Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
File: 8QWrHat_7AP-udSdSgFaU2tXlZo.mft (raw, json)
Hash identifier: 9ysj/1uF+LmRm3hlpgYCflW/YI+CRqe7T7U4K1Bqiu4=
Subject key identifier: 48:81:E3:1B:E7:93:5A:44:4B:C6:48:83:75:55:5D:E7:C0:5E:D7:06
Authority key identifier: F1:05:AB:1D:AB:7F:EC:03:FE:B9:D4:9D:4A:01:5A:53:6B:57:95:9A
Certificate issuer: /CN=f105ab1dab7fec03feb9d49d4a015a536b57959a
Certificate serial: 019F92ED565102A37BC54A8A8DA9FD04FA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
Manifest number: FB
Signing time: Fri 24 Jul 2026 07:00:55 +0000
Manifest this update: Fri 24 Jul 2026 07:00:55 +0000
Manifest next update: Sat 25 Jul 2026 07:00:55 +0000
Files and hashes: 1: 8QWrHat_7AP-udSdSgFaU2tXlZo.crl (hash: IVXESl6J25vDUg8N8kYRoKM5kcagTE+WuTfq8oJ9CQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:56:51:02:a3:7b:c5:4a:8a:8d:a9:fd:04:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f105ab1dab7fec03feb9d49d4a015a536b57959a
Validity
Not Before: Jul 24 07:00:55 2026 GMT
Not After : Jul 25 07:00:55 2026 GMT
Subject: CN=4881e31be7935a444bc6488375555de7c05ed706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:75:46:dd:9b:42:d9:00:27:88:8b:5c:11:
c2:0e:42:a5:e8:9d:23:1e:94:a7:d1:cf:c0:c0:47:
4c:42:f8:16:06:62:9f:83:0f:90:a2:7b:fe:4a:15:
1d:a7:bb:7d:01:9e:6f:c9:38:ed:66:d0:88:81:a8:
67:a3:27:61:00:cd:fd:84:dd:e7:7a:86:9d:eb:41:
0c:db:04:cf:f0:44:d1:51:a4:f3:3d:a1:56:13:bf:
7d:57:18:d8:e9:4f:5b:b5:ab:51:a0:9b:76:47:7a:
e5:2c:65:ea:f6:5e:d0:7c:08:69:5e:75:ba:71:0b:
4d:61:ea:71:07:d9:43:22:2f:7c:84:55:f2:1f:f5:
4f:78:65:04:ad:5b:b1:c1:41:f4:25:1a:1e:52:64:
21:b0:88:0f:4f:4c:e3:7e:30:b7:85:55:2f:09:38:
01:5e:53:5e:87:5f:52:7e:e0:21:a6:44:ff:dc:c4:
e9:1e:5e:b6:c9:a1:dc:e7:ee:37:e0:4c:63:41:b8:
45:bb:c6:35:1c:5a:b8:b3:e9:6d:9d:c3:c5:d4:35:
d6:ea:e5:85:f6:d3:de:6b:1c:86:79:6e:21:55:c0:
35:6a:c7:a9:cf:f4:05:9a:11:41:d2:d2:75:6c:10:
96:db:23:7f:ee:c7:54:53:5a:32:60:df:cd:cd:3b:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:E3:1B:E7:93:5A:44:4B:C6:48:83:75:55:5D:E7:C0:5E:D7:06
X509v3 Authority Key Identifier:
keyid:F1:05:AB:1D:AB:7F:EC:03:FE:B9:D4:9D:4A:01:5A:53:6B:57:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QWrHat_7AP-udSdSgFaU2tXlZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f2109a-d146-4708-af74-2264a35bafd3/1/8QWrHat_7AP-udSdSgFaU2tXlZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:6c:cd:66:97:4a:69:ec:af:88:16:ca:90:48:c7:fc:eb:
58:97:18:08:5a:f8:09:75:8d:ee:cc:17:ba:f2:fd:c5:b5:2d:
94:8f:a5:3c:16:1a:9f:00:68:f7:b0:cf:37:72:15:c5:5e:16:
24:0f:bf:db:0a:9e:e1:e5:65:63:a1:72:01:2a:e8:c8:8d:9b:
0d:f4:cb:d0:0c:cc:fc:09:34:90:f6:01:06:26:96:f0:2d:ad:
69:99:0c:7f:21:85:19:91:b0:be:1c:ad:e7:99:9e:80:98:18:
bd:26:e5:f2:62:11:2e:32:95:ae:ea:51:d9:eb:b1:87:a8:6b:
93:7d:8e:d3:b7:2f:95:88:a0:dd:f9:24:5d:6e:f4:83:7b:03:
35:d6:05:b0:58:f1:06:ca:d9:0b:77:67:44:5f:24:81:6e:44:
be:bc:ad:0d:35:65:92:be:52:11:6e:a4:b4:17:23:77:1c:ff:
ac:4d:93:90:97:79:4e:af:a5:dd:4c:f1:90:c7:eb:a6:5d:12:
e7:a8:dd:ce:06:9e:33:76:0e:d5:0b:68:79:f1:a8:a4:90:7f:
d7:87:71:d3:71:e7:c9:3f:0f:8a:86:7e:7a:2a:d9:f2:4c:53:
b4:84:2e:6a:22:07:3d:78:4b:52:da:84:58:81:6a:b2:04:d0:
50:80:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:42 2026 by rpki-client