Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: KCthuAapCVX2/Gu9qLTKo5Nb4oZSq7K4InTxSOKRw4U=
Subject key identifier: CA:FE:5C:7B:57:2B:E8:72:6A:C4:81:98:11:6A:C4:FD:97:0F:36:CA
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019E303B394DF930EA4F8FF9D3041CBD4E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 058E
Signing time: Sat 16 May 2026 10:00:47 +0000
Manifest this update: Sat 16 May 2026 10:00:47 +0000
Manifest next update: Sun 17 May 2026 10:00:47 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: sAzeJjyIy8NqTWAxbR+v9GZr8w5D/JHeLkbT+t2J5qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:39:4d:f9:30:ea:4f:8f:f9:d3:04:1c:bd:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: May 16 10:00:47 2026 GMT
Not After : May 17 10:00:47 2026 GMT
Subject: CN=cafe5c7b572be8726ac48198116ac4fd970f36ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:28:7f:74:5f:92:c3:b7:9a:ce:3e:54:e1:
dd:4d:a0:db:34:db:76:7b:f9:83:c4:d5:2c:1b:ba:
ea:cc:aa:22:ff:9d:8a:7c:46:62:32:a4:1e:31:28:
ea:65:fe:81:76:05:2c:a3:da:24:c6:d9:7f:5e:32:
40:95:f4:14:a5:26:7e:ac:f0:8d:69:b7:96:34:f1:
45:98:85:d2:63:d3:b6:79:d9:7e:bc:e9:ee:f2:e3:
c6:48:7b:15:8f:7c:68:66:da:e6:a6:82:92:2f:80:
ba:89:04:21:87:ed:7b:95:67:97:3a:dc:94:fd:59:
94:42:59:5d:22:8e:11:ad:5f:a3:26:ee:f5:73:3b:
64:2c:7f:9e:e3:80:d8:6d:d4:10:97:73:79:48:48:
7a:8c:55:33:29:57:d4:c3:15:47:f0:a5:bf:d1:2a:
51:9d:29:b5:4b:62:b9:dc:53:83:11:21:b9:20:b1:
90:7a:5b:85:41:a8:e7:7a:f6:dc:cc:fb:43:fb:cc:
44:9b:86:82:f6:c1:ef:5d:8a:2a:0c:11:95:ca:db:
e4:09:16:e5:b4:7d:7f:c3:bf:5a:ec:65:ce:dd:e9:
24:ee:93:b9:2e:4c:07:50:5c:04:f2:ba:e3:1b:6c:
a3:7d:84:86:79:4b:25:dd:c4:5b:2f:0e:90:c9:ab:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:5C:7B:57:2B:E8:72:6A:C4:81:98:11:6A:C4:FD:97:0F:36:CA
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e3:8b:71:79:b2:0e:5b:ca:99:04:5b:c3:3b:18:b1:8d:ca:
07:7a:1c:20:d4:8e:a2:3f:44:e0:04:9f:f1:07:52:8e:e8:d5:
49:e2:da:99:a2:86:39:71:41:38:39:58:e1:75:f0:3d:0d:41:
3e:3d:26:ff:9b:d7:f6:f1:ef:fe:33:2d:e6:38:2b:21:55:cb:
d5:74:33:62:07:ea:d3:9d:be:f7:9f:6f:91:a8:b8:48:80:d2:
c0:80:94:46:91:98:19:53:d9:6c:3c:50:ca:d2:6c:36:9d:2e:
03:fc:7e:fd:b1:b9:f0:61:a9:8a:58:dd:1e:c7:0b:f3:85:66:
94:43:7c:ac:c0:9a:eb:cb:9c:d3:71:af:89:cd:13:77:02:c3:
4a:cd:67:33:49:c4:cc:0a:30:22:d2:5f:59:4e:02:81:6d:d2:
0a:66:46:a0:05:6d:1a:52:27:30:15:02:a3:f6:a4:60:1f:ff:
36:bc:2c:fd:fc:74:12:fd:de:0d:95:f5:d0:83:83:ef:93:7e:
d3:21:11:61:f5:03:38:41:b8:20:af:80:2f:ec:df:2f:c1:49:
1a:a7:00:23:08:ca:58:5b:e5:55:df:36:24:59:e3:66:92:08:
ff:72:6b:97:d1:78:a2:d1:fb:4a:90:6a:ef:41:0a:ef:17:0e:
d9:4b:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:11 2026 by rpki-client