Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: uGshAuisnbJm3xYN64vs4P8Y5gyKhXap52yimhJnRE0=
Subject key identifier: BF:60:39:4E:D3:D1:83:C5:F7:D4:94:F6:DB:5C:C6:2A:FC:CD:F0:92
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 019D38D37D834C5E64165C40FEB255336437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: QTZZiBP9f1EpLiF+tePk1U2TtDPNrITGc9Lf1KJVGqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7d:83:4c:5e:64:16:5c:40:fe:b2:55:33:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=bf60394ed3d183c5f7d494f6db5cc62afccdf092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:ac:a5:4d:55:09:9e:0c:be:1a:0d:fb:40:
14:af:b5:1d:a6:c0:9f:e1:4b:81:e6:ae:95:a1:88:
b2:e0:df:93:68:46:4a:67:61:5e:3b:f8:5c:83:29:
79:2b:78:11:31:89:4b:06:c8:d1:32:ef:2d:44:6b:
2e:a1:e9:39:73:20:23:3f:ae:ab:cc:5e:be:11:f5:
22:64:f2:4b:96:fd:20:fc:04:24:47:be:2e:d8:42:
92:c6:09:be:74:27:b3:0a:2c:36:48:d7:15:b2:24:
42:c2:44:b3:89:21:48:9b:e2:fb:bf:a6:a7:09:9b:
07:3c:d3:9a:6e:dd:98:57:43:34:77:f8:e5:a7:df:
7d:a9:f5:7a:c5:68:71:d6:45:8a:0c:9d:d0:32:f0:
e9:8b:f8:55:af:59:74:16:1a:50:3b:77:c1:df:72:
02:05:25:34:f3:03:0d:19:1b:0b:0c:76:e8:8e:6a:
98:6f:fb:e5:f0:55:35:79:98:5d:05:81:4c:da:47:
81:f8:fb:a0:c3:c9:51:05:7d:54:93:3e:d7:00:51:
d2:64:92:63:b8:12:a8:d1:f7:b2:ef:28:45:a6:5b:
4a:0c:8d:92:c5:71:ba:b2:bd:1e:29:b3:6d:69:cc:
e8:11:df:9b:96:7a:83:b3:36:f4:53:19:32:e5:b7:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:39:4E:D3:D1:83:C5:F7:D4:94:F6:DB:5C:C6:2A:FC:CD:F0:92
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:9e:99:69:84:25:1e:7d:c2:bd:c3:79:9f:4e:dc:c0:3e:b0:
84:81:ac:8c:90:39:8e:41:97:8b:95:54:4f:d9:42:92:d0:d7:
6e:bf:1f:23:a0:b3:10:a1:46:84:77:f3:c8:c9:6c:f6:ba:62:
1b:57:02:d9:df:3a:14:aa:42:ef:56:b5:b1:3f:a3:8c:99:d9:
0b:94:5f:a9:22:f2:72:f7:fc:05:8a:9b:38:8d:8e:55:8f:51:
fc:7e:e6:29:bd:0f:51:23:58:5f:43:33:1d:28:37:3e:6c:1a:
f1:d6:44:e1:29:ef:eb:50:0e:22:bc:a0:63:24:c1:09:6d:c8:
51:14:32:63:4a:4e:06:f8:99:99:19:6a:d4:f3:1a:06:e0:47:
f2:60:ff:cc:3d:da:05:09:52:fa:e1:0d:67:85:23:6b:ec:8e:
f7:0b:b9:d4:85:1d:0b:9d:58:57:27:00:95:cc:e3:dc:32:77:
5c:26:9a:09:29:92:bb:00:9a:f4:d4:0f:54:77:c5:a3:33:8e:
03:99:28:f0:11:43:aa:61:24:88:7e:ba:35:06:cc:5e:ec:67:
d3:b4:0d:29:de:30:da:a0:38:bd:2f:76:81:22:b6:72:f2:ea:
af:1c:c5:b0:5c:32:d1:8c:eb:1e:e2:8a:d1:24:7e:3e:62:d5:
80:9c:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:40 2026 by rpki-client