Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: Idpqt+Upez5o5ambCqryRE32VHLjGyLMg/zClYHo+r0=
Subject key identifier: 24:08:37:7C:AB:8E:A8:7C:39:09:03:D1:8A:B7:85:C5:82:19:7A:84
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 01A13E259FDC93F57AE6622F578010290E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 1658
Signing time: Thu 15 Oct 2026 06:00:15 +0000
Manifest this update: Thu 15 Oct 2026 06:00:15 +0000
Manifest next update: Fri 16 Oct 2026 06:00:15 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: s9BwTD2UUDE6NazWQwgxCqVyRkmpPc1GLm1dcRohLvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:9f:dc:93:f5:7a:e6:62:2f:57:80:10:29:0e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Oct 15 06:00:15 2026 GMT
Not After : Oct 16 06:00:15 2026 GMT
Subject: CN=2408377cab8ea87c390903d18ab785c582197a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:11:a1:78:66:19:12:e4:85:b4:7c:df:b4:
bf:ca:57:bf:c2:e9:f6:63:50:70:5d:2b:49:57:1d:
5e:0d:ef:31:f8:38:a5:20:a3:94:a6:61:8d:3c:61:
c8:b4:e8:e6:96:05:74:0a:5a:08:cf:25:07:95:2a:
3d:dc:4d:0c:b4:4f:97:e2:cf:e9:94:04:e5:b3:1b:
57:ec:a8:e7:40:63:48:f5:14:12:3e:b6:20:9d:35:
2a:a2:7f:72:db:6a:df:fd:25:65:c5:97:61:fb:a2:
ba:66:cf:b8:79:a1:1c:57:3b:c3:8f:68:0e:66:cb:
5d:14:e5:71:70:b7:0b:e1:e6:31:ca:cf:7e:1d:c5:
de:23:d5:4e:0e:84:3f:29:95:84:7c:c1:bf:a0:29:
8a:52:c2:f5:2b:99:b1:f0:14:c7:89:c5:84:0a:21:
eb:1c:1e:bc:25:c0:42:82:b3:8a:14:92:cc:00:2a:
ba:98:39:45:99:78:c2:ae:90:01:ae:f3:34:b6:43:
e9:a8:bd:0f:4f:0f:0b:83:db:69:63:ca:af:35:a0:
9d:2b:e1:48:5f:3f:cd:b5:26:1a:a4:b2:d5:33:2c:
20:bf:b2:df:0b:6f:56:f0:92:dd:45:96:17:71:0c:
43:ef:98:ef:7d:78:7c:1b:26:b4:b3:5c:95:8c:8b:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:37:7C:AB:8E:A8:7C:39:09:03:D1:8A:B7:85:C5:82:19:7A:84
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:db:07:4b:48:bd:a4:20:05:ff:97:eb:78:b3:06:2e:73:
ed:b5:f8:91:a6:12:08:06:d0:23:ed:b4:42:7a:77:c8:2e:4e:
a5:c7:39:e9:22:39:ed:8b:5f:7b:f6:47:72:70:5d:07:e9:dd:
85:ff:d1:59:76:56:19:69:5e:a7:2e:6c:14:20:37:56:2d:42:
bc:6c:f5:90:8e:e6:7f:17:f8:c3:a4:2d:10:91:8a:11:f4:9b:
f5:db:83:1f:51:74:75:c8:44:15:1c:ec:09:7b:1c:9e:35:e5:
7a:b9:2c:1a:b9:6b:72:66:76:07:88:66:17:65:cf:d0:25:7c:
46:ca:83:50:b0:fa:bf:63:e8:6b:73:6b:f2:26:59:89:6b:7e:
f3:72:32:5d:55:0f:52:01:bb:f2:cf:fc:00:fc:55:9b:83:53:
7b:30:a7:49:ed:f4:bf:9d:07:1d:8a:1d:34:91:4b:d7:d0:7d:
2f:9f:f8:63:f3:de:9a:5d:22:73:cb:6a:14:e1:c3:3a:25:53:
2b:39:3c:6a:5e:b4:f9:9c:c0:ee:e5:95:91:b3:93:f0:ef:fe:
c4:85:62:72:ec:d8:36:53:8f:b5:0d:8d:46:ec:4c:62:9d:3c:
e9:8d:9b:57:1a:8e:6f:d8:56:61:94:7c:b6:61:8b:0c:a6:e7:
19:13:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:48 2026 by rpki-client