Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: vO5ZV+kKyrokVHoKCu4UNGP/oKykufuFNnmAjAwdlug=
Subject key identifier: 9E:A2:47:95:74:15:CA:DF:00:37:AC:E0:86:BC:E4:B7:F0:29:1B:42
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 019E30058F19914EB7C4DF4E54EB3EECCFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 14C3
Signing time: Sat 16 May 2026 09:02:11 +0000
Manifest this update: Sat 16 May 2026 09:02:11 +0000
Manifest next update: Sun 17 May 2026 09:02:11 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: 49Sl+PKh46syK2CeOw1bJE/XV0FwS0YRWraGwJaXpss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:8f:19:91:4e:b7:c4:df:4e:54:eb:3e:ec:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: May 16 09:02:11 2026 GMT
Not After : May 17 09:02:11 2026 GMT
Subject: CN=9ea247957415cadf0037ace086bce4b7f0291b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:62:45:33:c9:a4:12:95:73:d9:4b:68:51:1f:
cf:a5:56:36:d1:16:61:fc:c7:19:b2:5a:78:0b:15:
d8:a2:97:5d:73:0e:1c:2a:41:79:36:dc:9d:56:e2:
6f:33:f0:9d:de:92:80:8b:43:4a:da:31:ca:34:3c:
15:c1:c0:98:49:27:6a:a9:d3:e8:7f:78:d9:40:31:
95:30:d7:76:f2:36:63:19:f4:2d:cd:fb:55:f9:db:
63:62:35:03:8b:e8:71:10:7f:c1:14:f3:df:4f:af:
81:d4:67:48:fa:55:b0:c8:d0:fa:8e:0f:1e:0c:89:
f1:60:29:42:d2:10:cf:52:ac:37:8b:aa:30:ad:38:
d6:28:dd:64:24:91:4e:fc:cb:7d:e5:87:0c:73:82:
07:30:1e:74:2f:b3:9f:57:77:8d:8a:47:51:15:81:
ea:59:39:0d:e4:6f:67:02:40:2a:32:5c:55:af:8b:
2f:0a:8b:64:65:8f:54:97:4d:12:6e:5b:35:b6:c3:
e4:fc:19:c3:7a:20:bc:86:91:cd:af:c7:90:75:d8:
21:b1:b1:ff:83:79:c4:b2:e3:13:fc:38:5c:d2:1e:
6c:d0:a1:c7:a7:6f:cf:ed:8a:b0:82:4d:e0:c3:24:
55:19:e1:93:e5:8c:2a:bf:84:9f:65:45:ab:77:42:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:47:95:74:15:CA:DF:00:37:AC:E0:86:BC:E4:B7:F0:29:1B:42
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:f1:be:72:a2:88:f9:0b:bd:3f:ef:45:17:e8:04:ad:e4:
16:3c:ad:4a:c2:d7:58:c8:e6:f6:57:00:3b:f9:1a:07:d8:9d:
ad:01:0a:fd:87:d1:f7:c4:a7:b6:a1:5d:16:ac:d3:a0:99:48:
d1:07:68:d1:13:2e:c2:c1:8c:34:72:1a:d4:90:fe:3c:6c:ce:
a2:51:07:58:7f:a3:77:d5:b9:ea:a7:ec:39:44:e4:a6:8f:ae:
fa:7a:76:03:84:18:38:2c:ca:e6:d5:7e:b1:a7:9e:99:5c:75:
70:34:e0:e8:8f:f6:17:e2:94:6b:6f:e2:b8:48:a7:c2:b7:64:
db:39:6a:0b:b3:fe:fe:2d:78:4e:7c:e9:75:78:98:20:d3:2e:
7a:1c:e8:fb:8a:d0:7d:bd:34:75:aa:2e:32:62:61:2a:4b:9d:
00:4c:1d:f8:81:5c:1a:a7:f2:4e:ea:96:13:40:d5:a9:6d:d2:
4c:2e:ee:e6:ab:eb:ce:76:bd:b8:15:dd:1a:a4:d3:66:0b:16:
59:0e:a7:80:2e:81:d9:83:0a:c8:3d:cd:70:0a:75:a0:3d:3a:
be:72:28:46:cd:d0:be:11:b5:30:07:f5:b6:0c:ff:10:d9:da:
1f:dc:3d:5f:96:2d:05:ac:68:ce:b4:4c:6c:50:7f:41:e9:5d:
91:73:f7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:37 2026 by rpki-client