Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
File: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft (raw, json)
Hash identifier: 0r5ZALXYBExNfWchIddPrJUo/3+Ik4T/5JXCCZkzqns=
Subject key identifier: CD:A7:33:BC:CF:24:3D:88:DE:ED:41:7F:9B:2A:B0:61:26:A4:55:11
Authority key identifier: F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
Certificate issuer: /CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Certificate serial: 01A0401735EF2B670D4422114D79D9E34E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
Manifest number: 0224
Signing time: Wed 26 Aug 2026 22:00:57 +0000
Manifest this update: Wed 26 Aug 2026 22:00:57 +0000
Manifest next update: Thu 27 Aug 2026 22:00:57 +0000
Files and hashes: 1: 8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl (hash: vgxiObKYih+DRGqviaf3co8ozwu3rOwvEXFkK8YTIog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:35:ef:2b:67:0d:44:22:11:4d:79:d9:e3:4e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25aa0c48d1c6e2d02f59320f5d3493a6e58705d
Validity
Not Before: Aug 26 22:00:57 2026 GMT
Not After : Aug 27 22:00:57 2026 GMT
Subject: CN=cda733bccf243d88deed417f9b2ab06126a45511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:56:67:05:d9:42:c1:68:e1:7e:9f:6e:f1:
7a:cf:cf:26:5b:14:e2:a9:ac:e0:99:44:95:b4:99:
e4:1f:a2:a4:8d:4e:76:e2:27:5e:bf:d5:fa:20:81:
89:44:c9:9b:01:de:65:df:7e:ef:05:cf:85:ac:c7:
88:a0:0c:ae:da:99:03:0d:ea:ad:f7:37:e5:55:3a:
c7:a0:1f:20:18:f7:d5:9d:33:39:f2:0a:93:5e:66:
9b:7c:e3:f8:c5:49:5f:21:63:b2:db:88:d7:d5:96:
49:56:4e:e7:27:46:70:b1:c0:71:25:8d:41:f4:79:
b9:55:28:d1:9b:b7:06:50:44:8b:0c:ea:53:ec:6d:
8d:f9:80:7d:0c:fd:72:78:27:46:d9:a8:5e:bf:26:
e1:7b:92:3d:f9:80:95:47:60:18:0f:8c:a7:c1:5e:
44:39:b8:93:7c:db:64:1f:d1:7d:a9:9c:d7:31:ef:
74:34:97:1d:db:55:22:43:2c:72:2f:51:fa:51:64:
7e:87:5a:38:cc:b2:78:3e:d9:fb:f0:71:7a:f3:66:
31:d0:71:44:8c:5f:22:01:2f:bd:23:4c:bc:33:47:
e0:1c:c3:00:57:72:7d:9c:f1:8e:ac:53:80:0f:35:
30:6e:50:4f:0b:dd:09:ef:51:77:67:5c:6d:f4:d2:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:33:BC:CF:24:3D:88:DE:ED:41:7F:9B:2A:B0:61:26:A4:55:11
X509v3 Authority Key Identifier:
keyid:F2:5A:A0:C4:8D:1C:6E:2D:02:F5:93:20:F5:D3:49:3A:6E:58:70:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5cdcb8-d00e-4ece-aea1-d4c74d125f68/1/8lqgxI0cbi0C9ZMg9dNJOm5YcF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:f6:83:0f:b3:fd:4c:d2:ad:17:8d:7e:27:5d:4e:87:c4:
5a:ed:3d:ad:c2:89:2b:ad:06:45:f0:31:5c:ef:2b:a2:14:67:
71:eb:4b:9f:50:be:77:a4:3e:ed:e4:f1:11:b0:5f:6d:98:25:
64:f6:68:33:12:03:d3:58:a3:e7:41:fc:85:42:28:9a:0a:8b:
dc:44:47:4e:5e:e6:eb:4d:76:b1:96:e5:24:2d:5f:a7:e6:fc:
52:b6:94:1d:13:82:22:52:d5:6d:db:f5:af:a7:eb:1f:8f:0a:
de:e6:85:05:72:d4:4b:02:a6:23:a2:6f:0b:0b:f3:36:81:3d:
be:8e:3d:61:17:f6:5d:18:60:a8:29:1a:f9:29:67:02:d6:52:
51:4d:18:f8:47:de:45:0f:54:bf:31:85:6a:74:cb:9a:2e:56:
c7:64:b5:ae:58:ff:69:32:86:30:85:4a:04:44:17:93:97:4f:
64:c4:0d:b0:cc:c6:15:9b:5d:38:b8:8b:a7:ac:56:f2:49:96:
85:c2:38:18:26:bb:31:fd:20:02:51:3e:c4:d4:9d:42:98:40:
d1:47:04:f2:01:c5:16:be:8d:d6:a9:86:9a:cd:27:f6:61:d1:
3b:a3:43:5a:71:b6:a0:09:19:b6:8f:47:34:3c:f2:60:06:02:
be:e2:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:13:47 2026 by rpki-client