Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.mft
File: x8hottHTHvmutQVNLWR_LguetGU.mft (raw, json)
Hash identifier: 5tXTBKa2QboPslm+AkuhSa1kBY2K2755UR71rjiSOWw=
Subject key identifier: 85:36:B7:06:79:32:E9:43:2D:9A:45:FD:86:11:1C:3A:D6:0C:BC:FC
Authority key identifier: C7:C8:68:B6:D1:D3:1E:F9:AE:B5:05:4D:2D:64:7F:2E:0B:9E:B4:65
Certificate issuer: /CN=c7c868b6d1d31ef9aeb5054d2d647f2e0b9eb465
Certificate serial: 019D33ACAEC93E642341FDFADEE631A3EA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8hottHTHvmutQVNLWR_LguetGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.mft
Manifest number: C6
Signing time: Sat 28 Mar 2026 09:00:48 +0000
Manifest this update: Sat 28 Mar 2026 09:00:48 +0000
Manifest next update: Sun 29 Mar 2026 09:00:48 +0000
Files and hashes: 1: x8hottHTHvmutQVNLWR_LguetGU.crl (hash: GyLljBQcDOLABYAAOQD5qlvtSQGene+E0BfrlzvoVMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8hottHTHvmutQVNLWR_LguetGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:ae:c9:3e:64:23:41:fd:fa:de:e6:31:a3:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c868b6d1d31ef9aeb5054d2d647f2e0b9eb465
Validity
Not Before: Mar 28 09:00:48 2026 GMT
Not After : Mar 29 09:00:48 2026 GMT
Subject: CN=8536b7067932e9432d9a45fd86111c3ad60cbcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:bc:bf:3c:51:1c:ce:9d:39:e8:0d:15:ff:
62:28:44:ec:24:c1:65:b8:a0:2a:bd:e8:6c:5e:ac:
01:55:45:5e:4a:a1:8b:40:db:22:c9:1e:34:de:67:
94:ff:50:c8:02:55:0c:93:78:02:1f:18:7c:23:6e:
15:24:74:eb:1d:2d:fe:fa:1a:75:07:d9:af:1f:53:
1c:e4:bd:2d:c0:9f:53:e1:0f:d3:16:54:13:a5:4a:
11:76:06:dd:bb:3e:08:ae:58:df:a7:32:3b:40:50:
d0:9a:c3:4c:18:8c:63:17:35:c0:12:3b:ea:be:87:
c1:84:71:82:e8:70:9a:50:4c:b5:18:d4:e1:5d:37:
40:db:9d:a4:58:f2:16:04:62:fc:6f:1e:0a:c1:35:
e9:8e:75:f5:d1:9b:11:97:48:a2:da:3d:3a:22:a6:
57:ec:3d:a9:d4:92:58:6f:a8:05:d3:8c:d1:93:c9:
00:12:a6:a0:88:96:e2:00:f8:82:37:6f:0d:d7:3c:
ae:95:cc:ed:e3:f6:2a:40:94:61:34:7c:dd:5a:39:
06:8d:5e:8d:68:5a:6a:64:a2:38:d8:4b:bc:0f:89:
bd:3c:7e:94:9d:df:56:d5:34:8e:d5:56:40:e4:60:
87:27:4c:bf:90:16:08:1e:e2:2a:87:eb:59:d5:b9:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:B7:06:79:32:E9:43:2D:9A:45:FD:86:11:1C:3A:D6:0C:BC:FC
X509v3 Authority Key Identifier:
keyid:C7:C8:68:B6:D1:D3:1E:F9:AE:B5:05:4D:2D:64:7F:2E:0B:9E:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8hottHTHvmutQVNLWR_LguetGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a3c162-bee4-4e9a-8443-7bb21c102905/1/x8hottHTHvmutQVNLWR_LguetGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:af:34:1b:dc:1c:b0:87:e2:49:8d:3e:54:eb:a7:a1:df:bc:
