Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
File: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft (raw, json)
Hash identifier: Vn6d0UhuHailwX4AJkNI6SFpIsaRNc6K199KUhRULbs=
Subject key identifier: E5:0E:AC:66:68:56:E3:E3:0F:D1:65:6E:A6:4D:48:46:C6:90:7D:71
Authority key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Certificate issuer: /CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Certificate serial: 019D269600F20AC1FD94826F56186E928001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
Manifest number: 4F
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl (hash: HYtACRvnBsEuG4xNApeq0/j7rFjkHrfN8SeiyQt5+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:00:f2:0a:c1:fd:94:82:6f:56:18:6e:92:80:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=e50eac666856e3e30fd1656ea64d4846c6907d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:a9:1f:01:83:9c:58:6a:11:68:5e:7f:18:
14:99:d5:5d:db:63:4a:15:b9:8d:13:8a:5b:9e:b7:
3b:8d:c7:e6:cc:ba:02:31:f0:e6:07:13:11:94:36:
d0:b4:d0:a1:41:66:78:76:78:54:3e:eb:a7:1c:f2:
c3:7a:8a:1a:f9:c9:3d:ef:d1:55:0f:f4:94:42:22:
48:fb:c1:fe:bf:0f:e5:7d:c6:d7:4d:cc:16:43:15:
31:68:1a:c1:31:94:0a:fd:dd:8e:95:34:bd:d4:ab:
cb:ad:cf:ef:11:7d:32:95:e7:39:70:47:51:aa:51:
17:73:b1:cb:11:1e:56:4b:33:e4:f1:80:77:4c:ee:
cb:6a:3a:63:df:af:5a:32:9d:e0:dc:f0:05:8e:87:
84:42:9f:da:34:06:87:eb:92:64:3f:2b:01:76:d3:
b6:0c:67:6b:e9:3e:ff:10:e3:e5:41:55:37:60:90:
f3:35:e9:47:67:3b:11:ab:ac:bc:ca:08:41:1c:d5:
d8:33:65:ce:49:d7:60:d9:20:55:81:68:ef:c2:ef:
dd:68:78:37:cd:2a:4e:df:38:d2:82:06:04:a1:d9:
78:44:00:1d:53:47:a6:c7:e7:08:0e:de:04:c0:0f:
2d:b8:ba:a2:84:51:fe:68:d9:72:84:d2:f7:2f:1a:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:AC:66:68:56:E3:E3:0F:D1:65:6E:A6:4D:48:46:C6:90:7D:71
X509v3 Authority Key Identifier:
keyid:BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:91:88:10:8f:ee:40:77:f5:39:bb:69:9e:d0:c3:27:9a:
51:04:1b:53:3e:21:df:c2:88:98:ba:51:3c:83:a2:bb:0d:bd:
6b:a5:a7:f4:11:c4:1c:74:56:02:4d:38:6d:1a:b5:17:64:a1:
f6:22:00:9f:2d:c1:d0:bb:38:82:8a:01:4e:b7:a1:cd:7c:d0:
c2:ab:8f:90:82:e7:82:cf:cf:ed:58:a1:96:23:0a:4c:2f:e3:
e9:4b:49:f0:bf:05:3a:d7:59:c6:d2:6c:ec:20:92:13:a8:32:
ea:94:7c:b2:58:0b:f5:ce:9b:af:86:62:e9:ab:6c:c3:51:48:
ab:ae:2e:40:c4:aa:b1:1c:ff:a3:b4:04:21:1f:18:be:aa:25:
30:67:a6:01:8d:20:bf:f2:b1:db:f5:63:ed:20:fe:9c:d3:5a:
7b:8d:64:51:0c:6e:24:6d:3a:ed:56:ed:11:71:a0:dc:0c:4e:
69:26:bb:95:70:95:23:7d:e5:51:18:7e:fd:e9:d2:69:a7:e9:
30:a4:36:0a:2b:19:d6:e2:03:53:fd:0f:41:cf:ba:25:91:50:
c5:f5:f8:ec:da:5c:dd:27:05:83:f6:fd:59:50:0d:7d:05:fd:
2b:d3:ff:52:4a:61:bd:9f:ca:3c:d3:c9:f7:b6:c2:7d:ec:61:
14:b8:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:15 2026 by rpki-client