Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
File: 8sunLIc142KREckiq36BRTTV_F0.mft (raw, json)
Hash identifier: 8Kl9fjnCJpgRYqlh8z/3xSf5zTyLy2+wotXqar/9UqA=
Subject key identifier: 4D:5D:19:06:A3:75:54:E3:09:86:4E:C9:F9:B4:3D:CA:38:61:69:97
Authority key identifier: F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
Certificate issuer: /CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Certificate serial: 019F8EA27507569042C3C08E9548AB118BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:00:39 +0000
Manifest this update: Thu 23 Jul 2026 11:00:39 +0000
Manifest next update: Fri 24 Jul 2026 11:00:39 +0000
Files and hashes: 1: 8sunLIc142KREckiq36BRTTV_F0.crl (hash: rp8Z2SeLamWYCs878i6e5OamkJu1SbUE6iwjoyUr324=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:75:07:56:90:42:c3:c0:8e:95:48:ab:11:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cba72c8735e3629111c922ab7e814534d5fc5d
Validity
Not Before: Jul 23 11:00:39 2026 GMT
Not After : Jul 24 11:00:39 2026 GMT
Subject: CN=4d5d1906a37554e309864ec9f9b43dca38616997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:fb:56:a0:87:b8:ce:c4:60:72:dc:24:09:
64:4f:63:28:20:23:d0:f6:84:9d:9f:20:6d:d7:e3:
3c:6f:70:c3:4b:ab:f4:6d:c8:68:14:14:ed:ef:3b:
22:fb:d5:a5:88:4c:f1:6b:f3:8c:e2:f6:e2:3f:6c:
df:b2:69:5c:43:4c:24:8f:1e:de:e0:9d:f9:a7:1c:
17:f4:89:fd:51:ea:22:5b:f6:18:9c:fb:4d:40:43:
1c:07:b4:66:3d:f0:f2:ad:ed:99:97:76:75:f7:f4:
08:90:a0:9c:84:53:19:17:a3:40:87:62:eb:0b:5c:
58:d7:f9:66:0a:57:87:f8:ac:16:3d:04:7b:0c:bd:
bd:96:18:a3:1b:02:a7:3a:d8:d3:5e:14:1f:80:0e:
9c:cf:ff:14:49:2f:11:4d:8e:04:86:3f:76:5e:ca:
3d:2c:e0:22:42:b2:31:b4:3d:db:f3:c0:8e:62:3e:
74:8b:c6:b0:00:85:18:15:d1:6c:dd:17:36:b2:6b:
a9:8a:0c:6e:06:b8:ff:93:df:d3:da:b8:64:1b:b9:
35:61:78:01:d3:7e:ca:7a:91:5d:f1:91:8d:94:8b:
cf:5a:e6:ee:90:fe:bb:3c:99:db:09:27:5b:ce:86:
ef:a9:fa:b3:b1:de:f8:07:9e:18:0f:60:58:a6:de:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:19:06:A3:75:54:E3:09:86:4E:C9:F9:B4:3D:CA:38:61:69:97
X509v3 Authority Key Identifier:
keyid:F2:CB:A7:2C:87:35:E3:62:91:11:C9:22:AB:7E:81:45:34:D5:FC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8sunLIc142KREckiq36BRTTV_F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/8sunLIc142KREckiq36BRTTV_F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e8:61:8a:c2:60:33:e7:90:89:30:43:e3:de:be:39:fe:28:
4c:e4:1c:14:d4:96:54:f3:a4:2d:9c:50:04:45:97:0b:49:21:
80:29:f2:c2:c1:18:55:08:e5:9c:26:08:0e:c8:b0:a7:ba:a0:
47:21:09:91:2d:4e:03:99:4b:9b:02:96:53:87:6d:a5:6d:1c:
66:5f:64:96:3c:b3:2a:4a:a8:21:e3:aa:ee:95:91:19:92:0f:
03:24:40:31:ab:09:b5:55:dd:f9:8d:ef:50:fb:67:2a:a2:50:
36:f2:fe:d4:c2:72:38:c0:dd:99:22:4f:6c:aa:11:53:ab:03:
66:a4:d7:1f:e6:7d:15:aa:54:6d:fa:a8:ef:fc:5c:08:27:f7:
d8:d6:b4:e2:07:68:d3:3d:c6:df:e3:b7:e3:23:e2:1b:80:e3:
b7:0c:ec:af:9d:34:2e:da:48:c8:2a:41:d8:56:60:59:00:9f:
5b:55:7a:21:fc:e0:f9:9c:ca:1c:69:a3:e2:a7:f0:b4:c2:3b:
1f:81:26:b4:89:00:cc:61:4b:58:06:41:7a:32:cb:73:b6:eb:
6c:d1:95:13:b7:61:a5:e8:cb:12:ea:e1:9f:02:ac:a0:3d:a1:
49:af:c1:c1:55:d3:94:48:69:ac:d5:fa:bc:9e:a6:03:46:04:
05:90:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:30 2026 by rpki-client