
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 7ZjRqDVo10CQnZG/fG5huUx6odsnENNnGIDPOztyjOI=
Subject key identifier: DE:B3:D9:E7:48:AB:31:CF:EC:1C:EA:5C:5F:A8:CD:FD:E8:3B:34:5C
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 01A14B3D205E67DAA5AE5187EF3001A83A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 17E1
Signing time: Sat 17 Oct 2026 19:00:59 +0000
Manifest this update: Sat 17 Oct 2026 19:00:59 +0000
Manifest next update: Sun 18 Oct 2026 19:00:59 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: FxFszMf4jAc2CO7T+FxrTWNJSb5l5YBuqLzc6go7EnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:20:5e:67:da:a5:ae:51:87:ef:30:01:a8:3a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Oct 17 19:00:59 2026 GMT
Not After : Oct 18 19:00:59 2026 GMT
Subject: CN=deb3d9e748ab31cfec1cea5c5fa8cdfde83b345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c7:cc:02:41:10:56:ff:93:52:b4:fc:98:4d:
91:98:8c:bd:56:6c:fd:7d:e0:94:53:86:da:04:c5:
07:f5:94:4f:30:58:a4:c5:1b:16:24:03:55:1d:30:
93:25:bc:f3:9b:f1:8b:82:fa:5d:fc:45:57:c6:b7:
99:dd:8c:72:a4:40:93:bc:a2:51:19:f0:18:07:05:
63:b4:9a:e7:54:42:aa:0f:67:37:7b:fc:82:fc:17:
36:45:3d:8b:a3:84:87:71:51:33:f7:c2:df:d4:92:
93:d8:dd:ff:4b:e3:79:d4:88:49:10:42:e1:ee:9d:
60:09:1b:2b:57:bf:47:9a:4a:e6:71:c5:46:30:85:
c1:b4:80:10:83:94:2d:80:cf:20:b5:ee:82:21:51:
f7:c0:6f:b6:1d:53:c7:24:1d:03:21:26:31:50:bb:
a3:a0:94:49:65:52:ff:c8:98:dc:e5:e9:eb:ce:a8:
49:bd:4c:1b:92:96:30:66:f3:77:fc:88:da:8b:65:
91:b1:3a:b7:3a:51:58:b8:bf:fd:d6:5e:eb:a1:33:
e7:6e:64:ed:a1:47:0f:66:4a:7f:ff:21:09:bf:d3:
99:f9:d0:a8:bf:f3:af:7a:c3:91:29:38:34:b8:a6:
88:75:1c:cd:d2:5f:04:6b:8b:ec:9f:c6:4f:d8:91:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B3:D9:E7:48:AB:31:CF:EC:1C:EA:5C:5F:A8:CD:FD:E8:3B:34:5C
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9b:69:5f:02:fb:18:e2:50:95:2c:7f:bc:09:27:9b:b1:ee:
f2:c7:a7:46:45:1d:4b:66:9c:e8:62:cd:a9:0b:dc:9b:83:89:
fc:48:51:03:50:0e:e2:04:ce:48:fe:31:f8:ff:ce:34:10:aa:
57:af:71:ca:f8:a6:56:5b:49:fc:40:66:af:0c:07:e8:15:e7:
e7:74:d7:57:ca:59:22:46:ca:0a:d6:33:f5:4b:90:fa:42:cb:
0b:aa:91:6a:95:d9:43:2b:70:aa:30:15:d2:15:64:ca:c8:ce:
28:5e:50:79:e4:94:76:b2:e9:68:db:9f:58:5a:5b:91:3b:7d:
9a:85:50:27:99:b8:62:72:b4:78:d6:29:a1:75:63:a0:7c:65:
43:bf:62:63:96:a9:b7:4e:18:f0:c4:ea:41:34:6e:18:b5:9a:
e6:98:29:25:de:3a:e5:fa:9f:ff:63:fb:ca:5f:5c:49:21:10:
8a:2b:3a:0c:bd:b9:9e:50:3a:48:4f:32:38:8b:5b:eb:f0:03:
3a:c6:52:9c:43:1e:fc:eb:ae:d9:ba:c3:43:e6:a1:0f:45:97:
34:3a:a0:32:5a:72:19:25:79:90:e7:98:e0:d5:70:0f:d9:09:
42:9b:b9:e8:4a:1b:e5:cc:a8:7d:7c:b5:fb:e6:a9:7d:4c:80:
12:10:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:38:58 2026 by rpki-client