Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: NsC2kxejEO4AGD9r6ORaH85lFEeC323xly4Osaqjc5A=
Subject key identifier: 60:70:2E:2E:AC:B3:3F:29:45:42:91:34:67:2A:FF:53:45:98:1C:C1
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019D390A4B7C99C024F14CDADF5FC9067F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 050E
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: GSynZpX6oGmsB3HrhgE/0k7ZrcKkLD4vrLmZTC6vp84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4b:7c:99:c0:24:f1:4c:da:df:5f:c9:06:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=60702e2eacb33f2945429134672aff5345981cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:3e:c7:4c:37:65:2b:ee:36:61:39:d3:d5:
0a:4f:e1:1f:44:dd:f7:59:cd:dc:48:f2:81:b2:b1:
2d:f8:2c:81:bc:ba:41:8f:41:7a:ee:05:db:d1:5d:
8c:2e:cb:4a:7c:9f:4e:aa:11:74:21:99:ac:70:36:
71:99:05:d2:08:33:6a:32:d0:64:51:7b:b7:f9:a5:
14:8e:5d:54:93:26:1c:94:2f:ba:51:ed:c2:f4:68:
18:55:10:bf:82:47:18:52:67:b8:d0:0d:fd:4a:61:
4b:b1:51:5c:28:24:d4:1b:63:8c:e1:34:38:07:94:
0d:48:1d:fb:8a:8d:5e:97:a3:47:a7:c1:1a:39:9c:
28:ca:b2:65:1f:8d:8a:cc:fd:87:49:8a:b1:57:ab:
ca:cd:71:a5:39:96:78:3f:20:f0:61:31:58:74:c9:
ae:fe:0f:a4:ec:ee:82:d6:9e:24:59:78:fa:14:ef:
83:4e:11:60:d7:d9:54:0b:18:8a:8e:f4:f1:c3:02:
f4:71:4a:0b:2b:62:9f:73:b1:2b:5c:23:89:c4:08:
ba:c2:11:ca:de:82:54:46:30:34:6a:f2:07:c0:9f:
36:25:6e:3f:bb:17:d0:92:a6:f4:57:ba:bc:48:9f:
5f:7f:f7:05:9c:e8:1f:6d:2f:f5:1b:18:a4:79:fc:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:2E:2E:AC:B3:3F:29:45:42:91:34:67:2A:FF:53:45:98:1C:C1
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7b:d4:8d:de:bf:35:90:29:98:95:fb:70:96:3b:1e:e3:79:
71:23:91:70:48:8a:a5:e7:f1:d1:0c:51:4d:0e:ba:d8:a7:36:
7f:8e:92:6a:dc:b1:2f:fc:af:0f:8b:ce:48:9c:4b:b1:0a:b8:
fb:a2:b0:39:d4:2f:30:af:0f:6e:6e:d4:37:a6:8d:a9:62:55:
7f:8b:13:22:c7:ea:58:25:79:2d:8f:af:80:90:97:f8:67:37:
0d:fe:ba:34:74:82:c2:ed:21:de:cc:55:99:07:52:aa:30:a5:
35:8a:25:b9:a5:ee:bb:b9:d1:a8:c9:59:4f:9f:64:2a:62:9b:
8a:fe:82:39:55:d0:41:ca:cd:4a:3a:c0:cd:d1:a4:84:d3:fc:
d7:25:d7:52:f8:74:bf:26:53:1b:69:2b:f2:a3:b4:57:d4:62:
04:c9:df:25:cf:d5:db:78:5f:b6:02:8a:79:2e:21:03:22:89:
0f:71:b8:ed:fd:3d:9d:1f:cc:63:ba:02:40:7c:6f:24:53:85:
b6:59:90:73:ad:cf:9d:12:2e:27:10:e5:e3:70:79:12:90:97:
e5:72:db:7e:ed:9c:3f:ed:c6:19:c2:f8:2b:76:dd:45:78:4c:
f6:a8:f1:48:1c:58:ba:b6:8a:60:0e:51:ed:cc:1d:ea:44:51:
d8:0e:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:07 2026 by rpki-client