Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: +Q5a4elEBZx7PfLEMOZZd2U0CwzTdZMTUR4zRPkhfNg=
Subject key identifier: 85:A8:11:E1:27:E9:F7:0E:05:84:34:F9:81:34:54:6C:57:3A:D0:DB
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019D3865B0D98FBB95A1F2BFBABB14345865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: 6y1mAzebYxHbMSWxX+SN0JkkVGX3PQ9jwshXDQMcwgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b0:d9:8f:bb:95:a1:f2:bf:ba:bb:14:34:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=85a811e127e9f70e058434f98134546c573ad0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:38:17:57:7c:15:4d:bb:19:43:4a:00:ec:
28:c4:84:ce:11:3d:e8:af:e6:0b:b4:f0:76:d2:c2:
18:02:2e:88:ac:ec:89:ea:6d:f8:06:a4:8c:2a:69:
5c:4e:72:0b:f8:3d:d6:09:f9:e4:49:5e:54:a4:87:
65:11:02:79:7e:3b:3e:ff:44:3a:65:02:8f:4f:74:
09:28:5e:9e:e2:42:42:eb:f6:a0:61:91:82:de:98:
9d:3b:3d:16:dc:0c:dd:f8:8f:1d:2c:43:38:e0:67:
53:64:db:95:48:7f:f4:b9:02:8f:d1:ae:c9:c8:16:
6e:e6:c5:ff:93:e3:bf:42:48:46:31:b9:97:84:e8:
ab:d8:ee:4b:81:3a:63:30:58:9c:e6:a2:e2:c8:c8:
1c:1c:d4:db:94:32:73:1f:9a:93:21:dd:80:13:01:
17:c7:d1:07:c8:b0:a8:26:d8:81:fa:f2:dc:5e:39:
22:40:43:c1:f3:3e:01:23:d7:2e:8c:e5:64:2c:3a:
a4:ea:c0:eb:c2:ae:fd:9a:27:45:4e:fa:28:b7:cb:
c3:1a:03:51:0a:c1:b6:1d:d8:21:a5:b1:61:75:31:
07:da:24:19:09:72:22:1c:7c:d0:5b:0f:85:2c:11:
17:c0:c3:1a:d0:76:5d:e0:80:32:cd:8a:ae:32:57:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:11:E1:27:E9:F7:0E:05:84:34:F9:81:34:54:6C:57:3A:D0:DB
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5a:ca:70:0f:0f:99:3d:22:64:08:e4:99:c5:37:9c:d0:d7:
7a:42:58:8d:0a:e1:b3:b4:62:0c:6e:40:f0:d0:67:06:52:30:
36:e1:99:a3:aa:ba:e6:28:64:96:89:cb:a1:a2:0b:9b:f3:bc:
13:f0:2d:5c:a7:72:04:b5:3a:c3:ef:e6:5e:8b:7e:a5:73:83:
08:84:7b:76:1d:77:99:17:01:4b:fb:b9:a9:88:6c:80:1c:36:
e2:42:7f:3a:db:f5:01:dd:32:29:33:b4:62:13:57:0b:71:8c:
c2:cf:17:e2:73:69:77:27:2a:34:10:1f:67:47:bf:2b:ff:7e:
0e:c6:b9:61:be:6e:50:51:4d:d6:60:5c:77:66:66:06:3d:5c:
b5:62:fe:69:a1:37:8e:99:c7:a4:d1:d2:04:30:a8:f8:57:27:
0a:9d:0f:af:00:6f:04:0c:70:48:12:08:dd:a7:ff:bc:d1:53:
4a:73:0d:ca:ca:c2:e2:87:da:49:dc:2a:1d:54:80:23:ea:12:
81:ba:9c:8d:b1:b4:ab:fe:0c:a6:94:42:76:a9:fd:35:c8:85:
1c:af:2a:12:63:e8:21:e2:c4:c1:77:ab:02:48:b1:98:31:5c:
c9:1a:15:d2:85:85:f6:e6:41:4d:57:f2:80:d5:31:5e:4c:71:
16:c9:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:31 2026 by rpki-client