Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: PPafOemIIH7oUYETdNHkp91pNGx1wkuN+Af/ZAL6B/s=
Subject key identifier: E4:A3:02:75:A5:C6:E2:19:BE:37:65:3C:C3:A9:79:AE:A8:64:90:C4
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019E1C475635F5A407DE15FA9E995E1E3ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 13:01:37 +0000
Manifest this update: Tue 12 May 2026 13:01:37 +0000
Manifest next update: Wed 13 May 2026 13:01:37 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: OtokfVsOt844O3yl99cW7d+rA+Cmg67aRbBdPcDLL8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:56:35:f5:a4:07:de:15:fa:9e:99:5e:1e:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: May 12 13:01:37 2026 GMT
Not After : May 13 13:01:37 2026 GMT
Subject: CN=e4a30275a5c6e219be37653cc3a979aea86490c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:f5:9e:65:d6:70:3b:a8:0b:a0:f1:f2:e3:
00:f8:d5:7d:ed:26:9b:17:2e:be:bb:81:f5:c1:b3:
19:ce:df:de:f5:0a:e5:12:8c:7c:22:5e:a9:c9:06:
8f:87:46:87:64:5f:27:c3:09:28:94:67:9b:e1:0e:
1c:3b:bd:3e:94:71:ee:94:2c:d1:1d:1d:5e:03:b2:
d1:09:db:6c:eb:0e:d2:87:51:ec:92:ee:09:34:ae:
8f:e1:2e:01:b3:9d:ee:37:7b:71:05:48:c5:96:7d:
a1:d3:f1:94:7c:44:91:a0:91:5e:ec:2c:0c:25:8b:
d2:92:b8:4e:50:39:f5:c6:ef:c8:53:a7:84:85:37:
ad:b7:df:8c:86:44:73:e7:37:d0:09:9b:6b:e3:cc:
12:d3:f7:8b:32:28:43:75:39:ed:ee:98:b0:1a:7b:
b3:c6:52:ee:c3:aa:f0:4e:d0:8b:ec:a7:53:a0:a7:
0d:9d:c7:b1:f2:dc:35:eb:03:21:ff:56:5b:9a:91:
6e:7e:28:fd:da:26:cc:a2:a2:87:3e:08:d8:08:8c:
60:e7:f6:7a:2f:d1:a4:a5:77:eb:59:a1:b8:59:a8:
29:3c:0b:54:be:41:c1:39:ae:56:c7:43:b8:e0:ac:
13:e3:cb:37:27:93:4a:7e:d8:cb:d9:2d:b6:d9:98:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A3:02:75:A5:C6:E2:19:BE:37:65:3C:C3:A9:79:AE:A8:64:90:C4
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:18:db:ab:b4:3c:f8:95:4c:bb:b9:e3:34:9e:bd:de:40:
5c:ef:be:95:a4:e7:f6:e8:14:fb:6b:be:bc:ee:e2:d8:59:be:
f6:4f:9c:05:c7:95:3a:1e:20:b5:50:c6:e7:2f:14:7d:23:f5:
33:af:a1:8e:1f:98:82:a0:e6:c4:d2:2b:2a:d1:27:a5:0b:a6:
4b:19:2f:63:66:7c:f4:6e:3e:6e:92:1a:a3:f5:b4:4f:10:c9:
43:ce:b5:da:e6:b0:d9:0b:19:b1:a3:08:b2:b6:e1:64:b1:9a:
ce:0e:36:4c:55:c8:7d:88:1c:d7:f2:a3:01:b9:18:cd:e4:ef:
14:ea:d4:bb:41:bb:30:90:e6:b7:2a:ba:72:d5:32:f4:84:6f:
4d:8d:c2:3b:30:35:8d:f0:21:0d:44:0b:70:bd:07:71:4f:cc:
8f:84:4e:9e:7d:42:37:05:d5:b5:c6:ca:81:62:af:51:b0:34:
f8:65:b1:4e:a9:a6:88:55:ed:a5:c0:e2:50:37:87:27:6b:ca:
07:3c:26:94:32:67:a3:4e:4f:56:90:08:51:34:23:60:7b:7c:
6d:d2:62:99:a5:27:40:0d:4a:ae:0b:e7:05:2c:63:b4:fb:7f:
0c:e5:10:a5:a4:c4:6b:1e:20:e3:48:fc:70:b6:8e:8d:74:b8:
ec:c8:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:02 2026 by rpki-client