Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: R3kS+c7dwoOdsvX1eFMQIpwOr/rPeawDPyaq77cFcNY=
Subject key identifier: E7:A9:2A:81:B0:BC:1C:B1:69:E2:73:33:0C:4C:3A:2E:1B:3E:94:A5
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019E1E359AEB576050CF3AFE736D4BB114BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:29 +0000
Manifest this update: Tue 12 May 2026 22:01:29 +0000
Manifest next update: Wed 13 May 2026 22:01:29 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: 5tDl7MhbmDOeKfRW3xIr3uPfgzjlQHI8cWu1Tt3f2oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:9a:eb:57:60:50:cf:3a:fe:73:6d:4b:b1:14:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: May 12 22:01:29 2026 GMT
Not After : May 13 22:01:29 2026 GMT
Subject: CN=e7a92a81b0bc1cb169e273330c4c3a2e1b3e94a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:e5:38:1f:2a:b2:0a:8a:48:ea:c2:e4:b8:
8e:cf:a7:66:3d:eb:7f:f3:5d:76:dd:05:ae:64:81:
2e:bb:61:52:c6:d2:78:af:f2:dc:87:e1:9d:6a:fc:
46:71:3c:1a:e2:53:e7:4b:75:7e:df:71:df:c5:92:
97:02:f5:e2:68:be:87:e2:02:0e:67:15:c5:9f:0c:
38:ba:03:2a:4d:5b:d6:f1:5b:d0:2d:a5:53:eb:46:
51:87:18:34:ec:55:b5:d5:32:90:20:19:c8:6d:36:
c0:57:66:a5:e9:49:8e:36:da:68:6c:fa:b3:72:c6:
96:b8:fe:81:f2:ac:20:e3:b0:6d:88:bc:63:50:61:
85:97:85:48:d2:38:23:ed:b8:d4:ac:7b:bc:56:35:
a9:09:57:4b:7a:20:a9:64:b6:22:f1:08:d3:63:30:
b4:7b:dd:9e:26:41:bc:78:05:0a:dd:bb:f2:4e:40:
2a:e8:a8:d3:1b:05:bb:df:fa:99:4a:85:f0:84:33:
10:83:72:80:de:03:d7:67:b3:e5:d7:d5:a5:34:10:
3e:cf:6a:f6:21:5a:17:fd:83:76:76:6e:23:fe:9d:
97:6b:06:b3:b0:17:f8:a7:3b:ee:e8:f0:7c:52:59:
53:b1:1f:31:84:64:d9:72:c8:31:ac:9d:82:0e:91:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:2A:81:B0:BC:1C:B1:69:E2:73:33:0C:4C:3A:2E:1B:3E:94:A5
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:de:1c:86:33:22:5d:de:c2:1a:a1:89:04:4a:25:5c:05:
77:d9:87:74:e7:e1:dd:0a:0b:d7:f0:42:e0:47:b2:c3:6c:cc:
46:56:63:7b:f9:ca:7f:b1:92:dd:02:74:ac:55:c0:7e:e9:28:
a7:68:b1:b4:be:1b:74:3c:ce:cd:ea:87:75:5b:85:89:0b:0b:
d8:2b:f2:6a:6f:75:bb:ab:2a:71:d6:14:52:d4:1f:4c:67:0c:
b5:bc:7f:f0:3f:cd:f7:67:b5:37:69:07:d5:89:de:0c:19:fe:
4e:ba:74:3a:f1:0b:e5:0b:f6:2e:d7:6d:6f:6b:1d:14:81:ea:
ac:11:77:ac:a2:3e:86:6f:a1:20:9c:a8:e8:47:d8:f2:18:6d:
b5:e5:d7:9a:0d:a1:a6:fc:09:c6:82:4e:55:f8:17:df:d3:b6:
66:f0:2b:29:6e:1e:9d:4c:02:21:9f:23:3f:1e:06:6f:04:21:
84:73:f9:38:f6:40:b3:40:83:07:e1:a3:8b:49:da:5e:0e:a1:
6c:28:93:c6:bf:db:a0:e6:6e:35:f8:0a:d7:5d:66:c3:d4:29:
ae:a4:22:f7:4f:7c:51:b7:95:c9:38:6f:dd:56:3a:6e:db:79:
07:49:2d:48:88:14:5f:6d:27:8d:f0:51:7b:48:8f:86:22:0e:
68:c1:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:08 2026 by rpki-client