Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: FAzx05LkJLyGV6EEDGk5siMUUhK4rnUnuQwg0iDOlOs=
Subject key identifier: 83:6E:BA:19:CD:62:06:1B:80:0D:6E:54:30:C4:A8:E3:F9:14:94:8A
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019D2704249B3CFD1DEFFE41630A531FBE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 15BC
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: nIMwLzxcdtcDYu7DaBBRtE4nNmDjoR4fCsjFs5/rxIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:24:9b:3c:fd:1d:ef:fe:41:63:0a:53:1f:be:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=836eba19cd62061b800d6e5430c4a8e3f914948a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:60:6d:77:65:1f:35:7b:92:c7:d6:c5:05:
05:50:fd:d9:a3:c3:25:39:b2:cb:69:d1:c4:1e:7e:
13:71:a7:35:f8:43:4c:5b:84:a8:ce:65:b9:0f:be:
55:4f:f1:69:6a:21:06:e4:64:df:9a:89:c8:40:d2:
2a:08:53:11:10:0a:84:a1:98:b3:7a:2e:17:22:72:
80:9f:5a:c6:a9:32:04:fb:ab:b4:71:19:ca:98:dd:
9c:a8:9e:dd:45:60:46:5f:f2:dc:35:f6:91:ab:25:
19:76:4e:9b:a7:b0:7a:04:f8:f4:9f:6d:7a:a2:74:
c8:77:96:b3:51:a6:c0:df:e8:09:63:72:a8:41:01:
8a:dc:1a:40:b2:cc:e8:7e:24:da:1a:9b:c1:ff:03:
b4:34:63:6f:ea:be:61:d9:39:60:7b:51:49:cc:08:
fb:ab:96:03:eb:18:cb:23:2d:57:20:58:fa:4f:2e:
04:77:1f:85:5d:6b:62:33:d4:bd:d5:47:eb:c9:5b:
01:7e:04:b8:11:44:f8:7e:41:cc:74:00:4c:c2:60:
8c:31:7c:ad:9a:f8:e2:d0:9d:43:1f:f2:c3:fb:32:
60:d6:5f:c9:37:cc:f8:ae:d8:bf:6e:60:d8:e0:3c:
af:a2:96:b0:10:9e:ef:d0:94:b9:46:31:6e:de:80:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6E:BA:19:CD:62:06:1B:80:0D:6E:54:30:C4:A8:E3:F9:14:94:8A
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:64:ff:c3:e2:db:47:14:64:e6:b3:37:97:f1:d2:43:e4:27:
7b:a7:32:8b:2e:fc:8c:36:cd:c3:b0:f7:f3:d1:39:2b:80:7f:
34:0f:fd:4e:bc:2d:39:79:76:38:06:55:48:44:dd:ef:f1:22:
91:8a:27:b2:f1:2b:56:29:3f:f8:6c:cb:51:97:b6:1f:6e:04:
aa:3a:ce:5b:e9:f1:67:59:20:c4:44:7d:7e:3c:5f:ae:ed:66:
02:11:d4:d5:d4:08:1f:50:bb:05:e3:94:1d:a3:cb:78:f8:16:
f1:04:60:6e:23:c4:fd:c0:73:e8:33:89:f4:3e:2e:be:e6:45:
c8:ab:4f:de:01:34:d4:9e:7d:18:df:28:d6:54:f2:20:69:ae:
f2:c8:0f:cc:eb:a7:99:61:ac:d4:58:dc:0c:56:a9:97:12:ee:
c6:f6:30:ca:10:00:42:d1:e5:1f:4d:97:61:7c:12:bc:d4:3e:
c1:56:48:64:c0:4b:48:8f:45:f6:e9:78:43:d6:98:27:e7:b9:
b2:8a:12:7f:c0:3a:cd:b3:ff:66:b6:48:9d:bd:52:e8:45:c5:
17:c4:dc:19:3c:c1:9d:b3:fe:26:96:46:ef:99:72:d9:21:40:
da:24:08:90:f3:2d:21:52:8f:93:6c:f8:58:4a:fb:5a:ba:ed:
19:99:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:44 2026 by rpki-client