Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: nr+6D6Ve3vA3xmY4qnTGjhsU2v9jZVo67EfjY1jFUqY=
Subject key identifier: 94:57:F4:5F:1E:19:0E:1E:52:F9:FE:51:74:4B:A0:31:92:F5:C1:33
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019E20C829ED20C9AC796BB6AA6ED06D6FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0586
Signing time: Wed 13 May 2026 10:00:49 +0000
Manifest this update: Wed 13 May 2026 10:00:49 +0000
Manifest next update: Thu 14 May 2026 10:00:49 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: fdN8FZYo8plWPtm6R8+Ko8wMqnhXpQPwfKPbvNON+Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:29:ed:20:c9:ac:79:6b:b6:aa:6e:d0:6d:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: May 13 10:00:49 2026 GMT
Not After : May 14 10:00:49 2026 GMT
Subject: CN=9457f45f1e190e1e52f9fe51744ba03192f5c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:cf:d7:f4:68:dc:cf:51:a8:08:d7:3a:9a:
2a:70:1c:8d:12:60:3c:02:c9:d4:91:cd:29:32:f7:
78:72:d1:06:9c:41:7c:a4:92:86:60:2a:78:5e:bf:
95:4a:3f:35:22:d3:6a:44:3d:5d:fb:36:11:59:19:
3d:6b:94:9d:31:9d:1d:48:d4:fc:90:e6:c4:12:6c:
86:4b:ed:4a:5e:f6:f8:83:99:19:e3:0e:f4:c1:e4:
01:e7:57:ab:9d:b6:46:a8:95:af:75:e9:69:a3:05:
0d:8b:4a:ab:5a:02:ca:35:4f:61:f1:a0:1a:7a:96:
11:1e:cd:ae:19:07:c7:65:e7:ba:1b:68:6c:af:2e:
23:02:25:24:8c:91:ff:d9:a4:5b:b6:cb:52:a0:0f:
e3:cf:20:cd:b2:4b:76:f9:64:c5:2b:7d:86:c9:5b:
40:88:a8:3c:8a:00:77:d4:2c:c4:6b:f7:19:fe:97:
cb:30:c9:e5:32:06:90:ed:32:da:5e:bd:f9:86:d6:
fb:7e:c2:a9:27:88:c7:82:16:80:a7:54:35:24:ad:
bd:36:a8:92:36:3a:38:5e:cb:1c:0e:f8:0f:b5:f0:
89:dc:67:68:5c:63:57:ad:9e:30:7c:80:68:20:0c:
2e:c9:e7:36:94:92:84:fe:b7:f0:fb:ee:9b:2a:b8:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:F4:5F:1E:19:0E:1E:52:F9:FE:51:74:4B:A0:31:92:F5:C1:33
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:0b:9f:ec:7b:04:17:63:31:b2:fb:13:e2:89:c5:a0:9c:
4b:27:e1:88:e3:e6:46:3f:bb:28:e8:04:6a:f3:78:0f:a3:1c:
9b:48:e1:d2:38:88:49:cb:72:c4:12:8e:46:fe:07:07:fd:d2:
07:a7:ae:b3:9d:59:24:e4:d5:b2:fa:d7:ac:60:5c:a7:b1:e0:
36:98:ce:a2:9e:5d:b2:22:ab:b9:af:57:f9:f4:45:e7:e8:32:
bc:29:4f:2f:25:1a:4d:53:1e:4f:6d:08:bc:a9:fb:d6:22:c8:
e1:63:4e:ba:05:f3:60:7b:6f:49:3d:6a:8a:11:ad:74:ab:b9:
2e:5e:f9:3f:64:0a:4f:77:1c:38:3d:74:f4:9e:f3:a1:cc:44:
59:ca:96:6a:2f:40:b1:3a:da:43:84:ed:de:65:6f:a9:31:39:
1c:f7:6d:93:5a:fd:62:f0:79:4f:fd:09:88:8b:fb:87:f3:9b:
c2:1f:10:24:14:b6:69:85:d1:1a:0d:8a:78:a5:81:16:58:d6:
e7:9f:45:e0:cc:bf:b5:0f:6c:b4:b6:8c:7b:4c:cd:c2:24:fa:
76:e3:bf:bd:ca:7d:84:8a:f6:40:08:f9:e8:41:9d:d4:e3:e0:
e8:50:4e:b6:9e:f0:13:06:0a:9e:93:59:03:cd:b5:7e:83:a5:
39:b7:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:04:19 2026 by rpki-client