Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: rUTH5qZRkD0U28SDNVYerPBmDeIWIgy7j2WLG7Gfplk=
Subject key identifier: 56:3C:1E:5C:25:8C:0E:58:D3:1F:83:A0:73:A5:53:70:34:34:7A:32
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019D2997997F28621DE7ECC60D7F42D3C327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0506
Signing time: Thu 26 Mar 2026 10:01:34 +0000
Manifest this update: Thu 26 Mar 2026 10:01:34 +0000
Manifest next update: Fri 27 Mar 2026 10:01:34 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: fBhPLTJHGMiaYpTg8JQXie4GyEWgjSjGjVOOCYNAtsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:99:7f:28:62:1d:e7:ec:c6:0d:7f:42:d3:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Mar 26 10:01:34 2026 GMT
Not After : Mar 27 10:01:34 2026 GMT
Subject: CN=563c1e5c258c0e58d31f83a073a5537034347a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:0e:7e:5c:0f:9f:a7:ec:32:7e:bc:21:b4:
9c:1c:bc:fb:9f:09:d8:e3:d8:ac:59:2a:90:1c:95:
49:6f:4c:6e:e1:5e:90:41:2f:2a:c5:5e:d6:f1:c1:
93:76:aa:68:1a:32:fa:dd:2e:3a:bf:a7:7e:d7:8d:
58:f8:f7:06:ce:29:44:29:c3:be:c5:5d:9f:b9:0e:
66:ff:5a:a2:f6:b2:3a:d5:44:53:20:37:f3:1c:52:
96:6b:46:d0:f9:87:62:6a:f5:42:3a:eb:e1:e0:c1:
5f:a1:d3:bc:7c:f2:2b:de:12:ba:c2:a5:b3:40:76:
f1:3e:00:98:28:de:a9:9c:a1:45:04:60:41:d0:6d:
24:39:c0:2e:2f:f3:38:be:3a:23:99:f1:7d:2a:96:
48:2d:47:74:0e:01:07:8a:ed:00:d1:85:43:ac:fa:
31:09:21:14:a0:f3:ae:0d:c1:e4:8c:94:b9:c9:54:
06:42:f7:b0:cf:a4:23:8e:fe:eb:b4:b5:35:e9:a3:
c7:32:fb:6f:33:9f:e0:2f:cc:1c:72:e2:52:dd:ca:
a5:ba:9d:89:4e:21:d0:46:ef:0f:78:06:17:ed:e4:
0a:3e:ed:c6:d3:6e:c8:83:c5:bb:93:fb:05:a5:54:
68:a1:16:19:44:6c:b3:2e:1c:21:96:4f:9e:c1:82:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3C:1E:5C:25:8C:0E:58:D3:1F:83:A0:73:A5:53:70:34:34:7A:32
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:d6:82:74:b6:83:9e:6e:7c:62:e3:6f:d0:b7:5d:52:d6:
c9:9d:6a:f7:de:87:46:ac:09:c0:6a:2c:ce:31:65:7d:8e:7c:
f3:72:6c:67:45:7e:af:19:d0:2e:39:0c:24:c8:f1:e2:82:38:
c8:4c:0e:74:50:d7:a5:92:c9:8c:69:89:5e:94:f2:f3:af:7b:
9a:96:5a:4e:7e:35:b1:98:f8:e8:cc:75:91:fe:45:07:4a:20:
da:82:61:4c:bb:21:21:52:ea:69:57:dc:f7:86:36:25:66:36:
2a:fb:42:2e:d4:5a:db:09:30:c0:e2:1d:15:f3:44:9f:d3:fa:
04:6e:9b:ba:75:73:8a:b4:d1:d4:7a:17:2a:6c:75:1f:6f:c3:
c3:ab:d5:8f:a1:c6:71:58:03:e7:af:a6:40:48:9a:56:f6:05:
6f:98:e0:92:9c:db:b8:cd:39:b4:2d:ca:5a:7d:69:b8:45:e5:
25:05:55:56:62:e7:07:18:24:8d:28:6c:ca:d9:38:af:82:c4:
40:5b:2b:d8:83:3d:3c:e8:60:ff:e0:c0:4e:73:1a:e8:26:e2:
88:da:01:64:23:72:80:3d:3d:99:31:f6:7c:96:1e:e5:f2:77:
66:6f:b4:ab:74:9c:7b:b0:71:3d:f4:1f:4d:05:28:72:7a:6f:
18:9a:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:07 2026 by rpki-client