Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
File: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft (raw, json)
Hash identifier: YMZRshUryGnngqX7QqJ6GAqt2vWVp4OLoQ/BlEm14SQ=
Subject key identifier: 8C:4C:81:35:85:03:AE:4E:EA:1E:49:4C:85:42:6F:30:CA:A9:3A:D1
Authority key identifier: F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
Certificate issuer: /CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Certificate serial: 019F9248C3CA56E87DC9879E6C5E73AB8BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 04:01:09 +0000
Manifest this update: Fri 24 Jul 2026 04:01:09 +0000
Manifest next update: Sat 25 Jul 2026 04:01:09 +0000
Files and hashes: 1: 8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl (hash: 8zE3pFQB1yrcjoC63H2YaV0Lj5lTdMUftTQ5flsmc9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c3:ca:56:e8:7d:c9:87:9e:6c:5e:73:ab:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18f59225370adaa3e93019f8c4df97b0d62fb54
Validity
Not Before: Jul 24 04:01:09 2026 GMT
Not After : Jul 25 04:01:09 2026 GMT
Subject: CN=8c4c81358503ae4eea1e494c85426f30caa93ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:f2:14:e7:16:f3:55:77:2f:a9:29:de:99:
ab:aa:0c:2d:48:15:f0:b5:a7:44:53:48:e5:ae:aa:
6b:58:ef:8f:af:ce:2b:b7:c1:74:72:2d:84:f5:7c:
7b:82:f8:fe:57:22:d3:f4:5e:a7:d0:14:61:10:57:
5b:6d:0d:20:86:96:f0:ea:79:b2:7f:fc:c2:4d:b4:
f5:0e:fb:ac:f3:4a:d5:b9:b0:ee:e1:02:fc:63:03:
68:9a:50:14:74:83:09:cd:80:9d:8d:ae:9c:00:a3:
ed:2a:00:53:46:42:39:88:6f:99:9e:c4:15:d7:09:
f0:36:f0:25:c6:6f:6f:9f:5b:1e:aa:08:d0:04:ca:
af:e6:2f:3a:2c:a0:91:c1:ec:5c:ff:7a:4a:d9:19:
e2:f1:b9:5b:ea:cb:52:90:7e:cd:0a:6b:97:fd:39:
f4:e6:de:72:16:7c:ac:34:c4:84:62:11:ea:73:62:
a1:17:a0:3f:aa:4f:f3:5f:33:c7:18:ab:4b:71:b2:
56:81:1f:6e:01:63:21:dd:63:41:dc:8f:36:dd:b6:
00:8c:f2:75:25:95:f5:b4:58:d4:8b:2e:1b:98:bf:
6e:3e:67:f4:da:12:65:0d:9b:1d:b2:54:43:67:7d:
bd:57:f5:0a:26:b1:fd:16:6c:64:c2:62:9e:05:1d:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4C:81:35:85:03:AE:4E:EA:1E:49:4C:85:42:6F:30:CA:A9:3A:D1
X509v3 Authority Key Identifier:
keyid:F1:8F:59:22:53:70:AD:AA:3E:93:01:9F:8C:4D:F9:7B:0D:62:FB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/8Y9ZIlNwrao-kwGfjE35ew1i-1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:ef:c4:ab:ee:d9:bb:7d:04:74:6e:ca:cc:83:44:5b:f1:
8f:26:36:ce:63:53:1a:ff:43:d9:81:95:a8:19:20:1b:c4:65:
64:e2:67:a2:98:38:fa:d9:5a:bd:0a:0d:e4:91:e0:fc:90:b4:
a0:e8:f7:02:c4:d5:b5:10:74:a2:c9:3d:06:ec:1a:96:42:6a:
ae:00:11:0a:20:2d:01:2d:1d:af:d3:1d:14:07:82:6d:7b:b2:
82:c7:86:6d:ea:dd:74:eb:91:b0:12:a4:b6:48:0a:d5:07:34:
1e:37:bf:7b:6a:29:a8:8f:dd:39:a7:57:14:19:54:b7:90:c7:
b7:33:a7:b8:f5:21:08:d0:7b:dd:c3:80:da:a7:aa:a6:65:90:
d3:7d:d5:d8:1a:8b:d6:99:ee:02:54:af:77:bf:de:ff:02:34:
f6:60:c3:ca:8f:eb:cb:4d:2f:77:1b:47:76:3b:76:5b:5b:6f:
0a:08:b9:1f:50:f9:ea:24:ce:e3:bb:68:0e:16:21:51:b7:7a:
09:b3:f5:38:55:bc:96:c3:c7:d8:3a:a6:b6:0c:e5:9d:ae:05:
46:eb:48:76:54:97:de:55:67:03:9f:4a:93:5f:63:d9:c9:04:
ba:ef:48:12:37:f5:03:0f:1a:b9:8e:0c:c4:17:ad:e3:05:b4:
1a:e7:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:15 2026 by rpki-client