Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: HK87VWVrVjNtQeQ/kL/RsMNNfkEL9Ai14kblvQJ0DC8=
Subject key identifier: 08:CA:67:46:1C:57:8D:94:81:39:6E:47:30:C3:B5:DE:AD:D0:C6:37
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 01A11B99819E78C79A5A73559FF631AD8CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0711
Signing time: Thu 08 Oct 2026 13:00:07 +0000
Manifest this update: Thu 08 Oct 2026 13:00:07 +0000
Manifest next update: Fri 09 Oct 2026 13:00:07 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: n5vvlOmHjyc31uqxUzDk49BJhASpxN8dlOJYOspH+Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:99:81:9e:78:c7:9a:5a:73:55:9f:f6:31:ad:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Oct 8 13:00:07 2026 GMT
Not After : Oct 9 13:00:07 2026 GMT
Subject: CN=08ca67461c578d9481396e4730c3b5deadd0c637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:0e:da:02:20:df:8d:1c:8d:80:cf:01:d0:
67:b9:81:6b:56:cb:37:7d:3e:ab:4e:07:d4:d4:67:
ea:6c:05:8c:16:5e:01:b0:3e:5f:cc:67:6b:d2:60:
f6:16:9d:0d:73:5e:51:ca:d1:6e:52:ae:bf:e1:a3:
5c:48:8c:46:51:35:24:60:e0:8d:99:6e:ef:0a:51:
45:07:09:f4:11:d6:af:9e:ee:e5:33:d1:4b:39:fe:
a5:52:90:71:60:e9:4b:83:30:07:5d:6e:4b:49:ed:
3c:e3:80:a0:92:54:95:e1:71:48:66:9e:23:8e:39:
2f:54:1a:f7:3f:37:f3:ba:d1:0b:91:8e:0c:3e:56:
a3:eb:2d:26:11:13:15:11:a4:e1:a8:be:ff:f0:1e:
74:4c:95:9a:ca:0e:ab:19:2c:2b:8d:2c:f8:16:6f:
8c:2b:ac:fb:6e:bc:be:76:a9:14:9f:4d:23:e0:c8:
a7:3f:cc:30:5f:c0:e3:65:db:1c:78:40:80:4a:76:
56:6b:c2:7f:34:d8:17:f2:d1:3f:f0:b3:0d:0b:8c:
d5:a4:41:24:c3:99:23:66:9c:fb:0e:1b:6a:03:23:
01:4d:b6:25:43:84:7e:64:f3:2c:31:ea:cf:1b:b1:
cb:c3:60:51:d4:f3:b1:ee:d9:c2:2b:ed:be:fc:2c:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:67:46:1C:57:8D:94:81:39:6E:47:30:C3:B5:DE:AD:D0:C6:37
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:37:85:d5:06:a3:4f:80:53:ec:43:74:68:53:45:9a:e0:
a3:3b:e0:dc:d8:e2:db:79:6a:68:49:2d:b9:9e:c7:4d:aa:19:
8b:31:de:e9:47:6a:ec:1b:f4:73:5e:16:f1:b2:01:44:f9:c6:
c8:ef:8b:60:b1:25:32:65:2f:3f:bb:7e:14:f3:94:6c:3d:be:
cf:f5:8a:96:d8:c5:6e:52:87:d6:17:38:f3:56:38:ec:c8:90:
d8:0a:37:89:8d:f6:f7:bf:58:d3:f4:fb:16:a7:63:85:bf:11:
5d:89:8e:bf:31:68:49:3c:85:2e:83:64:29:e0:23:0f:e4:27:
54:b5:81:27:b3:d7:b8:ca:30:0a:63:83:0b:15:ed:7d:42:3f:
70:bb:b5:37:b3:3c:6f:2e:23:9d:7b:8a:91:e8:17:43:16:ef:
11:59:6d:8f:1f:bb:d7:e3:32:fb:d0:4f:92:80:51:0e:72:2a:
d6:66:27:34:79:27:89:3a:d7:4a:e2:ef:18:1a:ce:b0:11:44:
fe:b5:17:0c:f2:8c:da:c1:eb:99:75:e6:cb:79:dc:ea:57:65:
8d:d1:06:2a:06:00:ed:d0:2c:d9:e2:f5:51:31:b1:b7:4c:7d:
d4:0d:e3:7d:45:50:0f:4e:68:ef:3c:75:2e:6b:ea:5a:82:5d:
0f:78:41:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:08:12 2026 by rpki-client