Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: F/v2xqZdPf1sEA5FmPm01AnCUD9fC4LJimg9PsdT01E=
Subject key identifier: F3:55:F5:47:15:02:70:24:F1:D1:F7:89:A4:5B:DE:04:8F:84:A6:11
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019D2A3B972D35BCB643EC6B03468CDF9AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 13:00:41 +0000
Manifest this update: Thu 26 Mar 2026 13:00:41 +0000
Manifest next update: Fri 27 Mar 2026 13:00:41 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: mSegwyioKnrI9IyiUMwoHN4RWn+sNJ4vQiJvKdIVYuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:97:2d:35:bc:b6:43:ec:6b:03:46:8c:df:9a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Mar 26 13:00:41 2026 GMT
Not After : Mar 27 13:00:41 2026 GMT
Subject: CN=f355f54715027024f1d1f789a45bde048f84a611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:74:0b:24:9a:6f:f4:ea:5c:37:7d:55:11:
4b:18:34:78:52:81:16:6d:ab:80:b3:17:14:70:ba:
66:0c:fd:70:1c:64:e7:0a:ef:a5:06:9c:76:50:66:
5f:c6:2f:83:67:cb:de:18:08:41:cf:79:9e:52:4e:
f3:b6:3e:8a:a6:1d:77:0e:3f:14:34:dd:3e:fe:b4:
b4:8e:c0:8f:80:1c:c2:ee:cf:57:81:ac:1e:94:17:
0e:dd:e7:a9:8d:99:b8:df:5d:a9:58:dc:e4:eb:b0:
85:67:5e:07:48:c1:eb:d3:b0:12:bb:a7:ca:e3:dc:
e8:50:c9:3e:fc:d1:51:c0:67:55:05:ac:30:c9:de:
1d:84:c1:54:0d:cf:36:ba:42:e5:b6:d2:02:ec:ed:
9a:ff:bf:ac:9c:10:a0:c3:89:d9:a7:60:0e:e7:af:
17:9a:25:f6:71:30:41:1a:8f:5c:df:ab:94:89:26:
4d:73:e6:2c:89:bb:a3:c6:9d:68:64:80:54:22:e7:
4b:61:94:ce:61:44:89:70:3e:c9:3f:dc:c0:39:5a:
08:3e:2f:7f:9a:56:91:b4:db:2a:4c:62:81:b3:7e:
0d:8d:51:2d:37:3a:21:8a:83:84:41:fe:9c:c8:7d:
71:c7:d0:7b:4c:60:cc:d4:39:e1:ee:d6:89:ec:ef:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:F5:47:15:02:70:24:F1:D1:F7:89:A4:5B:DE:04:8F:84:A6:11
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:da:ae:c6:de:f8:e9:7e:58:7f:ba:b8:ba:3d:de:79:c0:a4:
fc:7e:4e:d1:b1:21:12:ae:06:3f:2e:f2:e8:78:36:ec:ed:06:
b4:e1:a5:2f:8e:fb:c7:23:0a:b5:52:15:84:4e:98:59:75:f4:
b1:3f:3a:e3:35:35:f2:38:b1:2f:b7:5c:77:01:7c:01:69:08:
dc:d8:11:9f:e4:b9:bb:23:8a:16:eb:46:5d:96:b5:52:b9:86:
08:14:dd:70:83:39:49:66:9a:1d:fb:f5:9d:e9:11:a1:d7:d1:
c6:e6:cb:81:a9:e7:42:92:12:57:04:36:3b:ab:92:bd:96:08:
0e:1b:75:e0:51:36:2d:00:4e:ae:96:68:31:6f:fc:0f:8f:bb:
80:8d:4e:b1:25:67:a6:3b:c9:92:ee:ee:7a:2a:c8:29:68:83:
ba:3d:b7:e6:16:3d:70:d1:d9:f6:fa:1c:bf:9a:9e:d1:8f:72:
77:f8:8b:10:09:c4:04:87:5a:6a:f7:d2:fc:31:01:54:e8:21:
76:1b:07:8f:0f:6f:2e:0a:a0:d2:21:84:e0:46:af:e6:18:3a:
47:1d:5d:de:f5:02:85:fa:94:50:0e:32:c3:b4:57:8f:59:1f:
f5:6b:95:74:bf:f2:0c:de:89:39:f2:d1:53:b6:35:57:c9:bf:
20:70:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:08 2026 by rpki-client