Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier: UTK8f+3EDwO8e5l99247fCWN0zkYZh52uEdsa27r30s=
Subject key identifier: 7E:8F:F1:F8:8C:84:E1:A9:11:B0:03:27:5B:9E:E2:0D:7D:93:1F:62
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer: /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial: 019D25842E04975C5E2E09675AC9F039B480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number: 08B1
Signing time: Wed 25 Mar 2026 15:01:52 +0000
Manifest this update: Wed 25 Mar 2026 15:01:52 +0000
Manifest next update: Thu 26 Mar 2026 15:01:52 +0000
Files and hashes: 1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: /vorwVxr6S/lhIcbNvVoJ4TAfrohBMtSd7p0BJHVtdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:2e:04:97:5c:5e:2e:09:67:5a:c9:f0:39:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Validity
Not Before: Mar 25 15:01:52 2026 GMT
Not After : Mar 26 15:01:52 2026 GMT
Subject: CN=7e8ff1f88c84e1a911b003275b9ee20d7d931f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:7f:c5:6e:21:85:e5:b2:68:a4:ba:fa:b7:
17:f3:51:a3:8b:72:73:ca:2e:bd:36:2b:b2:70:0c:
8f:fd:73:c7:5f:a3:30:a3:14:7e:f6:61:c4:15:70:
cf:dc:03:d8:10:d3:eb:32:ee:2b:9e:9c:44:86:7e:
27:8f:d1:60:40:b7:f0:c5:96:10:d7:d6:53:02:49:
ba:49:be:59:84:e6:22:a4:ad:80:52:f2:05:24:fa:
4b:c0:c2:c3:ae:58:3f:58:27:1c:4a:e4:bf:41:bc:
7e:93:74:d3:21:52:9f:08:4a:74:f7:5b:5c:9d:ac:
1e:4c:6f:23:61:23:5d:e8:42:57:d1:e6:d5:19:93:
c3:e8:2b:6a:96:c2:4f:36:a3:36:99:9a:b2:b5:1a:
4f:8c:43:62:30:38:df:46:64:e3:e0:9a:52:86:8b:
58:2b:5a:9d:be:ee:f2:12:d0:46:62:1d:88:3d:ce:
df:18:a3:ab:79:64:84:d4:61:b2:52:74:f5:94:06:
15:67:21:6a:af:c9:8e:e6:41:42:5f:d4:c3:a8:70:
11:04:60:cc:95:76:19:97:ab:c9:f6:18:4a:e0:d5:
f2:67:01:31:a8:aa:56:c1:42:f6:35:07:4f:f9:0e:
fb:1e:b4:db:9a:01:96:dd:e8:1b:c7:60:bf:e6:a8:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:F1:F8:8C:84:E1:A9:11:B0:03:27:5B:9E:E2:0D:7D:93:1F:62
X509v3 Authority Key Identifier:
keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:06:b7:3f:8b:bc:35:41:60:91:3c:ed:64:b4:0c:c9:0d:dc:
4f:a4:4d:67:27:3d:c0:69:cc:87:f3:e0:a7:7f:0e:7c:0d:9b:
71:54:4d:16:f5:f0:06:62:28:e9:a2:e0:a5:98:f4:b1:38:6c:
00:70:d9:e9:57:6b:92:23:9a:8a:f7:38:73:3d:4c:25:70:84:
1b:f5:02:cb:2b:bc:c3:fa:ef:63:33:05:ff:4f:a6:a6:2c:c3:
e1:7a:fc:80:14:44:bb:6c:ad:94:0e:dc:25:b8:aa:4b:bb:f2:
75:67:b2:d7:4b:df:28:de:ac:c9:50:f0:8d:92:ce:c9:9f:69:
57:1b:9d:08:6e:f4:30:a0:5b:dd:c2:e4:58:5d:1c:ee:eb:92:
c0:cf:d8:3b:0a:4f:11:a3:4f:a2:a8:8f:14:04:6a:df:20:39:
78:3d:e9:43:47:38:4e:a1:ad:37:67:e0:c9:da:34:30:6d:cd:
ef:74:10:71:d7:30:5e:85:90:2c:59:b0:30:fa:2f:87:dc:b2:
9f:46:d7:9e:df:cb:96:af:b5:80:aa:70:b9:ab:48:e8:b7:93:
4b:04:d3:bc:b3:ce:fa:60:b6:3e:79:34:d5:e2:da:f1:75:fb:
8a:89:19:53:a1:63:d8:e7:15:a9:d4:8b:94:13:60:4e:32:ac:
e7:e3:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:48 2026 by rpki-client