Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: KVjh+B9qgInEldkuPp7g41OeiSmelaq4euWjzQOL6Pw=
Subject key identifier: 03:79:3D:99:D0:2F:35:F4:12:74:39:16:AE:C1:21:E5:14:4F:64:69
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 019D28F3260C3A5A469F9E01E101A21B83E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0E1B
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: GuTQtnvJRR0GRkgyyU6hWbLqqaM2IBEYmqkre3WX63A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:26:0c:3a:5a:46:9f:9e:01:e1:01:a2:1b:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=03793d99d02f35f412743916aec121e5144f6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:69:4e:73:74:12:28:8a:25:96:dd:15:83:
1a:d5:00:1c:5b:c5:c9:02:3b:6a:0b:95:a6:40:c7:
1c:7d:ce:58:4e:92:82:d5:15:bb:be:d6:15:0e:6a:
f3:69:0f:12:49:21:35:a6:42:5d:20:2e:7c:4e:0e:
94:05:95:08:10:88:5d:c8:53:d5:d9:b5:f7:49:6a:
b4:8f:a6:d2:01:b4:3e:a4:54:f7:81:42:b4:46:64:
70:73:fe:12:75:36:bd:79:73:dd:03:2b:b8:e5:3e:
77:fd:ef:df:5f:65:30:11:ac:10:28:b8:44:56:05:
83:5e:ba:8a:32:08:2c:9d:12:0a:89:68:c1:2f:36:
27:7a:21:59:d0:99:d1:ca:17:51:df:aa:98:2b:6f:
a7:78:88:8e:04:0c:62:70:be:ab:98:16:82:8f:5f:
44:c9:16:3a:80:82:74:9b:10:0b:3a:b6:df:fa:8e:
b7:15:48:f2:e5:a9:10:6f:a4:cf:2a:92:31:81:68:
a8:65:77:92:09:36:4c:03:f3:e1:7b:15:ab:d9:be:
c6:d1:4f:d0:56:47:a8:92:80:f7:61:de:30:83:ee:
29:6e:2d:67:1b:ed:15:3e:62:96:f9:f9:e4:aa:24:
55:02:56:16:44:8d:b4:ea:fa:4b:3a:6a:44:40:2f:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:3D:99:D0:2F:35:F4:12:74:39:16:AE:C1:21:E5:14:4F:64:69
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:ea:44:85:b1:39:10:d4:3e:54:a0:35:43:91:61:24:a7:
e0:6a:d4:54:52:c0:3a:5f:a6:bf:4d:bb:27:6e:20:b5:2c:f1:
c2:2a:7c:86:49:53:1d:d7:1a:3f:69:5c:19:0a:98:7a:d2:38:
38:43:88:d8:47:d6:54:ae:a4:1f:3e:51:c2:cb:b3:f9:c9:ee:
07:64:ee:cf:50:e0:bf:ff:2d:b9:1e:11:1f:c5:83:ea:b2:51:
03:9b:14:f9:a4:6e:98:03:95:06:47:71:02:11:b9:2f:02:82:
c1:3d:c1:99:ad:45:ab:85:34:1d:2b:bf:c7:80:dd:68:a4:9a:
48:66:22:97:c0:0b:19:40:16:28:da:19:6f:57:5b:9f:dc:ea:
2d:9a:9c:e1:aa:54:7c:9b:ac:0c:72:a1:c1:b5:2f:3f:c7:e9:
cd:a6:7a:af:82:f0:70:c9:07:ca:47:7b:8a:ab:a9:ed:10:53:
60:0d:01:39:c3:3b:4d:4d:16:7b:73:e9:76:78:77:e4:4b:8a:
bd:9b:58:34:81:ca:d2:c3:db:a9:85:db:d7:a1:2a:ad:21:3c:
b0:c1:8c:98:f9:53:17:cf:c0:b4:be:df:c6:b0:cb:76:93:13:
69:dd:89:be:7d:74:b7:f7:80:88:87:8f:0d:ad:bb:90:88:a6:
46:37:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:34:59 2026 by rpki-client