Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: l41ktXQHQMXTXV1tVEARaz2sU5bGYcPn8be+iMFLOQ4=
Subject key identifier: 39:F5:49:FF:14:AA:50:80:E0:4F:FA:9F:51:C9:BE:2F:E6:83:5A:B3
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 019D284E46EEA8ACBC86D557E21AEC0355D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 15AD
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: L3Za6kW7uE7xtXZrGYFzpQTo7pBeipc7uzBNvnuliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:46:ee:a8:ac:bc:86:d5:57:e2:1a:ec:03:55:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=39f549ff14aa5080e04ffa9f51c9be2fe6835ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:87:80:07:df:2f:c3:94:4c:13:af:3c:18:
06:eb:4d:73:9e:ee:a3:0c:f3:1a:dd:1b:c1:6e:7e:
40:39:03:15:d6:7e:ed:1a:1b:92:b7:a8:71:f4:5f:
cb:37:bb:60:97:f6:1d:97:72:92:c4:1e:f8:f5:70:
22:93:8e:5b:77:ef:70:d2:08:a9:55:7f:85:a1:df:
b4:e3:ab:ef:2c:66:dd:25:e7:f7:7e:02:e7:98:a0:
f1:71:63:3c:da:c7:41:39:3c:04:b4:49:7a:58:06:
92:6c:46:30:aa:56:1d:bb:c7:94:93:85:c0:22:96:
a1:20:aa:26:31:aa:9e:7c:c3:b2:86:f9:e9:c7:6b:
20:eb:b0:9b:1b:05:62:63:45:47:d1:05:3f:dd:65:
36:0a:6d:a9:0f:44:3d:4b:3a:47:a5:0d:d5:10:dc:
65:26:6b:b9:8f:39:e1:25:41:2a:7a:06:b4:44:76:
b8:1b:82:75:98:39:f0:e6:8b:c0:e8:28:6b:cc:e6:
14:ce:1d:5b:12:ed:b0:21:8d:86:93:da:0a:2c:f4:
66:2d:c4:bb:53:96:f6:29:3f:95:d3:70:ac:ec:b9:
5a:af:e7:54:01:31:10:ed:ff:ad:c3:f3:06:de:8d:
3e:99:6f:bd:84:0c:39:19:d1:ae:8a:57:3c:c2:a6:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:49:FF:14:AA:50:80:E0:4F:FA:9F:51:C9:BE:2F:E6:83:5A:B3
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:46:58:ee:9e:38:fd:66:03:88:b0:79:86:a7:c8:4b:fe:10:
66:9f:43:67:c2:c2:03:14:a0:3a:8a:4f:b8:56:d4:8b:ef:28:
58:48:af:b9:2c:2f:ce:08:9a:98:37:48:30:5a:8d:5a:c7:99:
7d:2a:63:1b:be:0b:e5:9f:1a:d8:64:89:76:6a:c9:d3:5d:c9:
50:18:cb:84:18:9c:18:c4:c9:12:41:a1:b6:09:be:3c:4d:98:
cb:1f:ca:f7:73:12:56:94:18:d0:c8:7c:78:2e:49:0f:6d:ec:
59:1b:48:38:04:fe:e9:1c:37:4b:aa:82:a5:1f:79:77:19:e8:
89:d8:c8:a4:6b:10:9e:5f:b7:ca:9d:b5:80:a9:03:31:c5:bf:
5d:d6:a4:ab:17:d5:4e:77:e2:c7:00:4b:1d:f7:2b:d5:9e:f3:
7e:dc:66:85:1f:4f:e5:cf:ca:26:0c:c3:2b:6d:01:12:4e:1a:
61:41:8e:b9:91:7c:d0:e7:46:ac:a9:2d:19:e5:1a:2c:13:7b:
42:4f:19:07:9f:4f:88:2a:57:f4:e9:38:6d:94:27:fd:9b:f4:
dd:7f:7b:ae:3e:de:1d:f9:24:23:68:19:f2:b0:c3:44:e0:68:
cc:ae:72:a5:82:0a:4d:9b:09:99:a2:f1:44:33:b3:73:54:c8:
7c:c7:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:12:22 2026 by rpki-client