Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: Wag8iugOqH/AEHa3pw6vomIIRfqikPVd/oexDTRNRms=
Subject key identifier: E8:DF:B3:F9:A9:8E:3A:58:49:05:2B:75:BA:E6:39:AC:6C:F8:FE:09
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 019D284E05B6413A7CD8D9B13A149AE7CB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 0488
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: 29IEh1VkUxb1EqAcGbdtQnS3EGU2bqVugwSuzQHzdw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:b6:41:3a:7c:d8:d9:b1:3a:14:9a:e7:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=e8dfb3f9a98e3a5849052b75bae639ac6cf8fe09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:3a:91:f0:db:46:ce:7c:08:0a:36:a8:52:
75:05:3b:a2:eb:54:30:1e:00:a1:12:45:a5:64:c5:
33:61:0d:e6:b6:b8:bf:20:cc:ea:57:19:3f:fb:ec:
0f:ae:b8:0e:19:7e:93:ad:c0:e6:d2:ed:89:ea:49:
69:b0:d8:f1:73:b5:a9:91:9e:23:3a:ab:10:9d:6f:
c7:a0:91:6a:c2:8b:86:ab:77:45:ef:7d:d3:18:c4:
c7:2b:3b:99:7b:91:61:12:07:5d:b3:e7:ff:f0:57:
a9:05:73:d3:be:2c:5d:95:14:6f:a6:4a:80:5b:d3:
46:ea:bc:31:9e:1f:22:b3:4b:ed:ba:ea:93:6e:c4:
3e:01:8f:c1:eb:35:5b:00:5a:2d:d5:3c:c2:20:51:
e2:40:c8:a8:b2:fd:b7:d0:3b:56:da:55:f9:dd:4d:
d0:a1:ac:d7:6f:c3:e7:c2:e7:8c:ea:e4:ad:0c:8a:
37:e0:07:0a:01:4a:a7:07:6f:f1:b4:ed:50:93:e4:
68:d4:27:0d:fd:28:fc:14:22:fb:e3:5f:a3:2d:ac:
32:e2:e6:9d:32:f5:4f:2f:43:87:ec:f5:31:4b:bf:
d9:01:60:56:81:be:a1:58:92:80:92:15:66:86:d4:
38:c2:74:82:32:2a:78:4a:6d:d1:13:20:35:34:2a:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:B3:F9:A9:8E:3A:58:49:05:2B:75:BA:E6:39:AC:6C:F8:FE:09
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:02:fe:97:53:de:52:b6:2d:d1:6e:62:62:c4:7d:8b:23:f2:
81:86:3d:5f:71:a1:8d:91:4e:d5:54:29:68:19:e5:05:35:bf:
4d:10:4d:78:10:64:08:6e:e0:b3:af:a7:ab:4d:51:a7:7e:6a:
9b:bd:ee:9c:1b:13:c0:d8:83:c9:0c:2b:81:57:08:27:02:a7:
00:f3:58:cc:4b:e1:44:01:01:88:81:d9:e4:e8:1c:01:99:3a:
07:50:b9:c4:dc:82:f4:41:52:3d:cb:b6:ef:f6:7d:fc:6f:63:
8e:5c:e5:50:66:df:3e:2b:2a:bd:99:05:9f:79:f4:8f:56:15:
dd:26:0c:31:2a:90:c1:5a:6e:94:a0:dd:ec:77:5d:1c:6c:99:
57:bf:11:71:df:1f:7c:63:d4:65:4b:61:ca:e0:40:aa:7b:6f:
76:b5:db:dc:d0:91:7a:db:58:84:1e:e4:64:90:61:d4:32:82:
f8:27:8a:0b:ff:17:64:2f:06:36:fd:2e:a0:da:39:d3:97:17:
a0:f8:47:6b:8b:af:48:e2:41:c5:d7:90:5f:3a:62:6c:8f:ec:
18:d2:20:34:b2:0b:c2:d8:81:d1:3f:ff:99:04:57:a1:66:03:
1b:d3:8a:ff:c3:0d:85:9b:f6:68:06:e4:c9:da:c7:bf:bb:e6:
a1:47:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:34 2026 by rpki-client