Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: 1100BKqPMUKjPLqWJq5wfNiEnCf+L3vG/aPqpco5cYs=
Subject key identifier: BE:CE:1C:1B:CB:20:A1:97:9E:9E:25:37:BB:F2:5E:0D:EB:66:85:B0
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 01A13FA7C6990CDB8A9ECFDC322FCBFF67CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 13:02:02 +0000
Manifest this update: Thu 15 Oct 2026 13:02:02 +0000
Manifest next update: Fri 16 Oct 2026 13:02:02 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: pm2I6QVoP3lfOXqSFXZhh+ZrJm3sZmYOL69GkidlpA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:c6:99:0c:db:8a:9e:cf:dc:32:2f:cb:ff:67:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Oct 15 13:02:02 2026 GMT
Not After : Oct 16 13:02:02 2026 GMT
Subject: CN=bece1c1bcb20a1979e9e2537bbf25e0deb6685b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:bc:af:cf:e9:33:7a:c0:22:90:c1:c9:93:
10:e1:dd:89:2f:19:86:f9:f9:b7:13:87:88:1e:df:
76:06:00:5c:be:a7:77:d0:ca:38:cc:62:b1:9e:f7:
22:53:22:fb:95:71:83:35:97:45:6c:62:61:ad:15:
87:9e:d2:94:31:73:de:df:f0:81:d3:0c:e6:b7:47:
8b:17:ae:2d:28:d5:30:73:86:24:14:9d:64:11:b1:
5d:6d:6b:b1:0c:6a:fc:32:2c:4c:6e:b0:ca:73:bc:
14:e4:c2:92:0a:88:1c:c5:7c:70:a9:d6:1c:14:7f:
44:c7:4f:6e:cb:b2:55:57:05:0e:2a:f0:81:02:8b:
59:b0:04:f2:a2:53:2f:36:74:fa:43:25:6f:96:e5:
66:f6:93:3d:ba:99:c9:0c:e7:54:c3:91:fe:6d:3a:
af:ad:aa:bc:66:bd:b8:92:1e:69:cc:7f:d3:62:bf:
34:a9:ab:7c:08:f9:28:de:5c:95:64:39:e2:d9:e4:
ae:14:30:68:17:32:4c:bd:9d:f4:55:d4:c7:23:d2:
c1:c8:72:67:6a:22:7f:ab:22:f6:c7:bf:44:6d:9c:
fc:13:6a:da:8e:e7:a4:9b:3d:06:8c:bf:2f:66:51:
41:b1:58:90:52:21:96:d7:d1:07:15:d4:7a:98:98:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:1C:1B:CB:20:A1:97:9E:9E:25:37:BB:F2:5E:0D:EB:66:85:B0
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:e5:72:bb:05:c8:06:3b:5a:af:21:80:dd:76:5a:b9:20:e6:
34:05:cd:e6:df:20:0e:2a:75:af:8e:5b:86:09:70:f0:c9:c8:
85:39:91:d2:6c:c3:db:ff:df:f4:6a:7e:7f:7e:a1:b6:0f:21:
39:80:dc:06:e9:10:89:93:f9:f4:6b:86:cf:f8:c0:87:72:f8:
9a:fd:16:33:48:7c:52:38:91:be:5e:b1:4d:98:f1:0c:5b:ed:
df:49:cd:48:09:2c:92:19:d6:17:cd:ab:76:9e:4e:74:d7:5f:
ea:3a:89:26:b3:cb:af:a2:a3:1c:cf:64:ff:35:a6:3f:0a:3c:
b0:d6:15:c4:96:cd:00:61:09:59:43:fc:bb:14:d8:e9:87:87:
8f:83:43:a9:4f:ab:ba:bd:d2:7c:46:ee:9c:94:22:e2:1e:37:
8b:a9:59:2d:00:32:27:e5:52:f5:8b:a1:4f:df:d1:ac:91:4d:
f4:9c:1a:4d:58:cd:ad:57:d9:b3:6d:08:86:2a:82:c2:ea:3f:
d2:e6:67:35:09:76:d7:b2:3a:72:ba:85:75:e9:e8:aa:7a:9a:
ef:d0:75:53:05:8d:ad:3a:90:ba:61:d5:9f:72:d3:ea:6d:a4:
07:9f:0c:aa:1e:ee:c4:ce:3f:fe:c5:1e:9f:04:2d:c4:c8:23:
df:61:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:03 2026 by rpki-client