Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier: B8vnoQ55aKHCvhJCNTnkAboLExSuPCWhE+quzBXinXM=
Subject key identifier: 05:B6:98:7E:D6:77:46:A1:08:FD:84:96:2D:DD:58:A2:FD:CA:76:84
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019D32D0A49FDC85D7646C872839967B1FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number: 3C
Signing time: Sat 28 Mar 2026 05:00:27 +0000
Manifest this update: Sat 28 Mar 2026 05:00:27 +0000
Manifest next update: Sun 29 Mar 2026 05:00:27 +0000
Files and hashes: 1: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: oX5rHP2TJllHqttYILVBr8SyzVrEEpdswFO5GP4gqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:a4:9f:dc:85:d7:64:6c:87:28:39:96:7b:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Mar 28 05:00:27 2026 GMT
Not After : Mar 29 05:00:27 2026 GMT
Subject: CN=05b6987ed67746a108fd84962ddd58a2fdca7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:01:a6:64:72:67:ab:07:4c:8e:20:34:a6:
58:4e:c1:7f:af:74:00:1b:e8:5d:e9:8c:d9:26:48:
81:d0:07:38:67:ad:a9:10:3e:94:a0:97:fb:1a:d0:
6f:e1:51:3a:5a:61:2d:75:93:a7:54:48:e2:02:93:
c6:b2:1f:d0:a2:5a:49:5c:50:ea:d7:bd:e8:98:52:
47:02:b3:b1:d4:31:9a:91:19:52:ed:95:90:63:f7:
0c:a0:0b:e0:c0:b0:51:ee:f5:c0:41:08:a3:3c:06:
ce:2d:09:8f:4b:e1:de:10:d8:b1:9e:b0:5f:73:1e:
77:8e:d9:b1:64:62:d1:5b:fb:ae:06:d5:b7:06:4a:
59:48:4a:c7:7f:02:56:3e:9d:a3:df:c0:65:d6:cc:
a3:86:be:93:8a:db:70:1a:8b:ba:d0:a1:23:85:e6:
14:33:cd:d4:18:96:6a:ca:70:a2:b9:75:76:79:49:
af:79:10:47:1f:15:cf:46:38:13:1e:00:9d:f3:47:
1a:d6:1c:35:ba:bd:42:a8:52:bb:31:57:96:4e:6e:
95:fa:03:41:5d:bc:07:e7:26:9c:42:d4:79:1a:58:
3d:a6:6f:25:47:bb:b7:13:d2:9a:d8:a6:78:86:8e:
68:3b:19:e1:dd:ee:cc:f4:b5:2e:2b:2b:39:00:e6:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:98:7E:D6:77:46:A1:08:FD:84:96:2D:DD:58:A2:FD:CA:76:84
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:63:8a:96:1c:49:92:51:3d:90:5a:8e:b6:42:86:e9:a5:eb:
cc:86:7b:86:5c:e1:b5:20:ad:e9:3e:46:d8:27:d7:8d:ce:83:
36:b7:c4:a6:8f:d0:0d:20:25:93:17:dd:ed:49:29:35:e6:85:
bc:3a:a9:ff:75:09:ee:05:4e:b5:d0:d6:83:db:43:56:91:55:
fa:84:3b:98:cb:b5:df:24:ce:83:15:a1:52:00:50:4d:8e:ac:
10:e5:13:41:79:7d:f7:b5:bb:69:3e:50:65:85:3e:75:48:35:
c9:e6:78:f6:1b:73:6a:81:20:90:06:99:03:4e:54:fe:e1:e6:
de:53:43:80:7a:c6:78:19:15:8f:43:b5:92:03:79:12:93:72:
f0:62:07:eb:a2:de:56:57:07:2f:c6:32:7b:14:ca:06:36:88:
23:f5:cd:21:f0:ed:93:20:42:12:66:71:e2:99:e7:65:25:27:
c4:f5:4f:c5:b9:41:68:cc:c3:bb:d3:49:75:22:98:c3:e5:0b:
05:a2:09:d0:44:1f:02:0d:87:70:89:38:24:0c:21:89:57:83:
b2:9f:f4:10:84:fa:4a:73:5a:a9:2e:6b:ac:4d:ad:62:da:2f:
0f:5c:fa:eb:22:e8:36:02:a3:65:f9:19:03:35:c1:35:17:0a:
e3:13:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:43 2026 by rpki-client