Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft (raw, json)
Hash identifier: FoM+FddZFFTIV+RNP1WB+1MImgEgD0GMmUOrVP7Y5u4=
Subject key identifier: C9:B9:97:E0:99:76:EE:0F:C3:F5:71:25:FD:01:E6:9C:FA:FC:57:83
Authority key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
Certificate issuer: /CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Certificate serial: 019E1D9083466D69B443714EF38959A9CC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
Manifest number: 0109
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl (hash: tCuyTAymxARBv0BHp2NXmF/cgXGbjgbrCe3eoXCZyIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:83:46:6d:69:b4:43:71:4e:f3:89:59:a9:cc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=c9b997e09976ee0fc3f57125fd01e69cfafc5783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:57:93:e6:37:9e:2d:16:63:8a:30:51:c2:
4b:57:7e:d4:06:e8:98:61:0f:5f:28:97:e7:cd:b4:
a2:be:c7:2b:51:7a:15:21:f6:cd:c7:c7:18:b6:4f:
a8:b8:f4:ff:a7:01:49:33:31:34:23:d0:88:9b:90:
b2:70:e8:da:89:c8:7a:1b:5d:6c:d5:d3:89:07:d9:
2f:45:b1:77:92:7c:89:ef:ca:28:58:89:69:01:6f:
1e:72:ef:c7:56:b5:e5:09:85:dd:70:37:77:39:55:
fe:de:d1:7e:de:15:b3:15:41:91:4a:f9:b8:41:5a:
20:48:12:98:c5:67:75:d3:dd:55:4d:0e:fd:ef:dc:
bc:09:22:d6:f0:3c:68:48:be:65:7b:6e:92:af:7d:
97:17:71:78:81:de:7e:8a:93:fc:fb:19:e3:b1:c7:
96:d5:eb:05:2a:56:71:c4:c6:82:f6:0f:51:2a:d4:
07:93:7f:19:3f:9d:f5:10:7d:06:ba:b2:b2:34:57:
44:be:10:6b:3b:a9:e0:e1:fb:5f:e7:0a:8b:13:b2:
36:b4:d4:9e:6a:03:df:4d:2a:83:ad:5b:7b:5d:4e:
77:21:d5:1e:d8:1a:e6:bf:2e:6b:a1:17:8a:07:d8:
65:31:72:9c:18:f1:1e:93:63:50:f8:46:05:3f:77:
eb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B9:97:E0:99:76:EE:0F:C3:F5:71:25:FD:01:E6:9C:FA:FC:57:83
X509v3 Authority Key Identifier:
keyid:F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:31:d9:31:7e:96:a6:c3:1e:08:86:e0:3b:b5:15:8e:97:22:
62:21:3d:ab:d9:f4:5b:2b:51:74:a2:89:55:94:96:6a:63:5f:
44:bf:31:7b:9b:d3:0f:87:de:02:99:9f:7f:7e:6c:2b:09:90:
9a:c1:a2:3c:83:51:67:a7:63:9b:16:28:6b:0e:d7:c6:1c:b0:
be:aa:4d:c8:9e:a8:6b:14:f2:6a:87:bc:b7:bc:dc:22:36:60:
7d:26:07:d9:fb:8e:b5:c0:7e:3b:cd:5f:1a:c7:49:24:18:ab:
a1:fe:54:2f:ce:bc:ef:99:9a:82:3a:cc:e9:6b:56:d7:b5:db:
31:cf:a4:4b:c5:e4:81:ab:84:ee:d9:5a:3a:71:38:cb:ee:34:
20:9b:41:48:ac:4c:c3:f8:27:c3:2b:bc:87:62:21:bd:fe:b0:
93:84:77:71:f5:19:31:e8:77:dd:67:c5:53:6d:bb:90:7f:be:
fd:de:49:7a:9a:7b:f0:eb:c1:c2:cf:58:a2:00:f8:7c:4f:eb:
59:23:5e:46:6b:cd:32:b2:a5:f2:46:9e:ad:be:13:15:25:d2:
07:bf:0a:3c:00:3e:ab:f6:0b:cf:0f:06:ee:e8:a9:85:2c:f1:
0c:d5:1b:e1:c4:03:60:6d:61:9d:59:f6:db:ad:26:f8:53:7f:
31:73:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:50 2026 by rpki-client