Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: 5Hjvn1HXeK7zMZYxhudOhdPkft4zXB8upG+4tT6tvQY=
Subject key identifier: 83:9C:C2:7D:8A:DE:E7:CF:48:B0:64:37:0C:56:93:0C:7B:E7:14:37
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 019F8F7F9B09A60B6F1ACE9AED8D28001B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 1579
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: 6N5AuRBYh2uWpnwTlKruBFPUwJtRx9LDq1JB+ZmZvOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9b:09:a6:0b:6f:1a:ce:9a:ed:8d:28:00:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=839cc27d8adee7cf48b064370c56930c7be71437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:7b:76:73:a2:a8:cf:f1:ba:4c:89:a9:41:
41:32:24:f6:b0:f5:3b:05:f9:23:58:84:67:c8:08:
ae:7c:87:f8:dc:b1:b5:24:d3:82:95:b9:da:e8:8a:
fa:61:b0:9c:61:e4:98:09:93:59:31:44:c9:43:d0:
c8:7e:d0:2c:a6:b8:ad:ee:f6:36:0e:e3:7f:4f:06:
46:5e:f1:d9:90:f4:e0:de:70:b3:70:38:dc:20:84:
c4:de:8c:c9:87:1c:de:91:22:c1:56:0e:00:fe:cb:
75:ee:7e:56:57:67:7d:39:6b:3f:c0:6a:a0:54:81:
fb:53:65:5b:2b:6c:96:76:ee:f4:bd:9f:f5:b8:af:
0d:46:f2:ca:e4:96:a4:c0:88:a4:35:c3:0f:c9:6e:
48:0f:16:32:61:01:8f:59:06:dd:fa:90:1d:3f:a8:
17:f8:a5:6b:68:5a:23:89:6c:03:9b:24:b4:3b:34:
d3:55:23:75:9e:8f:e6:39:e4:1a:df:60:74:95:d4:
a6:6d:b1:7c:df:f0:ff:47:95:69:04:96:f3:ad:70:
f6:5a:dd:93:ee:bb:24:7b:f8:bf:be:0d:59:5d:34:
a4:0c:9f:2e:7b:dc:1c:fe:b4:eb:95:06:ea:66:c2:
1b:72:35:b8:7c:38:12:00:fc:69:93:54:c8:d1:84:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:C2:7D:8A:DE:E7:CF:48:B0:64:37:0C:56:93:0C:7B:E7:14:37
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:02:a1:35:de:7e:9e:7e:fd:6c:9e:64:49:21:0d:c3:cb:14:
07:71:be:fe:d6:eb:2b:30:2c:06:90:b5:06:d5:fe:07:5e:50:
b1:8b:b2:7b:c8:73:18:41:74:bf:d8:73:63:3e:bb:8a:d0:61:
21:29:47:22:39:f0:1c:7b:d8:8b:f3:a7:16:41:d5:c5:20:9d:
36:e4:5f:4e:9b:a1:04:6b:30:d6:cf:2d:1a:f3:12:6c:d7:99:
2c:da:16:8c:11:02:df:85:1a:c9:cc:b7:59:4b:45:87:99:5a:
d4:6b:ff:98:db:99:e1:df:e9:bb:5a:ae:6e:4d:b5:f6:46:54:
22:ec:df:01:34:e3:a5:fa:2c:65:a8:95:a2:e6:73:7a:48:e4:
88:9e:aa:91:83:b3:e6:97:14:68:17:b3:7c:18:3d:f5:45:95:
e4:3d:df:27:52:57:f6:7b:37:bf:30:7c:4f:77:a7:59:26:98:
0e:5a:48:df:0f:c8:ff:8c:17:10:25:5d:f5:db:fd:53:db:04:
64:1f:e3:81:af:70:f2:52:ac:d2:6e:0b:c4:bc:be:8c:8e:ca:
ca:00:8d:c3:55:0f:63:fe:29:58:9c:0b:a5:86:b4:f4:98:11:
9b:ee:97:16:ec:24:a0:e0:a3:2d:0f:1d:28:c3:7a:e5:ad:a3:
8c:8c:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:35 2026 by rpki-client