Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft (raw, json)
Hash identifier: UVwyf6sY1akjG77kfL8xpkypAhvua9I9ggTqwbFexWw=
Subject key identifier: 57:BF:B7:43:05:08:1D:40:05:E8:55:CC:2F:48:D6:1D:37:A1:7D:F3
Authority key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
Certificate issuer: /CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Certificate serial: 019D265FDF88CFA912E29F3E8306561692AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
Manifest number: 89
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl (hash: 3QqwKKEnx4PqPgsHx8u4Xw/KXZ4am4HH4FAt7XP1m4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:df:88:cf:a9:12:e2:9f:3e:83:06:56:16:92:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=57bfb74305081d4005e855cc2f48d61d37a17df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:80:29:10:a5:0a:ba:be:f6:03:aa:8e:d8:
8e:94:c1:c6:cd:b2:54:44:2c:9e:3b:bf:89:8a:be:
dc:b0:5f:68:1f:14:f4:aa:5b:1d:24:f6:0d:84:43:
1e:bc:83:3c:47:07:62:bc:b9:6e:4d:62:6f:de:57:
60:e6:e3:ed:15:51:d5:75:f2:66:20:00:6f:33:14:
ad:49:0d:57:d9:90:1e:33:90:ca:19:94:ae:02:a7:
fa:f2:8c:29:f8:61:1e:69:3b:67:bf:66:e4:05:a3:
45:3f:8d:25:eb:96:e4:d5:cd:c2:05:96:71:bd:00:
12:06:7b:c2:39:ac:4e:c1:45:d9:c0:62:73:77:7e:
8d:af:2b:36:bc:b7:0a:49:28:e7:be:c9:27:e0:d7:
0b:91:cb:00:57:f0:89:cf:13:fd:3c:27:b9:15:8c:
6c:5d:3b:4c:91:55:0e:5f:12:71:94:c7:f4:27:ad:
02:9d:ef:ad:c1:fa:4b:cd:83:e1:24:de:6f:b2:2d:
97:8c:2d:f9:5f:48:9e:be:3e:8b:6c:9c:94:ff:f4:
ae:33:e6:7a:96:a6:8a:cd:d9:81:56:3f:66:a6:49:
bf:0c:52:ba:47:e9:45:30:ce:60:0e:b3:7d:72:b1:
d9:53:88:ff:0f:c1:e3:96:cf:fc:95:99:00:84:cc:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:B7:43:05:08:1D:40:05:E8:55:CC:2F:48:D6:1D:37:A1:7D:F3
X509v3 Authority Key Identifier:
keyid:F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:54:d3:03:74:19:03:93:62:fc:04:69:36:73:9d:1d:d7:23:
20:a4:d9:4b:0b:0d:5c:00:11:78:88:94:ba:7a:1c:81:a8:11:
ac:42:95:63:8b:34:92:43:e2:57:4c:9b:80:d2:88:42:da:7b:
bf:2d:61:6f:09:c4:fb:8f:5f:1e:71:63:ca:65:35:cb:db:3b:
c5:91:c4:c7:c6:b7:9b:28:35:72:90:e4:c0:e5:5a:fb:e4:6c:
12:c2:96:07:7e:e5:ec:a4:2d:39:04:f2:9f:cc:88:e8:b6:e6:
c1:16:68:45:d8:f9:0a:4b:34:ba:34:a0:6b:72:08:f1:ba:84:
5f:bc:4c:a0:82:16:81:9b:50:09:d8:1e:59:b0:ae:38:cd:0a:
90:d8:35:73:41:04:3c:d0:67:30:64:f6:c4:c0:5b:3c:b3:74:
1e:a5:fc:92:a4:e9:68:0a:18:2a:b7:cb:85:66:84:8c:60:23:
05:43:b3:14:fb:2c:ed:79:02:78:82:83:d7:a5:0c:8d:e8:15:
a3:f3:52:f1:05:c8:92:3c:39:59:bd:d3:ed:80:8b:89:34:d8:
1a:c4:f9:e4:10:bf:c4:a1:93:4f:d3:aa:e0:04:86:7c:3f:25:
1c:6c:56:71:c9:ed:63:ec:c8:2d:dc:f8:b6:6d:49:c5:68:54:
25:a6:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:06 2026 by rpki-client