Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: +2NcetuopLeSclyE/BrEKUW17FLj4vcOc70ISESJKI8=
Subject key identifier: 16:3F:FB:30:C2:07:59:81:B4:B6:72:F1:9A:50:67:7F:43:37:AC:30
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019D270453FFE6CF680D284D925C070E40E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0E5C
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: obpHGvwhjcZl5XRbxJovCJEJbNtnkiIDW8paFtnKTFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:53:ff:e6:cf:68:0d:28:4d:92:5c:07:0e:40:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=163ffb30c2075981b4b672f19a50677f4337ac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:af:ad:91:26:c8:b1:d5:f2:5c:24:9e:25:7c:
2a:7c:2e:b9:32:78:4a:5d:3d:bb:03:c4:61:8b:fc:
33:60:e1:f5:bf:3c:e4:6d:6b:af:1c:c1:ed:f4:2f:
f9:ec:11:01:c9:08:08:5b:29:96:f4:01:2f:a2:0a:
af:4b:7f:7a:72:ac:69:39:d1:a6:b8:7e:bc:ab:16:
63:7b:ee:21:83:f0:40:64:71:a6:2d:7f:9c:88:96:
9c:a7:76:bb:aa:b0:43:e0:a8:0c:da:79:a0:9f:5e:
37:c9:58:08:c5:6c:67:7b:1e:a1:78:c9:6a:25:26:
65:e8:0a:39:b5:5a:67:3a:b5:e2:79:5d:66:3c:25:
be:f0:65:48:31:91:2c:ab:cf:8b:97:0d:8f:bc:f0:
d3:40:e8:1e:90:85:87:14:95:01:66:ac:c1:e3:5b:
31:0f:ec:31:cd:04:65:c6:2c:17:f8:95:7e:5c:44:
b4:9a:55:29:30:4c:5a:32:83:41:9f:3a:b6:ff:39:
cd:7c:74:86:f4:1e:54:4a:4c:eb:0e:e2:c0:03:2c:
df:bf:63:b8:27:2e:86:7b:a5:db:6d:a3:64:fc:fb:
c6:1a:8b:46:a0:c6:0f:90:b8:ab:ee:ad:88:a4:7d:
c8:93:70:20:67:40:22:da:25:ef:45:c8:53:e9:16:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3F:FB:30:C2:07:59:81:B4:B6:72:F1:9A:50:67:7F:43:37:AC:30
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:93:de:af:82:a8:8e:fb:68:d6:c6:f4:2b:bd:2a:24:b2:ec:
a9:16:5a:72:75:bb:ba:a9:79:d7:13:e2:36:9c:f6:eb:fb:e6:
ee:a5:fc:1c:c9:b0:78:1b:29:8c:0c:59:5d:ed:60:46:7c:6a:
59:76:63:6f:b6:ed:ce:8d:e9:1c:99:a4:67:ed:b2:08:2b:85:
bb:60:50:70:50:16:50:08:53:1e:23:da:e8:81:c2:75:ef:1e:
5f:c4:dd:57:68:be:f7:ef:ad:e7:68:37:f5:0a:52:d3:68:96:
39:ee:bb:96:f7:d6:f3:29:90:d0:e6:58:03:eb:7b:5a:37:90:
27:6a:f9:49:ac:a8:b7:79:29:f2:6d:5c:37:13:78:1d:51:ae:
54:b3:ca:35:18:2f:d6:a2:d0:b9:4b:c0:5c:1e:58:19:25:02:
ad:24:b1:1e:88:bc:7e:10:09:eb:7c:c4:d2:0f:e2:f4:18:24:
65:cb:fc:80:36:8f:29:ed:04:49:a2:28:8d:43:28:b3:a7:9e:
16:71:6d:bb:2c:3c:79:aa:ff:65:e3:42:7a:57:43:a1:d4:e7:
92:26:4f:79:68:03:cf:b1:70:4d:14:7f:fc:7c:63:d5:81:8f:
ac:6c:43:6b:3c:23:cf:56:d1:bf:1a:30:19:87:b0:df:b1:5a:
63:bf:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:39 2026 by rpki-client