:14:79:3a:33:b6:fc:7a:b1:a5:59:83:b2:c1:67:fe:
9a:72:bd:e8:45:65:f3:b0:66:b2:3f:e5:fc:18:15:64:76:bc:
88:28:6a:36:c6:93:cf:3e:b4:68:26:a6:e8:c4:51:09:d3:e2:
eb:fb:ae:32:9e:5f:63:91:c2:be:9d:5e:82:07:a2:3b:7d:29:
56:69:cd:f1:f8:25:dc:8f:e7:d0:ed:b2:3f:ce:8c:45:d0:ab:
77:0d:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:11 2026 by rpki-client