Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: ZxpppOfouEWH9t+3xV7wRyi3aR2nAzWWw6g7FYHcXcc=
Subject key identifier: 4F:55:16:D6:40:3E:79:E8:43:AE:AC:FA:6F:6B:75:97:8B:08:B8:77
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019D38666648CD10EE3844852C9935701872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:08 +0000
Manifest this update: Sun 29 Mar 2026 07:02:08 +0000
Manifest next update: Mon 30 Mar 2026 07:02:08 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: 5g/hg6ZqJyZ5x4Qm1FFlMU++j0fx3IoLC3iiE3lV2fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:66:48:cd:10:ee:38:44:85:2c:99:35:70:18:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Mar 29 07:02:08 2026 GMT
Not After : Mar 30 07:02:08 2026 GMT
Subject: CN=4f5516d6403e79e843aeacfa6f6b75978b08b877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:65:da:e6:da:2a:72:6c:8d:c3:28:c2:99:8f:
83:3c:01:2d:bb:d8:8f:46:93:fc:e6:f1:f1:d6:55:
43:ba:d5:39:79:48:05:ed:c3:bd:0c:85:c8:09:97:
7a:76:10:d5:cc:ee:e8:e8:ca:1e:bb:85:7a:5c:48:
4a:4b:54:09:4e:3b:2d:f1:de:d4:72:17:c4:54:52:
70:f1:4d:8a:e0:ab:ef:5e:71:15:f3:27:7d:91:80:
49:3f:1f:68:f9:92:90:c1:e5:9a:23:ff:72:8c:02:
0e:36:c6:60:4d:af:df:3a:91:8d:f4:54:a1:0a:9c:
a1:6d:8d:7e:b0:02:bc:a2:61:34:39:ca:a7:da:6f:
6c:9a:38:35:6c:6b:06:0d:68:2a:35:97:ad:40:3f:
c2:4f:e4:33:94:d0:5c:f2:85:f2:43:46:30:51:6d:
79:30:16:43:48:6c:66:80:a0:01:16:2c:3b:44:d8:
6a:6a:4a:7e:cc:95:57:e0:c6:ed:e0:a4:e5:2d:f4:
84:15:99:53:23:9a:b8:46:f3:9d:e4:7c:0f:d6:5e:
64:85:90:59:c0:78:27:e1:99:4b:4f:37:1b:63:7e:
be:25:38:f4:63:61:a3:1e:25:25:0e:10:52:7a:73:
5a:cf:96:73:cb:a3:80:e9:67:21:a5:11:c4:4e:9b:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:55:16:D6:40:3E:79:E8:43:AE:AC:FA:6F:6B:75:97:8B:08:B8:77
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1e:db:fb:70:0f:84:9d:74:b0:a6:c4:a6:54:b8:66:20:93:
90:9c:7d:5d:33:50:51:fd:26:b1:7b:49:a2:b7:18:9f:43:6b:
d1:72:ae:35:93:f9:0c:8d:0c:39:04:a9:0a:2c:33:d3:01:41:
45:54:c0:80:41:3a:66:07:31:f9:0a:dd:29:a8:b6:60:f1:7c:
fe:15:83:9e:48:17:6e:60:da:3f:d0:43:58:9c:71:af:a0:d6:
63:38:6f:d0:d9:45:5b:fd:ea:3b:b8:63:3d:9e:cb:c1:0c:3d:
ca:e3:05:2e:7c:f1:54:64:57:d6:0c:be:7b:ee:32:5e:34:1a:
76:15:e5:6f:e3:54:17:99:89:1d:4f:48:58:4a:35:fc:fd:53:
4b:11:b0:d6:ae:41:8b:38:55:81:a5:17:77:22:ae:8f:73:f9:
3f:db:9c:cb:5b:21:1b:01:20:c4:68:c1:ff:87:57:a7:e4:6c:
61:48:cd:bf:fd:42:a1:b5:e1:bb:c2:37:9d:ee:a5:21:7d:b0:
36:8f:66:b6:05:42:b7:1b:59:b7:c3:28:91:39:df:cd:3a:a4:
e4:15:1c:88:c3:f7:bc:b7:15:da:1f:7f:25:d9:e1:be:44:c6:
b0:8b:d6:d5:cf:6c:6e:2a:d0:f4:46:6a:74:69:77:e5:e9:d3:
39:37:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:35 2026 by rpki-client