Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: 2UP3ozU/Eli+ztEWKu+T2G/an5vqMxiXg/h42wWZnnM=
Subject key identifier: 5A:CC:20:41:3D:92:25:CA:7D:67:C1:21:E2:C0:22:CC:E3:C3:D1:93
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 019D2997074D8161CF8AF4AE53D3BEF91BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0EF4
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: 9O3UZBVFctiVgspgt3jFLe8OGjjlP3Y8f5i/qIq7gNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:07:4d:81:61:cf:8a:f4:ae:53:d3:be:f9:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=5acc20413d9225ca7d67c121e2c022cce3c3d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:65:a1:f9:38:b4:b0:3f:1e:6a:35:2e:70:
12:e8:63:57:3a:64:00:9e:a0:66:44:46:a3:b0:f1:
73:fb:1c:91:66:c6:0d:4a:4a:47:7b:55:0c:f7:5d:
16:94:f9:00:31:7a:3a:81:ab:b1:25:9c:5c:e9:1c:
52:23:f9:d3:81:1f:e8:78:1c:5d:d1:66:a1:4d:bf:
f8:62:c7:29:54:32:b5:3a:fe:d4:12:dc:01:97:ad:
f8:da:6c:ad:60:fc:fe:8c:63:20:20:4f:70:b7:07:
65:b3:51:b6:95:38:6e:c3:b0:c9:b8:43:be:e5:54:
8a:d1:bc:34:93:68:0c:d3:8b:e5:55:43:f9:19:e2:
71:f4:37:51:bf:dd:f3:20:f4:9c:15:ef:a0:11:0e:
43:3d:90:16:bd:6c:73:38:6c:0e:e5:fb:d7:6f:de:
c5:e1:8a:1e:cd:d0:30:44:c6:41:88:fd:8e:f9:5e:
62:8c:c2:e2:28:c0:fc:0f:49:59:3b:46:51:81:8d:
e7:e0:d4:43:b2:58:ac:40:30:90:20:ca:fc:6b:fa:
b0:f7:96:ac:5f:a0:08:97:e3:30:39:38:dd:db:a3:
99:36:d9:ef:5c:95:6b:c6:6f:ab:c5:4d:33:98:70:
08:64:04:6e:b3:f4:c1:77:ae:63:08:74:2d:3f:e2:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:20:41:3D:92:25:CA:7D:67:C1:21:E2:C0:22:CC:E3:C3:D1:93
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0f:84:ca:f1:9d:90:05:13:91:0b:3d:03:23:d0:89:85:54:
da:f5:19:22:40:78:67:bd:72:ea:b3:db:b9:7d:f2:4f:8b:f2:
3d:27:d3:a3:44:5a:3c:7d:2e:aa:f9:99:d5:74:e3:3c:85:66:
12:e3:52:e8:5b:fb:df:e6:4e:41:65:f2:8c:43:49:9b:9f:37:
e0:d9:40:b9:67:62:c3:43:bd:49:6e:ad:3c:6a:03:f1:61:48:
9a:9e:5e:35:0f:b2:e1:54:19:7b:e9:21:ce:56:35:39:86:c0:
ac:e0:4e:93:29:12:c2:a9:5e:0b:1b:36:d4:dc:eb:99:a8:53:
d2:54:d0:5a:45:12:25:38:e2:ca:fd:fa:5d:1f:1b:d0:cb:d8:
3f:37:f7:88:41:f2:cd:fe:4b:ca:4c:a4:79:0b:47:30:fb:11:
7b:b2:c1:3c:d8:72:84:d8:dd:ba:96:40:e7:f5:86:75:7d:54:
d6:45:c8:78:96:c7:4e:2f:d4:3c:52:f5:a3:01:e0:d9:70:e2:
3c:31:be:f0:31:f7:18:9b:e2:c2:a1:44:ca:71:f0:43:3e:b6:
c0:7b:3c:a6:7c:a4:94:7a:a9:17:53:47:15:5a:cf:c2:82:f2:
40:2a:35:20:b9:11:e2:d1:79:57:e8:42:a0:ea:46:7b:60:56:
a6:14:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:30 2026 by rpki-client