Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: OGf7P2OVep8y8g4tPwq1WIzR3qm5qnRpdD73okvcFF0=
Subject key identifier: 10:C2:3E:E3:3D:15:58:F2:C6:D2:11:0F:80:6D:87:3A:7E:6A:84:93
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019D270411187700A0BC1E90390FD5C401E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: QAwXQrJrSF06ZL5THe1hjUZY2C0xL4r1rY+93AOBghk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:11:18:77:00:a0:bc:1e:90:39:0f:d5:c4:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=10c23ee33d1558f2c6d2110f806d873a7e6a8493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:99:3f:ae:d4:0c:7f:d6:d5:2f:df:25:63:
65:c4:ad:ba:83:9a:35:bc:1b:ad:f9:8d:37:7b:eb:
a2:dd:91:b2:43:ec:36:8f:a0:3c:b4:8d:f9:79:4c:
db:06:24:bd:1e:92:73:3e:be:e7:04:54:26:80:0b:
58:c2:7e:60:fc:2b:61:f6:73:a7:06:57:e4:a3:21:
03:c9:bc:4e:45:fd:e7:17:90:52:3d:91:9f:4c:40:
3a:97:5e:a1:93:0d:08:39:73:ce:7c:c5:0e:66:2c:
b1:d5:38:04:50:22:44:65:f4:09:99:ff:5e:3d:39:
7e:c8:db:1d:84:17:f4:b1:87:af:28:04:d1:f6:e9:
d7:e9:56:68:ff:85:47:9d:1d:34:9a:fb:af:7f:5c:
ff:77:1c:d3:6c:ee:f6:b5:ea:72:58:e2:16:91:1c:
cf:20:e7:a2:c3:db:c5:af:d4:0b:a5:07:1d:3b:b9:
d5:1c:71:9c:02:bc:c4:59:9d:e0:de:c8:ae:31:3a:
54:c1:89:b4:f7:5f:81:db:ae:e1:b1:90:d7:27:82:
2a:dd:65:9a:3b:05:be:41:24:af:3a:43:c5:a4:80:
a3:1e:28:10:1d:c2:7f:f2:52:3c:c6:13:b8:9c:ad:
8a:13:74:33:d4:82:3a:31:c1:dd:63:0f:3a:14:b1:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C2:3E:E3:3D:15:58:F2:C6:D2:11:0F:80:6D:87:3A:7E:6A:84:93
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:b3:fd:06:c6:d3:f9:23:60:a4:2e:7b:ab:b0:4a:d3:90:
cb:5a:19:9f:09:43:de:f7:bb:f6:85:65:19:e4:50:0d:df:6c:
34:0e:c6:1f:66:86:5f:a0:5c:e4:ee:d1:4b:0d:fe:00:0c:58:
0e:e5:51:69:30:02:7a:27:8d:a1:a2:3f:df:fb:d6:51:57:b5:
21:13:68:2f:30:5f:b0:c0:65:9e:4b:3f:1b:8d:b4:fd:55:49:
0e:a1:0d:95:f6:2c:78:59:a8:b9:01:f9:64:7a:59:cf:68:d4:
ad:7f:e0:79:35:87:cf:ed:9b:9a:f0:08:18:d4:42:14:23:15:
7b:7c:c3:8b:d1:a9:d6:29:11:76:8f:9d:3d:fd:b4:55:cc:5d:
7e:02:a3:b7:53:f5:16:86:d2:cc:62:cd:ea:9c:d6:d8:85:2b:
d1:26:39:35:61:23:4e:12:93:6f:87:d3:eb:12:e4:08:b3:97:
8c:fa:7f:06:16:13:e8:98:1b:7d:04:6d:27:59:26:7d:0a:a5:
2f:a9:21:a5:a0:a3:90:d1:65:8c:f2:2d:07:2d:3c:b0:0b:df:
ff:2b:b0:7f:4e:d9:11:83:4b:04:a3:6a:65:fd:91:c9:9d:72:
ad:bb:0b:45:55:5f:c1:40:f6:6e:7f:c7:79:4a:cd:83:54:12:
27:cd:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:29 2026 by rpki-client