Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: lUESrI8yGsrk/fQvWdFvrc4LkGmXTlB+tDOdE82yBok=
Subject key identifier: 26:B1:00:46:3E:AF:F1:E9:E9:AF:29:02:90:7C:93:44:B8:FB:05:2C
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019E3184EF59F24B5B4FA68EED4EB624FEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 16:00:56 +0000
Manifest this update: Sat 16 May 2026 16:00:56 +0000
Manifest next update: Sun 17 May 2026 16:00:56 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: QXP+tAXRd/ucq3J/ynFY7kfily+m1HNj0WCd3kO5fTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:ef:59:f2:4b:5b:4f:a6:8e:ed:4e:b6:24:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: May 16 16:00:56 2026 GMT
Not After : May 17 16:00:56 2026 GMT
Subject: CN=26b100463eaff1e9e9af2902907c9344b8fb052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:d2:26:fc:f9:8a:f0:ae:8a:b9:d7:7f:0f:
73:e3:1c:e5:c6:16:a8:67:26:55:9e:66:e4:5d:3a:
f9:e5:1b:97:80:d9:b5:ab:70:57:93:34:88:d0:a0:
8a:ed:84:56:7b:44:9f:ce:09:d5:92:7c:45:37:e7:
c3:8b:4d:f2:03:2c:be:1e:0e:e7:bb:3d:8f:cb:ad:
ca:ea:6d:ab:4d:65:f3:af:f5:89:9a:39:3b:d8:f2:
70:3f:cb:94:25:e9:84:8e:cf:18:a1:60:60:8b:88:
76:de:c7:d9:2a:13:3e:96:a9:3d:34:02:2d:e9:dc:
d6:f5:9b:14:17:5b:ed:c5:22:c3:f3:9e:a5:bd:76:
ef:37:1a:d2:cf:98:4c:9e:2d:5f:0f:d5:bd:e3:df:
6f:f0:c8:83:54:dd:50:2c:a1:2a:57:05:e0:bf:52:
7c:ce:98:80:f3:ff:99:50:d5:f4:45:5d:9a:7f:6a:
8e:ab:d4:b9:39:72:03:3d:be:86:a8:b7:e2:f7:60:
3f:0c:f7:ae:93:1c:52:af:82:70:4c:21:fe:63:09:
f5:40:e6:ea:8a:f2:53:d8:e0:1e:6b:b7:82:92:ec:
b5:9f:2b:29:8c:3f:35:fe:9f:9a:91:73:55:52:0e:
18:be:fc:08:96:c8:cf:8e:c9:70:f4:51:dd:f6:f3:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B1:00:46:3E:AF:F1:E9:E9:AF:29:02:90:7C:93:44:B8:FB:05:2C
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:89:a7:71:27:47:7c:f2:67:ec:2b:fe:3c:e2:d1:39:50:
e9:de:bd:44:8c:eb:e9:e2:0c:9a:1d:cf:54:d3:4e:7b:74:0b:
00:31:86:00:f9:64:39:b6:27:e7:e8:d1:6b:4f:86:b7:67:f2:
ac:10:bd:40:e7:a4:c9:25:2b:ed:6e:6c:78:5c:bb:33:52:6e:
9b:f9:17:18:79:12:12:1c:a4:a4:b7:0b:c7:5b:21:19:00:b6:
36:83:c2:32:5b:1f:4d:36:55:43:d9:e2:b4:b2:dc:67:53:5c:
ce:ab:c2:dd:0b:b0:af:23:cd:a7:f1:3a:7d:11:28:95:70:f0:
65:72:ad:5b:25:29:34:7b:33:50:f2:c6:c0:c3:b9:fd:b8:92:
04:c7:af:94:c3:9b:96:0c:f4:64:bc:3f:d2:df:05:8e:45:06:
92:b8:f8:a5:c3:d5:1f:07:4a:ea:7d:0e:c5:a3:60:29:0f:e9:
23:0c:c9:b6:14:53:5e:00:d4:b1:11:65:b5:29:c7:65:b0:cd:
91:43:1c:62:67:46:63:f0:01:dc:44:50:ef:27:a4:7d:7c:d6:
8b:5e:3a:e5:3b:8e:d2:e4:f5:d2:01:27:c0:d5:53:e0:bb:69:
19:45:7a:db:65:8f:8d:16:e3:24:4e:f8:76:43:17:cf:2c:9b:
8e:64:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:12 2026 by rpki-client