Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: sL2LoQUXRgXo7Hyo0rMKCGGKl5+l8Olcl4PXXI6PpiM=
Subject key identifier: 4B:2E:AC:5A:A8:18:9F:D7:A4:EF:5B:59:B3:8D:E0:77:6D:46:FC:A4
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019F91A3EB31C49F71CBA2C1697C26C3989C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0645
Signing time: Fri 24 Jul 2026 01:01:06 +0000
Manifest this update: Fri 24 Jul 2026 01:01:06 +0000
Manifest next update: Sat 25 Jul 2026 01:01:06 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: /vIjMrLVdWQHPOfZ16/tjoA8154WGmzXdTlwZVuJAvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:eb:31:c4:9f:71:cb:a2:c1:69:7c:26:c3:98:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Jul 24 01:01:06 2026 GMT
Not After : Jul 25 01:01:06 2026 GMT
Subject: CN=4b2eac5aa8189fd7a4ef5b59b38de0776d46fca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:c7:6b:c9:36:40:4a:2a:2f:c4:86:39:d0:
58:67:5f:31:bf:e5:aa:df:c5:67:b1:ce:ad:85:6b:
9e:ba:1d:dc:21:56:b0:0c:0d:f3:bb:67:10:0f:d4:
16:c0:ab:09:f9:14:d4:71:fa:e7:ba:da:83:56:da:
d5:01:c4:e5:b1:c5:98:4b:35:a5:8b:0b:85:ee:7f:
dc:28:22:6a:0e:d3:17:ca:88:cc:2f:47:7a:b2:7b:
26:4a:4e:e3:b2:fb:21:12:fc:68:d6:03:3b:ba:8e:
d0:2b:b6:a5:19:be:07:fe:4c:04:34:46:fd:10:43:
37:2a:70:ba:ba:ed:a6:f3:38:b5:26:e4:21:b1:00:
84:da:91:a1:00:31:02:ea:f8:2d:4d:16:c0:41:20:
98:3c:aa:36:f4:06:b6:40:fc:6a:cc:e6:90:05:ce:
2c:07:e0:99:50:6b:9c:90:f5:0d:7c:ba:90:02:b5:
cf:d8:a5:a7:3f:22:b1:a4:35:11:53:d8:d8:45:e8:
09:f6:8c:ac:1d:7c:27:e8:2a:26:b5:f1:7c:93:26:
4c:0c:9e:75:f2:4e:c9:67:df:3f:39:7c:1f:aa:af:
1a:ed:4c:9d:91:c6:8f:fb:d4:84:c0:e4:7d:58:08:
0d:2b:97:e5:26:e4:84:e1:70:5c:60:df:32:72:b7:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:AC:5A:A8:18:9F:D7:A4:EF:5B:59:B3:8D:E0:77:6D:46:FC:A4
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:d4:60:2b:39:f0:2f:8f:0f:3e:d5:4d:04:b5:8a:b7:0f:
75:10:db:5a:83:de:ef:7d:58:70:3a:c9:2f:b8:47:c0:3b:ce:
c1:1e:56:d4:2e:a1:e3:2c:3a:8b:19:6b:84:b5:79:3d:8b:e5:
0d:c0:fc:0d:63:6c:1a:1b:90:1f:b4:ab:34:c0:67:7a:e8:3d:
c2:21:5d:30:f2:56:47:7a:1a:49:59:5a:7a:c1:31:01:9f:f0:
eb:2f:e6:a6:f5:38:38:4a:a8:84:9b:60:6c:85:5b:29:39:82:
e0:3e:0a:fc:59:2b:c7:10:30:04:76:4c:fa:37:fc:9d:61:5d:
9e:3a:39:81:ef:5b:8e:d9:aa:e8:a1:fc:22:69:cf:59:c3:6c:
f3:7b:4a:99:47:63:c8:d4:4d:23:71:a5:41:0d:a2:c8:15:98:
1c:8e:63:6a:e2:6c:6c:32:77:2b:17:08:8d:b7:2a:b0:a4:a4:
89:a4:a8:4c:3e:b4:01:0d:23:42:4f:b5:1d:d8:32:77:07:e3:
04:86:37:57:e0:ba:48:16:f5:0d:4b:1a:7c:eb:43:2d:e3:55:
8e:05:df:d8:a5:2c:8d:a4:57:55:35:67:e8:81:67:2a:29:b1:
fb:26:14:a1:04:2d:61:26:31:e2:2a:64:52:f3:f3:ad:46:cf:
dd:7e:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:48:25 2026 by rpki-client