Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: LQmudsYoIPQBsGZX/dWUqe3euE/fexclRou0JNE09Ig=
Subject key identifier: 21:E8:C0:00:C8:F9:02:A7:D1:16:E9:E8:93:33:CB:D7:7B:E7:BF:88
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 01A13D134057D38B11BD75D1A4264FAE41AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 01:00:34 +0000
Manifest this update: Thu 15 Oct 2026 01:00:34 +0000
Manifest next update: Fri 16 Oct 2026 01:00:34 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: 44MPUwbJJrIfNRV4kudkMvuLnBUJIUTF+r+8nKSq41c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:40:57:d3:8b:11:bd:75:d1:a4:26:4f:ae:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Oct 15 01:00:34 2026 GMT
Not After : Oct 16 01:00:34 2026 GMT
Subject: CN=21e8c000c8f902a7d116e9e89333cbd77be7bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:97:8e:5e:bd:97:40:e7:02:db:76:6b:4a:
c5:eb:f8:d2:71:14:6e:25:64:e8:da:09:9a:d2:36:
ac:8e:a6:d6:57:03:d2:d4:f9:c9:bb:d5:10:fd:aa:
2d:92:75:b9:17:31:2e:bf:53:f9:1a:76:3b:34:ee:
bc:44:96:e7:92:34:27:dd:19:ed:13:78:69:2b:9c:
38:dc:dc:1f:13:aa:c6:88:98:9b:03:a6:55:0d:eb:
57:4b:63:e9:a0:a1:03:ee:f5:c2:e9:70:ad:ca:2f:
5d:8f:34:7e:3e:24:7f:55:44:e5:8a:7c:d3:32:60:
8f:84:0f:c1:7c:2d:dd:2b:83:4b:ba:37:24:93:28:
c6:5e:4c:7c:e9:1a:03:43:8a:a4:77:2e:d1:39:5f:
d3:46:14:52:2c:8d:2e:ee:15:a8:24:f8:14:ef:7d:
46:65:ec:04:a9:dc:4e:40:a8:5c:57:04:6e:1d:55:
e3:0d:1d:56:9e:47:a5:b6:96:8d:ac:32:44:d7:9c:
9a:f9:a1:f7:a4:e7:4f:97:82:c5:92:65:52:d1:4a:
45:a0:3d:63:eb:c0:6c:03:ba:39:3d:10:9b:a2:77:
64:05:fe:30:46:6d:48:36:1d:db:a9:9b:d0:19:73:
6f:c3:36:14:db:3d:f6:7b:61:32:9e:e2:83:5e:43:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:C0:00:C8:F9:02:A7:D1:16:E9:E8:93:33:CB:D7:7B:E7:BF:88
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:86:ac:d0:12:e3:58:3e:cf:99:92:12:b1:15:78:b4:25:
2d:ab:ca:5f:26:ef:84:13:88:75:99:3e:bb:bf:f5:03:3e:43:
ca:7b:4f:34:4f:97:25:2f:64:6c:dd:b0:84:53:2f:a6:9d:a7:
91:a5:7a:22:c0:33:5a:e2:01:fa:19:d6:d9:a3:5b:fd:88:52:
b7:97:52:c2:5a:60:04:ce:1c:38:23:28:62:d8:29:43:1e:8a:
4c:dd:5d:76:63:43:5b:90:66:cb:4f:ca:f2:c1:a0:45:66:51:
ed:5c:a2:79:6a:67:bf:51:3e:3e:d8:31:80:c0:bb:89:08:02:
6b:a5:94:67:ab:92:99:05:d1:51:a3:c7:f9:62:27:2a:b7:ec:
87:cb:75:79:1b:9e:64:12:29:c0:bb:ac:99:bb:b9:fe:7f:50:
40:fc:27:5c:f1:65:95:0f:e4:6f:c2:2e:05:32:94:e9:33:df:
fa:31:00:b7:42:f7:2d:91:3d:57:32:4b:c2:1d:b2:d8:07:c0:
f8:3e:21:d3:bc:43:52:d4:91:31:23:4b:81:f0:9d:e6:24:1a:
d9:09:37:0a:d7:9f:6a:13:b3:41:44:3a:60:b8:71:55:bf:3d:
89:c2:62:ce:7a:8d:ec:9d:bb:bc:bd:61:c7:6c:91:7f:6b:d2:
4c:f4:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:25 2026 by rpki-client