Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: t8jiyG8bbLfThsMDxoNxx2fBQen2mgCKW8OsciqPi3I=
Subject key identifier: 61:F7:A3:E5:E6:98:3C:C1:09:91:99:D8:8D:F2:BB:32:A7:85:C6:51
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 019D2A3C2D185D184CA8BF61B482E9463752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 0A9A
Signing time: Thu 26 Mar 2026 13:01:19 +0000
Manifest this update: Thu 26 Mar 2026 13:01:19 +0000
Manifest next update: Fri 27 Mar 2026 13:01:19 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: AZW9tIZd/MZg3n2cs6j2RbC6AU3r+Pi1NJtrO/onIkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2d:18:5d:18:4c:a8:bf:61:b4:82:e9:46:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Mar 26 13:01:19 2026 GMT
Not After : Mar 27 13:01:19 2026 GMT
Subject: CN=61f7a3e5e6983cc1099199d88df2bb32a785c651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:20:78:52:26:ba:2e:b4:a2:89:bd:a5:39:
d7:fa:4e:b3:f8:48:63:9b:93:88:c2:12:b8:4b:24:
de:b0:3c:df:6b:b8:24:60:6f:74:83:77:e1:b7:b7:
3a:15:d0:7e:3e:10:6e:3b:d0:1b:80:25:d2:76:11:
d9:6a:a6:70:1b:8f:39:53:7d:24:3f:cc:09:88:42:
18:5c:ff:7a:ba:24:e9:f9:be:47:16:e7:67:5c:17:
39:f3:c2:2c:71:86:d3:96:72:d5:19:fd:ed:69:5f:
b0:07:ce:69:b7:67:db:a6:d2:98:f6:f7:43:53:52:
93:83:49:dc:d5:8a:aa:70:85:d7:3c:db:52:6e:e7:
d0:ff:0a:e4:d8:3a:3e:79:8b:90:23:74:84:81:38:
49:b2:6a:38:5e:fb:6f:a9:e6:34:8e:ac:03:fc:24:
39:04:3d:77:c8:e7:ec:20:65:cf:28:28:87:b0:51:
1e:6b:4d:98:c0:e4:32:b6:f8:e4:3e:5d:a8:83:8d:
99:10:b9:0e:ce:aa:43:6f:97:00:d1:ee:a1:35:45:
dd:00:29:83:62:07:05:bf:ff:46:bb:c7:fe:9c:da:
90:37:77:d0:da:0e:72:71:b8:28:2c:ee:c5:3d:71:
5a:7b:1e:c2:c5:15:9f:1a:ac:1c:76:b8:f5:b1:e3:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:A3:E5:E6:98:3C:C1:09:91:99:D8:8D:F2:BB:32:A7:85:C6:51
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:39:47:1e:1a:80:f6:92:cb:69:e7:6e:67:59:35:cd:82:
1d:81:53:eb:ed:01:42:81:65:7c:2e:eb:bc:42:87:35:05:9b:
93:15:d0:f9:ca:f2:15:77:78:f9:2a:ab:c2:b5:46:81:05:0c:
ab:c8:93:0d:e6:92:38:4e:23:40:d1:bc:86:c3:fd:55:fa:57:
89:c3:64:ed:3c:20:7e:f4:2b:57:f4:17:19:c5:6d:54:dc:00:
59:d5:5f:8b:2a:07:65:9c:81:5a:8e:39:94:4d:d7:e0:23:cd:
54:e2:00:6e:53:04:b5:04:14:0e:db:45:6d:33:db:8b:fe:11:
d6:84:1f:f5:4b:33:ce:fa:e6:d6:76:a3:44:0c:b7:dc:26:6d:
be:96:de:9d:25:fe:40:2e:8c:a8:f8:c5:15:91:30:53:5c:6f:
48:b2:06:88:37:ca:8d:98:9d:f4:e0:f1:8f:13:3d:9c:b0:49:
b8:16:9c:ee:63:3d:16:91:0e:7e:69:d5:e4:ba:f9:93:6e:28:
2e:a9:7e:a1:90:e1:cc:b1:c1:91:dd:d7:48:05:c5:57:bd:9f:
35:8f:55:64:d9:7d:0b:35:98:b1:92:7f:50:68:e9:8d:d8:a9:
f6:8c:da:5d:e2:eb:ca:33:bb:f3:bd:af:a9:8a:48:13:87:7b:
c5:b2:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:39 2026 by rpki-client