Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: yyKSC/Li8OAcOyl09r6QIAJCDxjRthrTXqpo48BMCtE=
Subject key identifier: A5:9A:41:D6:63:48:9A:14:23:56:68:73:5D:0E:0F:EC:2F:C4:70:59
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 019D3865D091459C612ED0037CB71DC4F067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 0CB3
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: Qvp1+PKMvjVLUzD1SuTNiRBBgQGfb+w5K65PqzC2lrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d0:91:45:9c:61:2e:d0:03:7c:b7:1d:c4:f0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=a59a41d663489a14235668735d0e0fec2fc47059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:54:b8:4a:38:3f:2c:e2:1d:57:9a:54:ac:
11:55:74:79:13:24:67:9e:07:cc:e9:f7:fd:97:b3:
aa:0e:53:7d:8e:43:b7:29:19:b0:03:47:e0:18:7f:
4d:63:cf:e4:1f:28:e1:d7:33:36:26:8b:b0:fd:82:
7f:bd:01:5f:08:13:a6:2c:e0:48:e3:a9:c7:72:5a:
37:e9:ed:b3:ea:21:bf:29:b0:a6:9e:ee:bf:4f:77:
dd:25:1a:6a:4b:b6:13:7a:68:5c:ac:2c:4e:88:af:
64:ca:36:0c:65:02:3c:22:c0:e6:0b:65:06:94:bf:
be:5d:10:a9:00:f7:69:bd:89:d7:60:3f:8a:f7:e3:
9d:48:28:69:08:a4:0e:95:3b:b1:40:1d:29:1d:c8:
99:58:37:06:02:bd:dc:50:4e:f3:ee:59:2a:68:a7:
d0:0d:3c:8b:64:56:2a:0c:73:7b:a4:0b:2e:83:7e:
30:d5:5e:b4:25:63:cc:da:da:9d:19:5b:c2:4f:0b:
ae:45:95:63:9a:2f:89:82:51:03:5e:fb:d3:cf:34:
31:c5:61:ca:b0:8e:21:4c:05:7d:a9:43:fc:1c:92:
2d:80:fa:b7:3b:1c:ed:86:56:30:f5:b0:33:eb:8b:
7b:b9:63:a5:8d:e6:3a:1e:7f:e9:4a:19:6f:0d:4a:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9A:41:D6:63:48:9A:14:23:56:68:73:5D:0E:0F:EC:2F:C4:70:59
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ad:2c:12:eb:d4:99:4d:22:55:e6:54:0a:27:bc:35:5d:dc:
dc:1f:47:d9:68:20:a7:d8:15:8a:6f:d6:56:2e:42:15:c7:0d:
5e:fc:ba:ca:b1:a1:06:89:6a:b8:95:5c:10:35:3e:94:e8:3c:
1d:60:73:05:df:d6:e2:e2:2d:3b:5d:c3:07:33:ab:d2:3b:99:
36:97:3f:da:a2:4d:6e:d5:6a:25:4a:c3:82:23:17:b9:38:8b:
c4:e0:c0:c1:67:30:5a:1e:bf:da:9d:aa:ea:7c:6d:78:4a:64:
17:d5:22:ef:5b:b8:62:bf:15:d8:0c:c5:2a:c0:a7:74:10:cf:
7d:f8:32:7e:a8:26:c3:fb:5a:78:ae:3f:fa:69:b1:68:6b:95:
2d:c3:46:03:f1:e9:50:10:fd:91:f8:37:8c:83:e5:cf:e4:14:
34:52:30:d2:70:f3:20:aa:08:ac:a4:b8:97:96:ed:f4:0f:3f:
b8:73:8c:61:2f:2e:14:be:26:7e:41:7f:aa:ae:e7:6f:75:90:
08:6f:8c:f1:34:dc:f9:89:df:c4:8a:c3:61:53:b2:43:91:18:
31:3d:c1:e3:30:2f:42:d7:5c:15:99:40:1b:43:e4:62:2d:a3:
02:ae:67:4a:ae:c8:59:8b:fe:45:f8:d6:2a:7c:5e:f1:af:10:
62:1a:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:26 2026 by rpki-client