Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: IterJWxEtDrVilmuy0PXXXYOnjg+YUph7AbMVTJui7s=
Subject key identifier: 74:EF:AD:E3:FC:9B:2B:2A:E3:CF:B9:85:A2:EA:75:E0:24:E3:7C:8A
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019F1754FA2D50C68D6507917DE716AA47E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 07:01:12 +0000
Manifest this update: Tue 30 Jun 2026 07:01:12 +0000
Manifest next update: Wed 01 Jul 2026 07:01:12 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: LkGC9VQBqxWO7A4aFzZQ4tTrlXoDniMwCf8emqQvpQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:fa:2d:50:c6:8d:65:07:91:7d:e7:16:aa:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Jun 30 07:01:12 2026 GMT
Not After : Jul 1 07:01:12 2026 GMT
Subject: CN=74efade3fc9b2b2ae3cfb985a2ea75e024e37c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:88:88:bc:33:1d:88:81:3a:c2:38:e3:49:
80:eb:c0:bd:9a:6f:ec:ca:d3:88:55:5f:20:e3:7b:
34:bf:fe:c5:bf:2b:ab:36:c4:c2:84:01:ed:dc:e9:
ad:3d:c0:80:c6:43:29:13:8b:88:79:fe:f5:5d:9f:
14:f5:16:7c:2e:04:8d:f0:5a:67:37:32:a8:b6:6c:
8b:e7:95:4a:ce:d7:2e:1e:5a:ae:d0:72:9f:01:a9:
d9:76:44:fd:ea:28:e5:60:59:52:1a:dc:69:df:94:
7c:b6:35:96:e0:1a:7e:27:9f:82:03:9c:dd:4c:ce:
81:c4:68:78:45:32:45:ea:e2:7c:4f:c0:b4:65:f1:
95:94:10:10:65:8e:84:7f:75:b6:e4:e0:44:0d:36:
29:26:32:f2:f7:7b:f5:16:92:f3:1c:8b:62:52:1c:
ce:dc:78:f4:e7:71:3e:20:eb:7f:cb:01:b6:2a:a9:
c3:fd:4f:3b:20:db:40:6e:79:1f:94:75:e9:16:b8:
1f:4c:a1:6b:35:9a:44:5e:42:7e:2b:37:47:76:c3:
4c:2a:cb:1f:68:96:55:7c:9e:b7:8c:66:3b:b1:77:
50:b5:8f:86:13:6a:aa:5e:34:c4:0d:19:ac:d9:88:
2f:53:00:89:9f:1a:48:19:7e:d3:86:df:ca:bb:4a:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:AD:E3:FC:9B:2B:2A:E3:CF:B9:85:A2:EA:75:E0:24:E3:7C:8A
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:bf:98:c4:2d:97:e2:50:60:9b:66:26:8f:1a:5a:80:55:
fa:76:29:2b:79:06:54:70:0b:f8:29:7f:f6:bb:11:38:44:3a:
78:bf:d3:06:8e:33:6c:87:ed:6c:18:24:3d:88:2c:c0:e4:40:
34:96:1c:81:74:97:41:bb:42:52:1d:17:95:e1:74:9d:24:dd:
07:4d:98:af:c7:3a:e0:89:37:12:11:b6:47:9a:72:6a:27:30:
51:58:f0:9e:ba:c1:4d:34:3f:01:bb:41:c8:e0:a0:21:76:8c:
b6:82:2b:8c:22:75:98:2a:74:39:ae:8b:06:dc:90:13:b1:9e:
16:6f:ac:40:f4:57:d8:a2:b1:6b:c5:d5:e0:2d:f5:f3:7d:a4:
96:99:50:0e:04:59:12:ac:4b:5a:49:92:a1:51:5c:76:77:0e:
5f:43:90:16:c8:a0:f1:f9:72:96:cd:3a:73:e2:b5:5f:09:9d:
8b:63:1d:49:6d:80:04:02:fc:b7:2f:b5:88:a4:34:47:01:4f:
6e:b0:7f:6a:1e:53:b1:a0:c7:e9:8b:ba:9e:bc:fc:8a:a1:77:
e2:1a:8c:62:e4:7c:fe:ed:88:e0:b5:cc:70:18:a4:4c:0a:ec:
b5:49:d6:80:8c:cd:0b:0f:7e:d9:26:c6:be:54:04:11:ec:c2:
ce:00:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:16 2026 by rpki-client