6b:f8:f3:5d:ac:7d:67:da:b8:ee:70:82:7b:c4:30:f3:e5:11:
42:40:eb:85:e0:81:12:9b:cc:9d:38:05:35:47:cb:a8:c8:7d:
2a:0e:8f:e5:61:16:e7:6d:9e:28:18:86:5d:7c:50:31:e1:f1:
d6:07:c8:f2:a8:cd:92:1d:fa:57:1d:3d:46:93:8b:83:a5:87:
72:4c:c9:55:f8:75:74:52:5d:94:59:82:55:61:f5:bc:f5:04:
b4:19:7a:ef:cd:0a:04:c0:73:83:ee:16:60:c9:11:68:db:51:
a5:fc:67:fa:69:b5:cf:cc:4f:bc:b8:31:4f:72:f6:67:bd:9a:
7d:5b:ec:51:36:48:ef:8c:9d:b6:7c:1b:01:69:d4:b7:22:c4:
0d:3a:44:b7:6b:1b:29:ae:e1:e3:2f:4e:ef:6f:7b:91:89:b2:
dc:a6:21:80:2c:56:ae:9d:0a:9d:64:1e:1e:3c:50:a4:ab:4b:
78:eb:9b:40:e2:76:a4:00:22:da:1c:c9:45:97:90:7e:59:ae:
03:68:91:fc:db:ae:8c:1b:b3:ca:03:1e:e6:5e:31:81:11:be:
9d:84:31:30:0f:6d:07:a6:6e:dc:42:90:3b:df:51:de:5c:a5:
a5:39:ed:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrK7JPmQjQf363uYxo+p7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Yzg2OGI2ZDFkMzFlZjlhZWI1MDU0ZDJkNjQ3ZjJlMGI5
ZWI0NjUwHhcNMjYwMzI4MDkwMDQ4WhcNMjYwMzI5MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg4NTM2YjcwNjc5MzJlOTQzMmQ5YTQ1ZmQ4NjExMWMzYWQ2MGNiY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrK8vzxRHM6dOegNFf9iKETsJMFl
uKAqvehsXqwBVUVeSqGLQNsiyR403meU/1DIAlUMk3gCHxh8I24VJHTrHS3++hp1
B9mvH1Mc5L0twJ9T4Q/TFlQTpUoRdgbduz4IrljfpzI7QFDQmsNMGIxjFzXAEjvq
vofBhHGC6HCaUEy1GNThXTdA252kWPIWBGL8bx4KwTXpjnX10ZsRl0ii2j06IqZX
7D2p1JJYb6gF04zRk8kAEqagiJbiAPiCN28N1zyulczt4/YqQJRhNHzdWjkGjV6N
aFpqZKI42Eu8D4m9PH6Und9W1TSO1VZA5GCHJ0y/kBYIHuIqh+tZ1blW4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU2twZ5MulDLZpF/YYRHDrWDLz8MB8GA1UdIwQY
MBaAFMfIaLbR0x75rrUFTS1kfy4LnrRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhob3R0SFRIdm11dFFWTkxXUl9MZ3VldEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hM2MxNjItYmVlNC00ZTlhLTg0NDMt
N2JiMjFjMTAyOTA1LzEveDhob3R0SFRIdm11dFFWTkxXUl9MZ3VldEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hM2MxNjItYmVlNC00ZTlhLTg0NDMtN2JiMjFjMTAyOTA1
LzEveDhob3R0SFRIdm11dFFWTkxXUl9MZ3VldEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK80G9wc
sIfiSY0+VOunod+8a/jzXax9Z9q47nCCe8Qw8+URQkDrheCBEpvMnTgFNUfLqMh9
Kg6P5WEW522eKBiGXXxQMeHx1gfI8qjNkh36Vx09RpOLg6WHckzJVfh1dFJdlFmC
VWH1vPUEtBl6780KBMBzg+4WYMkRaNtRpfxn+mm1z8xPvLgxT3L2Z72afVvsUTZI
74ydtnwbAWnUtyLEDTpEt2sbKa7h4y9O7297kYmy3KYhgCxWrp0KnWQeHjxQpKtL
eOubQOJ2pAAi2hzJRZeQflmuA2iR/NuujBuzygMe5l4xgRG+nYQxMA9tB6Zu3EKQ
O99R3lylpTntWw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:07 2026 by rpki-client