Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
File: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft (raw, json)
Hash identifier: qTC3yq+DxEVRrgq56bosQeCXPdAdZdJC+ih5hLhIfTg=
Subject key identifier: 81:8B:2A:D1:57:6A:08:CC:3E:72:06:70:51:38:38:68:B5:84:B4:3A
Authority key identifier: F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
Certificate issuer: /CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Certificate serial: 019F90909A876BF07820AF6904E3D8E30C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:23 +0000
Manifest this update: Thu 23 Jul 2026 20:00:23 +0000
Manifest next update: Fri 24 Jul 2026 20:00:23 +0000
Files and hashes: 1: 8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl (hash: XYFEZ5PxHhs83wg1FyL7r00qRvcHk9AEMNS1+jA4VoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:9a:87:6b:f0:78:20:af:69:04:e3:d8:e3:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c7e6f61bf193c9f6b7b8ced20e1850a90d83db
Validity
Not Before: Jul 23 20:00:23 2026 GMT
Not After : Jul 24 20:00:23 2026 GMT
Subject: CN=818b2ad1576a08cc3e72067051383868b584b43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:28:87:b9:0c:8d:6e:8f:6c:22:45:d5:5b:
02:aa:07:ea:3b:0d:7e:d1:b4:ed:7b:23:6f:7d:bf:
ef:8e:c5:9b:cf:8c:89:cd:ba:34:b1:b9:44:d9:fa:
a2:e2:1f:8c:b5:ab:8b:65:2c:57:ce:3f:75:a2:05:
c4:ee:72:9b:f5:71:57:3f:4c:d5:44:bd:7b:12:53:
6a:48:23:cd:65:f0:f0:e7:88:cf:36:67:12:33:e6:
fb:f4:e1:6a:c9:9a:9c:27:b3:5d:b6:b5:ce:20:00:
90:b7:47:12:21:8e:b9:df:b9:97:e9:76:b7:ed:f4:
25:e5:07:ea:7a:66:10:06:ab:5e:6f:57:e3:a9:7e:
e5:32:a5:a6:b6:bc:c0:bf:d2:bb:98:89:24:92:5c:
91:b0:3b:7b:9b:62:b9:54:55:0b:7c:ef:46:0a:4e:
ee:6d:9d:53:59:c3:a8:92:e7:38:c1:74:8a:35:97:
ff:d9:01:46:37:56:ac:ac:f1:e3:a3:d2:00:0c:7e:
d7:7f:75:a5:9c:df:a2:81:d7:86:6e:5f:18:72:14:
ee:76:d3:ca:0d:4d:37:84:cc:50:c5:24:6d:6f:3e:
93:e7:22:59:b7:d9:57:1e:1c:f1:4d:25:12:b2:dc:
00:29:cb:1a:68:06:96:00:73:e7:1d:f7:b9:6b:0c:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8B:2A:D1:57:6A:08:CC:3E:72:06:70:51:38:38:68:B5:84:B4:3A
X509v3 Authority Key Identifier:
keyid:F1:C7:E6:F6:1B:F1:93:C9:F6:B7:B8:CE:D2:0E:18:50:A9:0D:83:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cfm9hvxk8n2t7jO0g4YUKkNg9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/af6421-299c-4fd5-8acb-271a923c9ece/1/8cfm9hvxk8n2t7jO0g4YUKkNg9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:d5:bd:c5:cb:ae:bd:1f:0c:15:87:c0:30:d2:eb:34:ed:
dc:f8:2f:75:49:61:a6:c9:06:2c:0f:2a:c3:34:78:b1:c2:76:
d1:65:e8:d7:9e:81:18:37:b3:31:64:04:43:99:5d:1a:0e:c3:
f1:ac:60:c1:89:83:93:f1:34:49:e9:2d:63:2e:18:7d:6a:05:
33:36:d9:17:3a:94:ed:bf:73:17:aa:b0:1b:6b:4f:0f:c9:4a:
7e:9f:b2:cb:a6:55:4f:65:53:f5:87:a7:0b:3d:0e:06:62:c6:
7a:ac:e1:a6:4c:49:24:b4:59:3f:d1:fd:05:52:34:56:ea:a4:
e7:ef:0d:32:c9:23:99:bc:18:7a:29:e9:67:8c:79:88:1b:28:
59:ae:e5:7b:50:f9:74:95:8d:b3:f7:0e:b6:91:5c:31:d2:50:
72:67:46:84:a0:45:50:f7:35:9c:fc:34:30:c3:c4:f8:8d:dd:
ba:9c:6d:e8:4a:7c:93:53:9a:94:fb:2a:81:96:78:3d:48:90:
d3:43:9f:a1:5d:fc:21:51:95:7a:06:9c:5c:52:0c:4c:e3:78:
3f:37:05:d7:b8:86:d8:8e:61:a4:a4:81:65:d0:02:87:da:a5:
d1:a9:22:01:29:a2:e7:bd:c9:ec:d1:76:7d:0a:f9:e8:32:57:
66:4d:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:13 2026 by rpki-client