Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: kcTG8CNi315u8PeL+gZfy3vr3IKFospJk8NIX3bE38I=
Subject key identifier: 67:67:4D:C0:73:C9:C4:CE:AA:ED:3A:68:3D:B1:54:7E:07:E8:EC:F4
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019E1C46F24912ED83708349EA0A7BD1A451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 13:01:12 +0000
Manifest this update: Tue 12 May 2026 13:01:12 +0000
Manifest next update: Wed 13 May 2026 13:01:12 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: YzhBeMSPGGy36cZZWvaIrzXZgcB8z7pFHpJshq1NucU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:f2:49:12:ed:83:70:83:49:ea:0a:7b:d1:a4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: May 12 13:01:12 2026 GMT
Not After : May 13 13:01:12 2026 GMT
Subject: CN=67674dc073c9c4ceaaed3a683db1547e07e8ecf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:e9:58:d4:e8:a8:1a:b7:82:9d:a5:7e:94:
c8:d4:89:cc:ee:72:91:1b:17:5e:58:66:5e:61:c2:
50:0b:41:91:ad:a7:a2:6b:6a:41:38:cc:d5:5d:89:
90:40:e4:7b:61:68:8d:f3:d0:da:35:40:d4:02:29:
f9:a4:3d:8e:1d:7a:d2:c8:51:f3:b6:84:0c:ec:0c:
6e:64:53:28:20:99:fd:09:fe:ea:f2:d0:46:ea:e9:
97:e8:ba:9e:bf:cb:01:50:bf:15:b3:2e:0b:1f:c6:
44:39:6b:bf:62:5d:3c:5e:5a:95:48:da:e2:cd:2b:
d5:e8:8c:ed:62:d3:4f:cf:81:eb:07:32:83:eb:9c:
8c:b2:f8:7d:99:9f:c5:08:5e:fb:4e:be:4f:6a:a7:
ba:d5:da:30:b9:fb:6c:37:cc:fa:25:79:23:6e:f8:
5d:ac:09:3b:c5:3a:b1:df:d8:93:f0:f3:37:54:d4:
a0:7b:86:f5:11:19:2f:d1:f6:db:99:a1:77:a6:cb:
f7:2e:82:c8:85:1c:49:70:58:6e:a4:26:f1:eb:8d:
31:7f:d9:b9:13:4d:10:79:f2:f1:35:99:24:11:82:
25:20:d7:cf:1d:ad:9d:5d:4e:9d:d8:12:63:54:53:
8b:26:a9:92:73:ae:35:1e:7e:42:f2:1e:39:e0:9c:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:4D:C0:73:C9:C4:CE:AA:ED:3A:68:3D:B1:54:7E:07:E8:EC:F4
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:31:d9:fb:4a:a4:5d:48:1d:4e:ef:2e:9d:39:3e:f3:0c:
ac:ee:9c:bc:7b:e1:2d:f2:72:78:da:7a:4e:40:97:13:0d:05:
9d:a3:93:4e:eb:9d:1c:71:24:96:ff:12:c3:33:3f:9d:58:3a:
7d:60:59:e5:c6:b0:26:63:74:e6:2b:0f:6f:da:59:33:fe:6f:
46:24:eb:16:33:80:6c:97:c4:ba:ea:b9:10:78:70:70:f0:54:
58:53:28:e5:65:cb:72:c7:4d:a9:66:28:84:85:3c:fc:25:21:
65:3e:2d:74:b5:9a:b4:c1:e1:03:1c:69:b2:fb:c5:d3:29:3f:
3a:f4:75:6a:4a:e2:86:b4:fd:79:b5:0b:8f:14:d8:5b:2e:ba:
4c:c9:32:99:04:01:75:e1:2a:df:56:96:bc:f3:a6:2a:f8:bd:
ef:67:7b:df:ef:55:74:d4:fc:ab:23:c3:6e:fd:07:b6:49:3c:
4d:62:42:3a:eb:b5:a3:bb:0d:fd:b6:ee:be:bd:3c:0d:ba:9f:
2b:32:35:16:2f:44:55:c2:1d:ca:e9:d1:51:55:28:cf:6b:d4:
56:99:d4:b0:c0:45:1d:8f:78:0b:8a:41:23:fc:ab:1c:e3:e8:
5e:f7:8a:d0:2c:a9:80:a3:5c:04:61:d6:fb:81:97:39:45:1d:
45:2b:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:17 2026 by rpki-client