Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: DGoqlLRyN2hlM+pE4HTC+M3pM4pw8JhSCi0PPrIdcl8=
Subject key identifier: B2:29:F9:98:C8:99:E8:7F:F3:4A:AB:BD:DA:4B:18:35:44:A9:5F:37
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 019EB98F2C13A3FE1207E861BD62600F1152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 1952
Signing time: Fri 12 Jun 2026 02:00:28 +0000
Manifest this update: Fri 12 Jun 2026 02:00:28 +0000
Manifest next update: Sat 13 Jun 2026 02:00:28 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: kWMDtdEjYS+MYP9l/362FLJSVwjLmcmvxFnMo2eM34U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:2c:13:a3:fe:12:07:e8:61:bd:62:60:0f:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Jun 12 02:00:28 2026 GMT
Not After : Jun 13 02:00:28 2026 GMT
Subject: CN=b229f998c899e87ff34aabbdda4b183544a95f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:19:18:f1:e7:94:78:99:40:68:ed:7d:f6:
c7:bd:0a:65:2a:81:49:e7:29:21:04:de:55:f7:5c:
0d:86:17:72:6f:9d:ce:a1:fc:e9:64:97:a3:b4:95:
01:7a:44:03:44:84:d0:11:06:8e:09:42:ed:00:df:
28:05:b7:3c:ab:0a:85:78:cf:97:9c:50:f6:fb:4f:
85:e7:ff:fa:dc:49:71:eb:6d:9c:cc:4e:6b:b3:c2:
f0:ca:65:7b:76:95:d6:2c:5d:05:ef:76:17:c9:09:
a5:26:68:94:24:05:ae:0a:63:25:1c:8c:9f:24:89:
bf:b7:32:a2:ce:96:ac:8d:16:05:a3:4d:9e:4d:60:
48:83:40:cc:74:8c:03:d1:47:82:8b:4c:03:19:73:
f0:f1:7b:46:40:3a:22:6e:fa:47:70:1c:bd:f3:67:
e4:ff:5d:e2:2c:9e:13:bf:c9:9e:b6:1b:f5:c6:6d:
84:a9:32:e2:4f:5c:b5:b8:a5:a5:b7:15:8e:97:bb:
1c:eb:7e:c0:35:f5:a0:e6:4d:84:28:5b:4a:49:fa:
e3:c2:93:6e:e5:19:42:bc:7a:0b:5f:e3:5a:ac:e0:
8f:8d:09:0e:1d:e7:a6:f2:11:7e:0d:95:94:88:2c:
b9:5d:6d:2d:da:19:37:dc:b8:29:44:cf:e9:3f:42:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:29:F9:98:C8:99:E8:7F:F3:4A:AB:BD:DA:4B:18:35:44:A9:5F:37
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:82:4b:eb:5f:d7:ed:86:ed:30:94:c4:bb:84:0b:d6:a4:3a:
8a:7e:f3:52:4b:cf:46:7e:c8:27:81:00:9a:68:8b:98:d6:87:
b8:58:1f:4b:e7:ef:a7:63:fd:1f:d3:29:92:06:53:c4:bf:18:
69:8e:a6:8f:dd:58:fe:c1:58:74:b5:c5:3e:fa:2e:72:44:ed:
95:a9:a5:b5:df:a9:a0:c5:9c:a0:cb:68:21:0f:33:75:3c:99:
c9:a4:6b:dd:c9:a1:61:c3:76:06:6b:ec:6d:67:88:97:77:03:
76:c3:98:b0:5e:0b:a6:d3:f1:80:f6:92:19:e2:18:85:51:79:
76:20:f1:51:b4:1f:20:3e:5d:53:1f:6a:9d:8e:c8:00:70:f8:
72:bf:b2:5a:b6:44:1d:0b:a4:19:8e:0c:a9:db:cc:95:f5:fe:
cc:6b:46:f8:ff:8e:e7:8f:fa:4f:ab:4f:d5:2c:32:70:7f:f3:
9f:b1:a6:a6:86:cd:f3:e4:30:0b:16:a1:aa:0f:50:d2:8b:a6:
c7:d6:e8:b2:b6:4e:0f:4b:07:87:24:29:23:b1:32:d8:7d:96:
82:c7:c3:ef:9a:27:c6:2e:94:7f:ea:59:fc:8d:36:44:36:62:
78:67:dc:46:0f:17:00:6b:eb:f9:de:0a:bf:a0:05:0a:f2:e4:
cf:9a:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:04 2026 by rpki-client