Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: Q1OM9am24b793/vm5Qh61dpnSsh1Lym3hsSoBWdqYOY=
Subject key identifier: 3F:E7:8A:97:F9:7E:17:AE:FF:A0:3E:07:FE:73:76:DF:F3:39:60:68
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 019D38D29B6CA6F9C15EEB067F715583AEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 1443
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: gZy78/jalMfioA9SmGbTUWAzIIyzyX9I1QdGoNh/DcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9b:6c:a6:f9:c1:5e:eb:06:7f:71:55:83:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=3fe78a97f97e17aeffa03e07fe7376dff3396068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:dd:5b:a8:01:84:79:7a:ee:7c:f1:38:83:
71:3b:87:ed:f8:31:06:a2:25:bc:32:42:6b:9d:82:
1f:1f:57:e1:61:b0:ca:8c:40:fa:3a:ca:e2:23:9d:
27:1e:2a:7c:f6:b8:bd:ca:93:b3:e0:33:24:73:42:
d8:18:a4:b3:43:25:87:54:18:4b:58:f3:f4:c1:30:
d0:41:54:5b:b1:6f:cb:a9:a6:cb:fd:91:4c:0f:bc:
6d:5e:06:5b:d3:78:da:73:bf:9e:4e:68:3b:6e:38:
84:37:1d:16:6a:5b:3f:a2:bb:1b:38:3b:60:04:af:
15:e7:70:ff:25:05:8d:a3:ce:99:4f:9b:c4:b0:8d:
fc:8b:60:c0:f3:65:fc:2b:84:16:b3:ae:eb:08:6f:
36:af:e6:1b:c6:b0:74:03:8f:4d:fa:40:09:ec:1a:
bd:cc:92:d4:2c:59:ee:a7:74:0d:66:d8:76:3c:73:
da:94:28:87:d8:e5:ac:99:8f:64:f6:7b:65:8e:99:
2c:63:63:b8:92:b8:64:fa:71:47:01:2e:28:a5:a9:
cc:97:cc:e3:e9:e2:05:46:02:8a:b3:2c:de:50:77:
c2:9d:ea:b0:00:6d:80:4c:0f:6b:75:97:9b:5d:41:
c5:73:ae:d8:f1:65:f1:e3:09:66:70:d8:ef:c1:d4:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:8A:97:F9:7E:17:AE:FF:A0:3E:07:FE:73:76:DF:F3:39:60:68
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:f1:54:2b:d9:6b:34:f9:4d:13:b2:ba:1c:46:26:56:ee:
ba:29:77:92:2e:56:5e:36:e1:c8:72:4b:18:bb:26:73:dc:57:
95:31:c9:82:bf:dc:9f:d5:a6:e2:6a:ed:c9:cb:13:b5:a9:1e:
09:17:54:d2:86:f1:05:5a:f8:68:ff:41:5b:b0:03:7b:59:4f:
4c:8a:87:b8:58:69:c6:a0:9a:16:61:8c:f5:d3:4f:88:26:bd:
e9:8e:fb:23:b2:25:0f:d3:c1:a8:fe:ff:51:99:57:6c:f6:78:
c4:5c:00:a8:cc:d7:fc:be:3b:18:47:f0:fc:f9:a2:a4:4d:57:
52:6e:2e:70:bd:e1:56:64:1c:30:b6:3f:11:9d:98:ae:f3:90:
f4:e7:24:51:77:f9:ad:88:f5:b7:91:8d:0f:45:eb:cb:f6:3c:
89:4f:21:42:78:52:03:62:e9:6a:96:25:33:f7:ea:ac:31:c3:
b6:45:94:5e:60:5f:8b:c3:52:83:59:43:d4:61:3c:a9:f5:cd:
5d:4b:b4:38:a9:2b:16:42:ba:b8:26:d3:4f:fb:9a:1e:fb:be:
b4:8e:1e:75:38:fb:40:a2:97:8b:64:11:90:23:b3:72:a0:46:
6c:05:ed:d5:70:71:4c:5b:52:e1:51:d7:39:16:26:54:c1:69:
9f:11:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:56 2026 by rpki-client