Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
File: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft (raw, json)
Hash identifier: djMp1HqKZxNGB3kIIMtR68uZcHW/9miG0pznJoRTXes=
Subject key identifier: 8E:F4:2E:20:C0:F6:40:18:A2:50:A7:85:41:E9:C8:3C:E7:4D:14:38
Authority key identifier: F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
Certificate issuer: /CN=f077386169b880c8cb4b36370d370b5e3decad8c
Certificate serial: 019F8EA294F13639733C4E818F26CEA82F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:47 +0000
Manifest this update: Thu 23 Jul 2026 11:00:47 +0000
Manifest next update: Fri 24 Jul 2026 11:00:47 +0000
Files and hashes: 1: 8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl (hash: bUbRJM7EwTnzLrZVPTzR8pa5UFPfENsgYi/3sz0sr9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:94:f1:36:39:73:3c:4e:81:8f:26:ce:a8:2f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f077386169b880c8cb4b36370d370b5e3decad8c
Validity
Not Before: Jul 23 11:00:47 2026 GMT
Not After : Jul 24 11:00:47 2026 GMT
Subject: CN=8ef42e20c0f64018a250a78541e9c83ce74d1438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:d3:b3:93:65:11:b7:94:39:68:b7:d7:08:
a4:51:33:ee:37:40:83:4d:7f:85:96:3f:46:8e:a2:
0c:c6:1e:c0:8a:76:82:9e:a1:e1:e7:5b:50:ab:57:
44:db:64:2d:58:54:1f:65:19:78:16:9d:3b:89:92:
82:2e:86:7f:43:a1:e7:3e:4f:f8:8f:01:ef:26:ce:
a7:5c:74:a8:fe:1e:4c:b7:fa:68:a7:89:31:19:df:
07:2e:ce:9c:ae:ac:79:35:b7:23:a6:1b:3a:f6:76:
2f:7f:75:5e:2c:08:0e:ce:6e:9f:56:3c:c1:57:65:
93:f6:62:d8:d5:d7:87:65:65:52:24:54:36:a5:7f:
57:63:90:9e:1e:5d:cd:a4:16:a8:55:77:47:3d:53:
ca:63:94:7c:7c:b3:57:3f:5b:88:a5:d2:70:77:50:
89:bb:d6:bb:50:00:43:cc:10:04:a6:f5:c0:85:4c:
92:04:a6:d1:ee:c1:aa:66:4b:c3:bd:a1:c9:f9:e3:
5c:9a:a8:5a:10:9a:21:32:0c:99:a3:27:e0:e4:b4:
79:2b:52:2e:0b:1b:53:56:63:1f:40:55:6d:05:8a:
37:a3:e8:47:18:7e:05:22:1b:fb:b0:cb:3b:33:8f:
eb:80:e7:42:e7:32:a9:88:2e:27:4d:f6:99:21:c6:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F4:2E:20:C0:F6:40:18:A2:50:A7:85:41:E9:C8:3C:E7:4D:14:38
X509v3 Authority Key Identifier:
keyid:F0:77:38:61:69:B8:80:C8:CB:4B:36:37:0D:37:0B:5E:3D:EC:AD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hc4YWm4gMjLSzY3DTcLXj3srYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/8Hc4YWm4gMjLSzY3DTcLXj3srYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:74:39:77:16:cf:d1:cf:9f:da:8c:d0:7c:46:7f:65:61:
52:30:84:d6:ef:28:ab:78:08:56:90:fd:f4:53:0e:3d:64:ad:
55:5b:16:cd:2b:e6:8f:e0:7e:25:42:5b:4a:4a:72:d8:b5:5f:
93:24:3f:31:26:a8:51:cf:c1:47:ff:7a:1f:dc:7e:7f:6e:8a:
f6:b9:ea:37:f3:ff:a2:8f:22:3d:98:18:b3:a3:cc:3b:74:52:
a5:65:cc:6a:43:82:fa:a8:f7:6b:0a:5f:f1:34:d3:fe:69:74:
d0:e3:88:58:ab:e5:55:61:9a:2b:82:dd:bc:fe:f3:a0:24:41:
38:60:1d:a4:8b:1b:86:26:ef:55:e4:65:9c:4f:7c:3d:e1:8a:
34:4d:73:0d:d3:c3:46:83:c9:4c:0c:9a:78:09:78:ef:b2:82:
46:60:f6:8b:7d:b9:b1:81:55:37:d0:2a:e8:58:fa:fb:2a:47:
e3:7c:44:18:f2:9b:63:67:1a:9a:59:1a:c4:6c:0e:16:fe:43:
2e:9e:a2:da:cb:e2:70:c6:5c:b0:c8:aa:68:8c:6d:91:74:8f:
00:e2:ec:1c:9a:ee:15:b7:94:ee:c4:c6:b7:16:47:6a:ac:44:
77:b2:7f:63:3b:ef:d9:ba:30:88:5a:7a:83:5d:b4:60:37:f7:
b3:d7:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:24 2026 by rpki-client