Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 8NBcbLcOHV4/rTk2QmvV2sBly+a671ajZgt33MZbj8Y=
Subject key identifier: 9A:5C:9E:67:3B:2C:D7:BC:23:8C:AA:38:C7:D3:7E:38:97:41:77:E2
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019D3865AAE06705D35267AC65A2F679A7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 07:01:20 +0000
Manifest this update: Sun 29 Mar 2026 07:01:20 +0000
Manifest next update: Mon 30 Mar 2026 07:01:20 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: XHgXJGc1phEtcMogQCQgCcUvwXWPOxsLyYTy7aKcLzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:aa:e0:67:05:d3:52:67:ac:65:a2:f6:79:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Mar 29 07:01:20 2026 GMT
Not After : Mar 30 07:01:20 2026 GMT
Subject: CN=9a5c9e673b2cd7bc238caa38c7d37e38974177e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1a:fa:69:a3:b2:06:45:24:7a:76:bd:65:03:
8d:54:8a:6b:6b:6e:0b:9c:af:94:14:eb:3d:87:35:
6c:b7:47:5e:d7:70:84:ff:45:70:40:00:1c:ad:cf:
e6:71:bd:66:a6:1b:93:f6:1b:fc:de:69:9a:51:bb:
99:02:90:6a:14:71:21:0d:69:aa:a7:b5:a6:c4:0c:
d2:45:b3:6f:6d:93:a5:6e:67:a7:27:88:f6:03:34:
18:a3:28:72:ae:2e:dc:79:14:b3:cf:8d:9f:a0:2a:
0a:93:64:8e:67:9a:75:95:dd:21:0e:b2:71:d8:5a:
ed:02:ff:1a:e7:70:06:68:45:cf:54:f5:e5:ad:ea:
ae:d3:bd:86:b7:6d:d1:d0:12:dd:f2:58:bb:72:07:
eb:d3:a4:04:09:4e:39:bc:ba:d5:14:4f:e9:ba:59:
08:6c:6e:a3:e6:86:de:86:1c:26:f7:5f:d7:0b:be:
2f:14:04:ac:36:83:9f:11:3f:11:67:3c:ac:b9:af:
b9:05:b4:44:48:c3:a2:9e:ad:80:3c:a6:30:b0:91:
23:b6:ea:af:5c:53:98:7a:f7:53:9c:54:a4:f1:22:
5f:a9:95:61:72:aa:ff:68:31:ad:c2:2f:c2:18:f0:
70:c9:83:53:7e:b7:12:5b:23:0f:95:cc:4d:7c:71:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:9E:67:3B:2C:D7:BC:23:8C:AA:38:C7:D3:7E:38:97:41:77:E2
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:ce:bc:10:0f:99:b4:1e:85:39:cc:0b:f7:47:52:06:8b:
87:28:98:b2:4c:82:c2:73:01:45:f5:8f:ac:66:4e:29:31:2a:
28:f6:3c:c2:de:58:9d:1e:da:1f:1a:0b:15:66:58:4c:f2:2a:
04:73:b6:85:54:33:37:b1:01:a4:3c:2a:92:7a:9a:52:76:4f:
56:34:0c:c8:63:31:0c:9c:31:c6:db:c7:bb:2e:d0:8b:09:b6:
cb:a0:e1:a3:b4:94:ae:42:52:98:bb:54:ea:b9:3b:25:f7:03:
cf:e0:19:dd:82:90:ba:5d:a1:42:0c:bd:b0:39:3e:41:c3:2b:
98:e2:70:70:ee:94:88:f9:8b:29:26:df:90:74:89:5f:d7:b9:
8e:02:ae:d6:58:a3:b6:30:29:8b:54:d2:ed:2b:1a:bc:6b:f1:
21:0c:e9:9e:d8:f8:29:6e:c0:1a:30:13:18:b6:1d:3e:ed:65:
fc:9b:c6:0d:9b:8d:35:fd:c5:1d:99:6b:39:77:3b:86:bb:a8:
4c:31:4f:6e:7e:68:18:4a:5c:f6:bf:52:fd:c5:00:1f:a6:a7:
f0:19:e0:11:bb:34:18:f9:0d:3d:09:b5:1e:15:58:56:b2:08:
16:a0:9e:29:09:57:f7:52:da:bf:c8:a4:c8:0c:af:7e:27:40:
cd:f7:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client