Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier: SR279aogrIeBIwQhULbuI2/dvV6FmSvzYetpjyxbMhw=
Subject key identifier: 5A:26:C1:01:A7:FE:E6:83:6F:FF:26:1D:32:8B:70:6D:23:86:5A:8F
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019D3A8AA9F68ECAA0EC3F6EC0B91BD35E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number: 40
Signing time: Sun 29 Mar 2026 17:00:59 +0000
Manifest this update: Sun 29 Mar 2026 17:00:59 +0000
Manifest next update: Mon 30 Mar 2026 17:00:59 +0000
Files and hashes: 1: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: NxTrSMqZYlIgY7W8xLEv3xU6RQu7rvLTIS+YGab+pjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:a9:f6:8e:ca:a0:ec:3f:6e:c0:b9:1b:d3:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Mar 29 17:00:59 2026 GMT
Not After : Mar 30 17:00:59 2026 GMT
Subject: CN=5a26c101a7fee6836fff261d328b706d23865a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:90:72:38:93:64:f5:56:55:59:af:0d:de:
25:66:61:d5:d4:49:de:71:78:53:bd:b7:e6:62:2a:
11:9f:a4:d1:b6:90:92:40:ff:7e:ba:cd:b3:f1:42:
bd:ed:a6:cd:3e:98:af:f8:c1:f5:23:e0:96:f6:46:
3e:d9:55:af:8c:03:a8:21:36:77:ee:64:01:2e:58:
85:e1:4b:1c:47:4e:90:19:71:95:24:0b:72:44:cb:
80:6f:76:d0:b9:7c:60:10:05:88:02:81:80:cd:23:
98:29:13:44:8f:a3:00:3d:dd:03:a6:f4:56:f3:83:
b1:2e:5c:10:18:34:99:c3:4b:88:20:c5:de:78:69:
05:1c:c5:76:d2:62:19:72:5a:26:56:b5:0a:2e:d9:
cf:78:fd:13:47:e7:04:a4:c7:94:70:e7:20:eb:7b:
8b:5b:7b:dd:8f:62:07:30:a0:fc:e4:19:ec:d7:9b:
b7:7c:e9:66:45:5c:c3:dd:43:62:c7:95:9c:37:ad:
9a:fc:38:2f:3e:65:d8:24:be:6b:e9:db:01:27:ec:
73:ed:c6:89:51:0d:ba:ec:46:b5:f4:03:f6:ae:cd:
1b:23:bc:34:98:fa:e0:bd:02:86:03:26:ac:3c:cb:
b4:3a:dc:fa:53:13:f0:d7:37:fb:9a:f1:d1:d9:96:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:C1:01:A7:FE:E6:83:6F:FF:26:1D:32:8B:70:6D:23:86:5A:8F
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:62:c8:81:6d:72:51:d9:28:8a:f5:f6:a3:c7:d9:2a:85:
e2:ca:5e:09:19:14:9d:03:50:aa:4b:e9:c1:03:50:18:7b:f9:
c6:fa:ef:97:00:66:37:12:02:ef:ee:ed:98:20:21:77:54:d1:
94:20:0c:61:2c:fc:9f:81:4f:2e:2e:58:b3:0b:15:c5:b4:c1:
fc:14:1c:23:4a:fd:01:17:08:64:03:b3:6b:6e:0c:72:99:b4:
d3:6d:63:f2:30:9e:5a:52:8e:4c:22:e0:9e:b5:7e:66:2f:77:
ca:5e:2e:ea:c3:ef:94:73:63:01:48:09:f4:df:a3:b3:9b:aa:
1e:dc:e4:53:fd:aa:22:0c:2d:3a:02:bf:a7:a6:33:25:fb:e9:
83:a1:7b:0c:60:3b:18:8d:9b:5e:ea:36:35:f1:75:15:2d:c5:
6c:a8:dd:98:78:5f:69:5b:26:ac:82:32:88:cd:6a:d2:bf:80:
f0:49:8d:0e:30:60:0f:22:99:7e:fe:ba:13:eb:a5:e5:d3:73:
94:0c:8a:21:50:58:2c:38:8e:04:35:66:91:71:64:93:5a:01:
e6:22:f8:cb:5f:51:4b:9f:88:20:9b:20:30:90:2e:eb:ff:82:
f4:d6:2f:28:88:98:75:b5:e6:1b:b5:b0:e8:d9:05:34:4e:d4:
ee:a7:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client