Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: nzg8tkVeicEVJZErsLd82i0Mz4oFwi0eGcwdkU0NDDY=
Subject key identifier: 62:E9:57:78:C8:F8:8A:92:A5:B4:8E:F9:4D:9B:0D:BA:50:8F:82:CC
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 019E1D901C484BD9AAD26258C4C1F7E2300A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 03A2
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: IonLNpLVaXFNEiJLrVfmpO6jjX49m6J4CHrJpmvC3GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1c:48:4b:d9:aa:d2:62:58:c4:c1:f7:e2:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=62e95778c8f88a92a5b48ef94d9b0dba508f82cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:82:5f:d0:ab:fb:68:87:7a:a4:3f:16:df:
0e:c3:d7:d4:12:d1:e8:a7:a1:59:38:75:4b:86:c4:
30:28:10:aa:1a:a6:2f:bf:69:16:6b:f1:b1:30:ee:
8e:e3:77:0e:0d:c6:9a:b4:e1:33:81:6a:d6:87:f0:
ed:c4:a1:4e:12:8b:e3:0b:fd:0e:b8:e8:95:3c:89:
9c:e8:88:78:f8:9b:86:0d:7e:e1:9b:50:32:6c:a1:
80:4f:a8:a1:17:b1:a0:da:aa:21:6c:f7:c4:a3:ba:
3c:4f:08:8b:09:86:98:23:13:7e:7a:25:d6:69:84:
7c:f2:9a:54:08:23:ce:bd:38:20:21:c8:7a:ae:97:
53:d8:fa:bb:7d:55:27:de:fd:66:4b:33:8c:e1:c2:
c6:e5:82:a1:c5:3d:75:16:71:3f:2c:f8:a5:e6:e6:
a5:56:e5:26:31:3a:a6:52:c9:09:a6:a5:4b:0d:e5:
b1:5d:b9:e3:53:81:ba:a4:a8:7a:8c:51:1d:6b:a2:
1c:69:da:83:45:25:60:c4:a6:22:e7:67:4e:66:37:
d6:30:bb:2a:8f:02:f8:13:11:5b:0d:1d:59:42:09:
31:5c:55:74:cf:46:d2:aa:20:42:53:0a:e2:48:c5:
fc:2e:72:fb:25:b7:41:f0:46:7c:d0:e0:6a:1b:75:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E9:57:78:C8:F8:8A:92:A5:B4:8E:F9:4D:9B:0D:BA:50:8F:82:CC
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8d:bf:c9:a8:dc:78:3b:86:16:34:df:41:5a:e9:06:c5:7b:
39:e2:71:d1:6e:c0:1a:fd:7e:4f:36:90:68:93:67:44:f1:31:
45:7d:3d:8e:30:6d:bd:3c:f1:63:52:b6:63:23:13:e9:59:5a:
30:3f:f9:a4:4a:d9:e7:23:2f:1f:a2:05:18:d5:41:c6:62:42:
5b:58:81:10:03:a5:99:e5:4e:60:2e:cc:bd:6e:38:33:e0:86:
4b:c5:d3:82:c6:cb:76:da:cc:0b:1e:0c:a4:47:8b:f9:10:0d:
02:07:d8:f0:11:70:7f:37:0b:99:8f:94:d9:b1:2a:75:02:cc:
d4:f6:32:6f:bf:00:3c:43:9d:39:3e:8d:19:cf:93:79:6b:3f:
d2:c7:eb:65:d2:fb:b9:da:97:b8:4d:e2:73:eb:c6:df:fd:20:
5c:a8:a0:e2:9c:f9:09:15:6f:7d:e9:7f:74:11:de:e6:fc:5b:
f2:f4:bb:fb:d7:93:95:87:bd:0e:9d:1d:0a:30:f4:ba:e0:d3:
7f:ad:ba:34:70:0a:af:dd:7c:d6:e8:c2:66:fd:ae:18:4e:02:
0f:eb:91:03:3c:df:37:98:0d:94:d0:e8:ad:b8:1d:bd:35:9a:
3a:57:79:93:93:af:8a:a5:b6:83:a7:6f:2c:c0:e9:71:15:1e:
7f:bf:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:04 2026 by rpki-client