Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: l3uYQiuxlxqD9NpXCPwSPcBoZIrDbbj45qX4yYuus00=
Subject key identifier: 88:2D:90:0B:45:7E:84:20:69:78:F4:01:8A:9C:E1:31:9C:08:DB:E7
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019E1F7F6C1CC2ECA92E05A807802A1BC58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 04:01:44 +0000
Manifest this update: Wed 13 May 2026 04:01:44 +0000
Manifest next update: Thu 14 May 2026 04:01:44 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: JKsKS3NAGnYsDWiGWuO1xuw3BocZH/6rXkcG0n1aX+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:6c:1c:c2:ec:a9:2e:05:a8:07:80:2a:1b:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: May 13 04:01:44 2026 GMT
Not After : May 14 04:01:44 2026 GMT
Subject: CN=882d900b457e84206978f4018a9ce1319c08dbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:85:46:57:1d:d4:c6:2e:87:0d:8f:64:ef:
3c:8f:b5:78:24:d1:72:f4:ff:62:2f:55:a9:60:d1:
71:27:46:3b:3e:f2:71:bb:c6:3e:3d:f3:88:db:56:
fa:96:43:ba:6c:c0:4d:2b:38:c9:96:f0:ed:27:54:
71:40:d7:23:e0:db:51:72:6f:7d:fb:15:ec:0c:5d:
17:34:50:1d:9c:4d:04:94:d0:a5:2d:e6:84:9b:77:
46:3e:ae:fb:62:7c:02:77:46:d2:a2:2c:06:bd:90:
df:3f:38:2f:22:67:b2:98:85:39:7e:55:b9:14:81:
ed:26:87:3c:39:bc:70:a7:14:96:5c:ae:5c:2e:aa:
0a:25:ab:af:d6:2e:f2:e9:67:33:b1:43:3c:88:f0:
be:38:c7:39:bb:32:56:30:52:0c:a7:9c:59:63:43:
fa:45:1e:0c:fc:ea:8d:3c:4d:db:26:a9:b0:52:26:
b1:33:1b:c0:8a:a2:41:66:42:fe:66:c6:66:07:e8:
f8:cb:df:22:29:1a:1c:81:9c:1b:d4:88:3e:59:e8:
28:fb:fb:96:f1:43:11:43:b1:70:8f:0d:92:19:bc:
5f:e1:a7:cd:15:ab:b3:ba:d5:ea:b4:e7:e8:62:7b:
ea:87:8b:a3:c3:45:e1:95:82:be:63:ad:cc:c2:28:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:90:0B:45:7E:84:20:69:78:F4:01:8A:9C:E1:31:9C:08:DB:E7
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:59:32:03:20:04:9c:10:48:0b:6c:b0:7b:34:8f:07:2c:f6:
57:dc:33:10:61:06:b5:b8:13:91:c4:35:cb:a5:fb:47:71:92:
c2:63:6d:50:d8:c0:9a:8a:e0:14:8f:d2:e7:3f:7f:f0:26:c5:
c3:cd:8d:86:59:12:4d:fa:a6:28:65:3e:ab:a2:52:ed:5f:c5:
6e:3b:d5:28:d6:00:4f:d3:ca:23:c7:d3:a5:92:f4:d7:c6:e6:
a8:22:39:ef:b6:f0:35:95:3b:f0:08:3c:16:6d:fd:cc:5d:7d:
63:0a:a5:f2:71:d7:53:c4:14:4f:38:32:9f:7c:71:75:73:c3:
bc:5c:d9:7f:94:73:ac:b6:e2:8b:c6:40:9c:9b:a3:90:f9:a0:
54:ae:e5:fa:2c:ed:0d:2b:78:57:23:26:4f:1b:25:87:e2:6c:
0f:6c:ec:51:ea:34:05:79:4c:f8:aa:23:27:a2:74:3b:d6:e4:
33:02:81:bb:d8:8a:b5:8e:a8:62:98:24:7d:6c:9a:ed:34:a6:
d3:44:10:fb:80:c1:d9:f7:6c:44:12:1d:ca:c3:cc:a1:53:66:
b5:34:e3:45:49:9a:3c:cb:14:a9:97:85:5f:65:8f:ca:7e:0c:
e0:49:c8:8d:ab:89:49:2d:ae:a7:a7:c4:1a:1b:42:26:fe:32:
65:98:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:36 2026 by rpki-client