Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: F/XzWp6lNkQLY+wu0e/Qk8d258wuGQ/+5GHxSjThLIE=
Subject key identifier: E4:5B:DE:1C:A6:91:3C:9D:99:AA:89:09:87:69:45:7E:FE:31:64:16
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 019E1BD8E687E533D23A527E2C3A06FC5AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: BE
Signing time: Tue 12 May 2026 11:01:00 +0000
Manifest this update: Tue 12 May 2026 11:01:00 +0000
Manifest next update: Wed 13 May 2026 11:01:00 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: IEqy37QLcKrcwUiiac5bys5nOWfYvCr7oVanPcWasnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:e6:87:e5:33:d2:3a:52:7e:2c:3a:06:fc:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: May 12 11:01:00 2026 GMT
Not After : May 13 11:01:00 2026 GMT
Subject: CN=e45bde1ca6913c9d99aa89098769457efe316416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:0d:50:37:9d:4c:c3:79:25:4f:a6:1a:d2:
2c:e0:e4:ea:d1:fb:80:13:d5:4b:8d:62:dc:46:82:
45:2e:c0:67:7e:2f:0c:05:90:54:e9:11:86:9d:ae:
11:5a:69:60:34:25:ef:a8:7d:0d:71:8c:e7:f8:19:
93:e0:cb:de:e4:ae:99:11:9e:ff:3d:54:15:bf:a9:
2a:1d:e9:74:da:53:a4:47:77:32:7f:1f:56:99:e7:
2d:1c:2b:cc:08:67:2a:61:b9:e4:dd:ae:38:c9:16:
6c:60:be:7a:5e:cc:e5:c4:21:6a:b9:5a:96:d5:98:
4f:d5:13:65:8e:5b:2b:0b:45:bf:bf:d7:30:f4:8a:
c8:56:39:e1:5f:27:55:fb:17:cd:d4:ec:47:a1:22:
fe:2c:d4:f6:59:ff:37:05:c5:6f:fe:1a:bf:55:b5:
8c:c8:b3:6b:65:88:47:9b:dc:83:86:61:d1:9b:11:
29:1d:f4:63:e0:99:5a:aa:b2:d2:39:74:04:93:95:
99:e2:89:0c:51:69:a4:e5:59:6c:33:19:7b:9d:0c:
01:b8:02:57:cb:54:b7:e1:d4:d7:32:e7:9c:9b:d0:
23:88:56:62:8d:e1:b5:1d:5b:ed:9e:31:00:ca:66:
ea:dd:aa:3e:2c:fe:01:33:af:c3:32:5d:96:30:65:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5B:DE:1C:A6:91:3C:9D:99:AA:89:09:87:69:45:7E:FE:31:64:16
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bd:d3:82:63:1d:c2:76:b6:6a:0a:c4:90:58:aa:58:36:8d:
b5:be:90:df:0a:3b:17:4e:be:de:fb:85:f5:5c:97:2f:41:e1:
dc:1f:d7:b2:56:78:6c:f0:ac:f1:48:91:36:32:e0:09:e4:ff:
ba:e9:1b:16:76:4f:84:d7:10:a5:79:44:a2:81:c4:c9:c4:c5:
4e:72:6f:81:a2:da:88:5d:41:41:4e:01:dd:22:6a:3f:fa:d0:
54:fb:67:46:73:20:0a:1d:33:aa:0d:40:2b:88:6a:4b:be:ba:
b5:e6:54:7b:51:8d:da:dd:92:0d:b2:29:7d:4e:50:f5:b3:54:
50:b8:84:90:f2:10:fc:bc:2a:ac:9e:8e:8c:06:00:41:f1:8a:
04:5c:45:05:2b:39:6a:32:e9:13:46:91:be:63:62:b3:43:ef:
1a:dd:34:a5:9c:00:ea:49:5f:dd:6f:7b:d0:4a:b5:89:da:58:
33:58:5d:e2:74:03:92:1b:bb:ad:b9:59:8f:47:97:2b:12:df:
2a:ce:c2:79:97:86:36:b1:12:9a:4e:17:f8:ad:aa:12:03:fa:
68:43:67:6f:96:82:c8:9a:b5:65:44:70:e3:77:ba:e1:38:c1:
c6:f3:e0:d8:68:e5:c2:b9:65:ea:1c:c5:29:73:32:e9:37:21:
77:4f:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:37 2026 by rpki-client