Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: Ow74g7m7vAkjzGl/y+Pa76zcP3VX2nyWJcVzKkTFcB4=
Subject key identifier: DE:9D:9B:51:20:A5:E9:27:75:56:26:0D:BC:88:CE:3C:EA:EE:7C:9F
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 019D3866690654FDE3A68481871DEA02CFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: 0cI4Mm4HHpHaFOGY/WXtmMSNu6lVvuh7xPG4PvpnNkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:69:06:54:fd:e3:a6:84:81:87:1d:ea:02:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=de9d9b5120a5e9277556260dbc88ce3ceaee7c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:13:f3:81:89:c1:f3:ec:be:2d:15:cf:f9:
a1:f5:45:28:16:a9:98:3d:d7:42:cf:70:dd:a6:0c:
5b:8e:cc:f8:b6:0a:2d:8e:d6:09:82:e5:5c:13:09:
16:21:34:5b:94:e0:d8:34:40:ba:01:ab:7e:db:52:
d2:82:de:28:1c:90:9c:81:71:76:09:2b:14:5c:38:
0d:40:1b:d7:68:13:74:b5:fe:45:7a:37:9b:15:00:
c2:8c:fd:68:31:ec:94:cb:17:78:66:68:f3:c4:85:
c8:40:66:26:f3:e9:56:31:fd:e3:3b:af:00:1b:63:
42:25:37:df:6b:67:5f:ab:d0:67:60:df:9a:49:70:
d3:b5:e6:30:bd:1d:62:dc:72:f5:ba:48:9e:20:50:
7c:3c:65:37:f7:3b:1c:fe:84:c0:cd:8c:08:b9:01:
35:f4:9e:38:e0:01:36:c0:02:9b:94:71:25:44:de:
a9:67:6e:44:52:60:d6:0f:93:6c:37:3c:61:08:a3:
da:99:86:52:e2:a0:ae:03:34:25:ef:de:28:f0:7c:
09:09:35:5f:b7:3e:27:96:6e:99:e3:79:ec:fb:6e:
75:a5:8f:cb:38:cd:2c:b5:5a:39:8b:4a:51:78:f3:
1b:73:32:98:0a:18:53:dc:1b:8e:3a:39:21:dc:41:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9D:9B:51:20:A5:E9:27:75:56:26:0D:BC:88:CE:3C:EA:EE:7C:9F
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:f7:00:87:9c:59:79:07:16:86:ca:5d:6d:aa:34:f0:18:ac:
34:21:bb:e4:a6:0b:4a:c5:0e:e3:60:6f:be:6a:75:05:8b:94:
41:7c:bd:99:5a:81:31:d0:26:83:3f:92:90:72:fb:74:3a:db:
91:aa:44:0c:7f:0b:68:d0:49:0d:e7:6b:b8:c4:ac:b2:1a:3a:
08:84:cf:4c:68:aa:a3:78:d9:63:1a:08:3e:c0:fe:18:f8:3c:
af:18:d0:0b:66:d1:52:5a:7b:54:5f:ef:b8:dc:6a:bb:f7:57:
dd:9d:69:76:51:44:d0:b0:ff:ff:b2:38:3f:a0:6c:32:c1:c4:
7f:21:84:44:04:53:df:b4:be:f3:9e:e1:42:0d:29:95:f6:72:
06:58:66:6d:a3:31:09:c4:66:43:c8:3c:14:ae:f4:89:ba:39:
1a:31:fd:a7:86:70:46:ac:ff:98:84:5a:cc:9a:26:8c:34:2e:
1b:e2:a6:87:3d:cf:6c:ac:69:5f:62:37:3c:c0:7f:4a:75:91:
53:96:d3:88:ab:1e:e9:0a:cc:37:cc:87:af:bb:01:48:7f:e3:
e9:6b:d8:97:92:c8:5f:8c:5b:c5:f2:e0:0f:d0:20:6a:16:b1:
65:08:96:71:93:6b:12:7a:85:72:fb:80:3d:c9:d9:1c:ad:5f:
7d:d1:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:45 2026 by rpki-client