Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: OfU+ofQFWCy+tL0tknHGkEy85DeY/JnnAYbcjEydLr0=
Subject key identifier: 45:43:4A:2B:70:73:E9:66:33:64:13:CD:1E:11:F8:E4:4C:AD:22:80
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 019D36E4E7C47DBA23249DCF626180F4D3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1587
Signing time: Sun 29 Mar 2026 00:01:03 +0000
Manifest this update: Sun 29 Mar 2026 00:01:03 +0000
Manifest next update: Mon 30 Mar 2026 00:01:03 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: Hor0/cwqwWudUjUBefWJu1RVvWrXnwrk9vHrUH5X8pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:e7:c4:7d:ba:23:24:9d:cf:62:61:80:f4:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Mar 29 00:01:03 2026 GMT
Not After : Mar 30 00:01:03 2026 GMT
Subject: CN=45434a2b7073e966336413cd1e11f8e44cad2280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:d7:a8:3a:ac:81:01:1e:1b:49:1f:40:d0:
8d:d0:22:10:16:1e:00:bf:ff:2c:a2:22:9b:48:bb:
1e:a1:5a:be:86:06:be:9e:64:55:ba:4c:5c:5a:1d:
a7:2d:18:2c:ca:be:07:44:1a:fe:46:8d:28:e7:a0:
d3:e8:78:6e:09:7e:a8:fc:03:a0:aa:c4:3c:e5:77:
3f:9b:fe:36:99:16:a0:07:6d:e3:db:ee:ef:41:3b:
12:ba:25:3c:42:61:7d:56:4e:99:bb:97:9a:e9:eb:
83:16:05:ad:0b:30:3f:99:08:28:c0:da:5f:5e:a7:
aa:5c:a5:c9:d6:95:0a:8d:89:97:25:7e:56:68:d4:
bb:d0:1a:e5:47:8d:a6:04:a5:09:b5:52:34:3c:f7:
f4:a3:e9:dc:7a:ee:cb:32:bd:64:19:97:89:69:da:
04:ce:21:18:22:67:71:f1:78:97:3a:02:53:1a:4e:
7e:93:f2:c7:7c:8a:c6:ce:9a:c4:0a:2b:84:ee:77:
dd:71:00:a8:a4:c1:c6:09:0b:55:70:9a:eb:3a:d2:
f9:af:4b:b7:85:f5:1f:ad:eb:d7:a8:53:80:94:fe:
8e:cb:5e:c6:fd:59:5b:a8:c0:d5:34:0f:cd:47:9a:
b6:52:a1:54:b4:f6:8e:24:a1:14:1e:c6:15:ca:69:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:4A:2B:70:73:E9:66:33:64:13:CD:1E:11:F8:E4:4C:AD:22:80
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:bf:fa:25:26:20:cb:1f:1e:02:9b:89:cf:97:af:0a:bb:
23:cc:98:b6:96:27:3e:c2:14:fb:d0:33:1e:84:8a:8e:2b:7a:
27:4c:3c:3f:ea:3b:95:0f:56:b5:86:10:81:4a:55:d0:85:80:
03:2e:92:07:cc:d4:6d:c4:57:7f:aa:67:65:af:d3:94:e8:04:
e5:bf:74:62:98:e2:1d:59:06:67:80:a7:40:cb:9a:5d:79:bb:
a5:5b:95:74:e3:51:39:a2:0b:e4:e8:3e:6f:88:c0:95:a8:91:
f7:44:9a:1f:b7:04:1d:b6:bd:d3:e8:7b:ff:cf:b3:60:0f:02:
9a:7e:cc:d8:ea:84:e5:eb:43:64:80:45:ac:a8:5d:ac:6d:07:
b1:60:fb:fa:70:3b:f6:45:f1:b9:85:6a:79:66:fd:65:ae:79:
dc:83:06:7c:09:50:c9:bc:de:00:b2:f3:ee:e1:b0:fd:84:35:
02:e6:58:a0:e3:3c:7f:91:79:ac:a4:3d:a6:e7:af:ce:1c:c5:
20:b4:ed:7d:79:1d:9a:f9:f3:f8:06:ad:4d:ca:73:79:b3:74:
4b:61:94:44:9e:73:d0:6a:38:0b:b8:86:6a:2d:2b:5b:18:43:
61:6a:23:9b:ed:51:33:fb:e9:42:d2:76:20:e0:b3:e7:7c:72:
42:e6:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:06 2026 by rpki-client