Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: 5uQCZITLCR0qlJdP9a0P8OIrWgw7J+Ds8f07f0emVKM=
Subject key identifier: 7C:91:9C:43:EF:84:64:0D:3A:7A:14:F3:A1:09:07:5A:A8:58:74:98
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 01A14F1A557549BC8B44258BB6BBBF5D79E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1AAA
Signing time: Sun 18 Oct 2026 13:01:28 +0000
Manifest this update: Sun 18 Oct 2026 13:01:28 +0000
Manifest next update: Mon 19 Oct 2026 13:01:28 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: CyrJO5brbVzBIeBAZ9gV0GR5ZUHibvrwgv0/tfN+rgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:1a:55:75:49:bc:8b:44:25:8b:b6:bb:bf:5d:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Oct 18 13:01:28 2026 GMT
Not After : Oct 19 13:01:28 2026 GMT
Subject: CN=7c919c43ef84640d3a7a14f3a109075aa8587498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:4a:84:37:fc:eb:20:6e:fe:a2:a8:8a:22:
c5:a6:21:6c:4e:be:39:04:16:32:42:72:d1:97:f5:
1d:ea:2a:24:d4:7b:e2:de:4b:ca:1c:f8:5a:6f:25:
56:92:70:6d:95:06:5b:df:f3:f1:b6:16:9c:c5:24:
f5:95:e1:28:85:09:f3:b9:33:b4:2e:90:a3:6e:fa:
e5:2a:e9:7d:57:4a:de:a4:a2:2f:d1:cd:8f:09:4f:
f6:67:be:75:b7:01:29:c3:eb:76:9b:45:6f:83:9f:
65:c2:c8:96:19:6c:6d:90:84:3b:7e:fa:ad:90:32:
6a:34:93:8a:c2:b3:fd:8d:44:1f:0c:63:7e:2f:6e:
06:d9:9a:ff:2d:2c:5d:54:34:db:a3:00:78:73:12:
97:0c:9d:d6:76:37:65:32:9f:cd:93:8b:d8:b8:d9:
7e:ff:10:41:d4:cb:e2:06:6b:22:30:0b:f1:6a:38:
40:84:ac:8a:c2:6a:17:22:e0:58:e0:fe:66:7e:0b:
18:c4:77:a8:21:89:a2:91:28:87:f5:f7:04:27:9d:
eb:e7:57:27:be:6c:28:64:4b:50:bd:a8:c8:75:31:
b2:42:4f:f5:c5:a1:8b:e0:fe:53:22:8c:37:f6:89:
7a:16:4b:7e:77:f1:f4:d6:14:8f:df:ea:b4:d6:c1:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:9C:43:EF:84:64:0D:3A:7A:14:F3:A1:09:07:5A:A8:58:74:98
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:1b:3b:9b:cf:f4:18:35:2b:ef:01:86:44:f7:0a:01:7f:
07:c1:86:43:36:99:c0:a9:b2:aa:9a:99:ee:78:ac:de:64:21:
f1:64:74:73:d8:55:82:5b:54:5d:1b:fc:b1:69:61:f4:d6:db:
e1:ba:9c:a9:ce:a2:d1:93:b4:30:9b:86:d9:01:7c:05:d8:72:
26:69:a2:18:aa:b2:44:56:05:be:fb:13:e5:d8:56:03:b1:29:
f3:60:94:69:60:2d:b4:fb:11:80:f4:f6:4c:1b:fd:c9:a2:20:
09:b1:b4:a3:27:44:85:df:38:b9:3a:9f:45:13:ea:df:82:e5:
0b:b0:2d:86:f4:17:5f:c2:06:81:06:9b:3c:07:41:99:b6:bb:
f1:9d:02:ca:a7:a8:9d:2f:9f:79:c9:27:b9:d9:e9:d4:fb:45:
68:67:93:63:fb:c3:4e:df:74:82:b0:4a:1f:aa:cb:fb:a9:58:
71:56:1e:16:91:2e:07:50:b2:4e:ff:57:06:ef:cb:e5:a8:4c:
4a:f9:75:f9:56:7f:79:42:d7:5c:5e:f1:04:da:af:e1:3e:56:
27:eb:a9:7e:27:9f:ba:a7:9b:e7:2f:c6:76:a4:80:28:e8:43:
bd:9e:0b:b4:43:c6:61:64:17:56:e6:7e:a8:73:64:20:de:9e:
b5:bb:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:19 2026 by rpki-client