Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: RAU/fU7+owdIBqu8Se9qFXY8rUrI3RIbxP+mv2IQ0h0=
Subject key identifier: 2C:54:2F:BA:8B:87:45:A1:4A:70:8D:BD:BC:5A:42:40:31:11:3C:84
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 019F1942F42D0587F3851863F607D51E103D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 16:00:45 +0000
Manifest this update: Tue 30 Jun 2026 16:00:45 +0000
Manifest next update: Wed 01 Jul 2026 16:00:45 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: h3RVUp88kmCbAeEzzFMoX+ftivfUAF+zJoLeeOcOak4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:42:f4:2d:05:87:f3:85:18:63:f6:07:d5:1e:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Jun 30 16:00:45 2026 GMT
Not After : Jul 1 16:00:45 2026 GMT
Subject: CN=2c542fba8b8745a14a708dbdbc5a424031113c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:70:6d:0e:85:5d:83:b3:09:c8:38:e8:35:
6a:88:c2:c2:6c:fc:5a:e5:ed:1a:1f:22:86:b9:40:
d1:bf:1d:33:61:5f:9b:a3:ee:42:dc:83:94:6c:3c:
ef:f7:5b:e1:27:dd:06:5c:21:ac:30:0e:f8:00:8a:
ac:9d:9a:5f:5f:6e:55:73:e3:30:ea:92:28:51:f3:
c2:c9:38:dc:8b:9f:ac:79:53:15:4a:0d:5b:d9:24:
ac:7c:67:f1:21:fc:d7:5b:10:81:2c:e3:8f:b1:a1:
24:88:b3:c2:c0:d4:90:cb:0d:78:8d:37:0d:cd:0f:
08:62:6a:e2:b4:4e:a0:3a:76:69:e7:cb:0e:6d:31:
b0:13:ef:97:65:f1:91:60:91:0d:a5:86:1a:b2:28:
d2:74:b5:85:2f:8d:30:bc:e4:25:50:50:53:12:71:
d8:4c:0e:c6:fe:95:42:e1:65:4a:a0:3a:62:0c:e7:
de:70:93:58:20:d7:55:73:43:75:ec:cb:07:09:4f:
65:39:5c:81:bd:bf:de:04:ce:9e:a1:5f:4d:70:bd:
7e:56:dc:8a:68:13:be:28:f7:1b:4a:f4:7b:53:cc:
e7:3d:73:16:35:db:df:8e:63:67:d1:10:c4:7e:88:
9a:11:e0:9b:b7:c5:07:64:41:d1:61:00:cf:9a:fb:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:2F:BA:8B:87:45:A1:4A:70:8D:BD:BC:5A:42:40:31:11:3C:84
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:11:a7:7b:10:13:87:8c:26:ae:47:44:b0:79:63:da:a5:
62:f5:ae:d4:6e:3c:74:29:9f:84:f6:f2:c7:0d:78:ce:c3:2c:
8e:9a:85:9a:46:00:26:e7:f2:7c:00:97:b0:8f:5f:76:d8:0e:
2a:22:d7:43:26:29:c1:b4:fa:45:91:38:9d:24:07:17:11:02:
69:98:f3:a7:dd:6d:98:9b:69:8e:f0:05:58:f8:e4:97:9a:55:
59:2a:b0:55:cc:83:1b:db:20:bb:27:60:aa:ae:d2:8a:1b:b9:
58:8b:af:ba:18:14:17:da:83:cb:ba:91:53:2e:ef:97:ed:74:
5f:56:11:c8:a8:a9:5f:29:27:7a:f4:da:78:c8:c9:8f:15:27:
36:73:bd:e1:4f:85:d8:fb:86:f6:ce:aa:89:4b:f5:53:e6:fa:
d5:2d:a0:80:de:dc:c0:26:8b:14:61:e5:d9:fb:c0:47:93:81:
c0:a0:4c:36:ff:c6:7f:a0:05:0c:4a:0d:a4:fa:f9:78:27:4e:
71:07:5e:dc:70:73:57:2f:8d:c9:7a:2e:c6:61:0e:b6:a0:99:
fb:f2:63:25:25:c3:8c:24:ad:e7:df:e2:2b:23:5f:2a:0e:fd:
98:2e:40:3d:9f:36:de:4d:c4:86:2b:d4:2c:44:64:8e:a8:68:
12:f9:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:32 2026 by rpki-client