Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: 3NVyTRCK2iG+rshAnjSt9oHhJEwePFqRAF6GES8Gy3w=
Subject key identifier: B5:C9:2F:19:B9:10:43:35:D2:31:6B:30:6A:0F:84:2E:0A:00:8C:34
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 019D38662669635D4D5E3BCF67D83FEB7C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 0375
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: 0gtpGd8HsjbJhSjNb5LqT/T91kZfnYETIpcpBjsw76g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:26:69:63:5d:4d:5e:3b:cf:67:d8:3f:eb:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=b5c92f19b9104335d2316b306a0f842e0a008c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:6d:ee:c1:14:4c:84:0b:d2:54:62:ca:d8:
d3:0c:10:ec:69:22:99:9e:51:dd:ad:67:40:a1:51:
58:3d:36:79:a2:3b:b4:84:ea:8a:1a:53:37:8c:36:
80:dd:84:9c:af:03:dd:f5:36:e2:c8:a3:a1:4e:b3:
44:f9:d9:93:41:ba:b5:48:24:54:8d:80:32:ff:fb:
5f:3a:5d:33:02:f8:4d:1d:8e:89:c7:14:ea:dc:6d:
3b:fd:93:b9:d4:56:49:93:48:ed:69:2d:74:8e:48:
d8:4e:99:18:2e:b0:1a:27:30:66:19:78:5c:59:b6:
2d:f3:00:cb:21:ab:2b:27:4d:22:02:f2:cc:ea:51:
5f:67:7f:86:a2:0b:d0:01:ab:75:04:8a:98:de:cd:
5e:e8:b2:60:64:9a:f4:46:99:30:e6:2f:2b:96:af:
c2:33:05:7f:bb:74:1a:9e:9a:8b:69:fc:4a:14:cc:
1e:52:a8:f4:c6:02:86:74:97:fb:ad:d2:79:7d:0f:
e9:5c:56:64:2f:b1:94:23:0c:0c:07:14:72:d8:1c:
08:4f:6e:bf:ec:1b:66:5e:aa:19:61:84:11:07:b1:
9f:6f:a9:55:cf:e8:83:b8:9e:58:4d:5d:6e:c0:a6:
27:91:06:21:79:34:43:08:3a:7e:aa:46:72:99:11:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:2F:19:B9:10:43:35:D2:31:6B:30:6A:0F:84:2E:0A:00:8C:34
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ae:bc:8e:6e:bf:f5:a0:90:e9:59:86:77:af:fc:95:c5:76:
35:c6:83:39:5c:15:86:19:e7:93:70:78:0f:ff:75:87:2f:17:
8b:41:0c:e9:02:b8:db:76:46:1c:6d:0a:6a:be:70:39:17:5e:
1f:ff:50:31:e6:49:f8:60:b8:23:45:b6:e0:09:ef:be:d1:62:
f4:ee:6d:8f:46:4d:63:0d:12:c5:03:1e:0f:d7:d7:ea:e1:28:
33:7e:ed:25:71:e4:df:a9:da:dd:b4:40:c8:c7:6d:80:2c:ea:
99:3f:cc:3d:1f:80:c2:04:b2:8c:ea:d1:a9:0c:01:83:eb:16:
6b:16:07:1d:b3:f9:ee:a1:ab:3b:3c:ed:4b:0b:51:5a:51:ac:
99:26:1a:c9:fb:f7:6c:b2:23:4e:92:46:84:29:e6:64:7f:a5:
2a:42:3c:10:4d:f4:88:16:73:07:97:b3:3d:a4:5d:9f:58:17:
3a:c7:1f:6e:e2:8d:8f:64:ae:03:cb:e4:96:fc:78:93:cb:55:
c0:c1:5a:38:55:d3:3f:1b:b6:f0:ec:bf:f3:3b:14:18:61:98:
fe:34:ed:61:2c:1d:96:e7:94:c7:e1:15:1b:3e:d4:2d:63:0e:
39:19:5e:ae:ef:8e:b1:9e:55:1a:ee:e6:16:41:fe:94:1d:41:
86:b1:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client