Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: kurJhL131ABi6zcuuSiIvtSAugU1xJTYGbp4Or9FqB0=
Subject key identifier: E7:A3:48:63:58:E5:39:08:58:5A:BF:F3:D5:8F:0E:4A:FE:B4:F5:CA
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 01A0016F46D7A83A8FED6D8DF514885E63BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 19FB
Signing time: Fri 14 Aug 2026 18:01:04 +0000
Manifest this update: Fri 14 Aug 2026 18:01:04 +0000
Manifest next update: Sat 15 Aug 2026 18:01:04 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: rOJj72UpMsee4TxwrMhfkqPQbSIq59tt+VZ6IJigpGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:46:d7:a8:3a:8f:ed:6d:8d:f5:14:88:5e:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Aug 14 18:01:04 2026 GMT
Not After : Aug 15 18:01:04 2026 GMT
Subject: CN=e7a3486358e53908585abff3d58f0e4afeb4f5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:f0:2d:e1:23:6e:57:76:5a:0d:f7:eb:ab:
8f:9a:ba:e8:08:fb:28:9c:65:6e:ce:d1:9c:85:e9:
30:9e:05:4c:5a:f3:f4:74:c9:c3:39:9c:43:92:ba:
fa:18:58:67:03:10:a7:8e:a2:c9:ba:47:7d:d5:87:
f9:09:85:3f:02:20:6e:eb:cc:2d:41:b6:8e:78:e1:
d4:8f:10:66:a5:88:e8:d3:0f:94:cb:63:81:fc:63:
33:97:e0:e6:36:8d:5d:75:57:14:23:f9:98:1d:fb:
8f:b7:bd:67:45:71:07:d2:d8:de:4b:0e:2d:51:e7:
2e:b4:ff:d5:08:bc:80:bf:c1:bb:71:0a:bd:cd:c2:
77:f3:bb:cb:a4:7c:32:88:ff:62:70:02:a8:da:a4:
7f:58:7c:24:75:e3:02:55:d8:d4:60:aa:ea:77:34:
d0:44:34:e9:b0:79:fc:d9:54:9d:56:b8:66:81:f4:
2f:18:f5:3c:5f:2c:ee:3c:61:57:6e:78:e5:7b:d2:
54:6a:4e:c4:65:15:66:43:76:db:c9:be:c2:54:bd:
9f:b4:ae:50:1f:c7:b9:8e:e7:a9:03:aa:ea:0a:e7:
8d:5b:8d:3e:77:a8:8a:69:c1:30:f8:56:9e:3f:2c:
99:38:94:6d:25:c2:95:c9:9b:3c:82:18:27:b3:02:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A3:48:63:58:E5:39:08:58:5A:BF:F3:D5:8F:0E:4A:FE:B4:F5:CA
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:63:7f:22:df:67:a9:98:90:0d:10:26:f8:98:77:a4:ae:
e8:e6:41:2c:3b:79:86:e8:04:37:70:3b:fb:ee:e2:10:e4:a4:
65:74:b9:5b:3a:ba:52:6f:d1:f6:d0:e8:1a:f9:fd:06:11:77:
7a:5a:7d:bf:09:c8:f8:3a:32:25:8e:b7:d4:75:87:97:0e:69:
7e:64:47:e7:e9:3b:f3:cd:fa:a3:44:0d:23:e1:5d:c9:02:cc:
ca:e0:72:b6:d8:8d:87:5f:20:70:39:be:a4:d8:5b:d0:cd:ea:
57:85:cb:c9:93:95:22:a6:4c:e4:54:45:18:2b:80:f2:df:5e:
b3:f8:f3:c8:11:5f:5c:92:f4:a5:fc:b0:68:1f:9b:93:10:71:
99:31:9f:ec:59:52:a4:9c:15:9e:ae:b8:a8:f6:87:72:d5:9a:
1e:0a:e1:2c:b9:b3:ec:79:5a:28:09:bd:2b:b5:a2:19:be:0d:
80:c1:f5:bb:8b:76:10:7f:fa:e4:d1:1d:5d:63:94:27:8d:cc:
32:7d:33:c8:1b:66:4e:7a:3d:36:8f:33:b0:28:8c:d8:23:3b:
71:66:d1:90:94:52:2a:3d:cf:ee:52:fd:7b:f7:5a:48:c4:ef:
e2:22:de:05:0a:85:be:c2:7a:93:26:fc:54:bb:b1:aa:90:e7:
04:13:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client