Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: QbYYa1U/bNKuAPO9Q+VriQW4ZIZhnUITZZ0cSft79G0=
Subject key identifier: 48:C9:11:D8:8C:31:34:88:33:AC:A3:A9:48:11:D5:97:3C:65:39:12
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019F17545260EAC9FA1568330F1D69635DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 07:00:29 +0000
Manifest this update: Tue 30 Jun 2026 07:00:29 +0000
Manifest next update: Wed 01 Jul 2026 07:00:29 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: xl802AbHJvrw/lhW3lXRhpxu6Clr6iKPlNWFF50pD5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:52:60:ea:c9:fa:15:68:33:0f:1d:69:63:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Jun 30 07:00:29 2026 GMT
Not After : Jul 1 07:00:29 2026 GMT
Subject: CN=48c911d88c31348833aca3a94811d5973c653912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:a4:73:5a:e3:d8:50:5f:36:42:ae:91:cd:
33:eb:70:f2:0f:70:36:99:e1:7d:1f:a0:84:24:b3:
60:4b:e4:3d:a4:35:64:c0:97:f3:cf:d5:2a:3b:81:
ab:c4:0b:0e:06:89:6a:f8:d7:76:93:51:40:bf:2b:
15:52:0a:42:97:9b:56:00:a1:80:7e:4d:20:73:a9:
03:3b:82:d5:f1:67:68:eb:c5:df:7a:2c:81:97:31:
3e:01:39:51:30:ce:92:3e:f8:29:37:ed:af:20:21:
c6:c5:21:8b:a3:ab:91:6a:97:3d:ee:bd:93:43:e1:
ee:5c:5a:0b:7f:a4:c9:1d:8a:0f:6c:c3:c4:76:92:
b8:f3:a1:21:f3:17:46:29:8a:d9:5e:80:5e:2e:46:
59:da:e8:bc:ce:c9:cb:87:0a:4c:52:2a:28:93:92:
95:55:3a:3a:e7:ed:e6:9f:81:7c:0a:52:e2:6f:72:
b2:f5:fc:94:75:24:90:dd:a8:4e:47:6c:35:1e:5a:
53:64:22:2f:9a:65:ff:0c:0b:a1:c7:90:a7:28:67:
06:66:b1:00:3e:dc:c9:a4:2c:a7:b6:b7:3c:d1:71:
e7:af:f4:2f:ff:1b:e8:54:b8:88:e0:b0:90:db:88:
b9:6c:15:c6:db:bf:97:7a:cb:f9:9e:83:bb:f4:18:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:11:D8:8C:31:34:88:33:AC:A3:A9:48:11:D5:97:3C:65:39:12
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:48:9b:bc:9f:8b:cf:46:4f:2e:10:98:d1:26:47:7d:9d:c1:
58:96:73:75:94:33:c4:5a:bf:97:8e:7d:f4:3f:a4:3a:7b:1a:
68:7c:cd:a0:32:b5:13:3e:3b:4f:5c:40:a8:24:a2:2c:01:d4:
44:d3:c0:81:f8:37:25:e5:eb:3d:20:cf:b0:e0:7e:8f:04:73:
82:27:cd:00:cb:50:9e:84:9f:18:93:95:5e:d6:64:ac:ef:f0:
b5:33:4a:5a:76:22:69:89:5c:b2:ec:3f:b8:02:14:c8:2f:a4:
69:42:ac:6f:bf:7d:9f:a4:ba:88:5a:8a:76:3e:7b:62:3c:c2:
6d:fa:ed:3f:64:8c:8f:67:0f:50:bb:a8:d0:c4:6d:b7:be:2f:
08:40:87:87:dd:4d:ea:32:b6:14:6f:78:c3:26:49:08:ce:64:
07:75:e3:d4:31:4a:dc:c1:fb:3c:6d:30:6d:26:7f:d4:79:de:
34:6d:90:6d:de:11:67:20:0f:2c:10:29:6a:a0:da:10:a8:19:
53:3d:8e:c5:46:af:e8:78:21:c8:e6:2b:c3:da:07:56:4e:08:
98:a5:77:e5:ff:28:46:56:2c:0f:d5:2b:40:4d:87:f7:28:2d:
29:ca:71:9d:ca:3a:62:80:92:c3:a2:e7:0c:63:69:c0:92:96:
15:c0:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:17 2026 by rpki-client