Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: 1w/m9RqWUyJGQK75l3chjPlxvmqZYIq8oXc+NRiJ0MA=
Subject key identifier: FE:1F:12:83:7B:D2:90:D3:C0:AC:45:01:86:93:F7:7A:57:41:24:FA
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 01A04017EE6A3FE20EA41F5B65BDBEA0612E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 04BD
Signing time: Wed 26 Aug 2026 22:01:45 +0000
Manifest this update: Wed 26 Aug 2026 22:01:45 +0000
Manifest next update: Thu 27 Aug 2026 22:01:45 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: hRvvVqbU1dvUMIQlgkhVIHMnEfFm+wCgpkcNyTfGlY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:ee:6a:3f:e2:0e:a4:1f:5b:65:bd:be:a0:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Aug 26 22:01:45 2026 GMT
Not After : Aug 27 22:01:45 2026 GMT
Subject: CN=fe1f12837bd290d3c0ac45018693f77a574124fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:c0:02:5e:34:3e:c3:1c:9e:76:59:eb:ec:
46:63:36:a2:5a:ce:9a:75:17:02:7c:64:9b:3f:d0:
9d:84:46:1e:d2:ff:b2:c1:f8:a1:7b:1c:ae:ff:75:
fb:66:59:cf:b2:e9:52:57:a2:9b:dd:14:c4:5e:43:
45:06:95:08:d3:13:10:14:e4:7b:ef:52:8a:ad:10:
ef:46:03:23:af:7d:f0:77:64:8c:7f:0f:65:e8:c9:
a0:5b:79:cb:18:1d:cb:c7:ba:c8:c0:ad:af:42:d5:
29:b5:33:7b:d1:7e:79:37:b8:56:44:8a:0d:17:07:
c8:22:43:32:55:9e:3f:5d:62:f2:19:9c:d2:ae:a9:
9c:be:57:33:c1:cd:88:08:6b:e1:a7:d9:d9:77:2e:
ea:dd:12:96:97:0b:91:84:52:31:c0:f3:04:34:a8:
9c:62:2d:24:82:c7:aa:bf:bd:8a:37:65:1d:47:be:
3d:da:41:7d:9c:c1:fb:63:69:07:d2:c4:c0:65:0d:
61:50:c8:20:02:b4:a3:a5:56:0d:91:d7:97:5c:39:
05:1f:c2:c7:33:6b:58:df:b3:63:c2:63:63:e6:ed:
f7:95:c1:aa:d3:86:84:00:f5:09:85:e6:53:20:72:
90:05:ae:d8:9f:2a:85:1f:d9:f0:00:66:b0:1d:65:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:12:83:7B:D2:90:D3:C0:AC:45:01:86:93:F7:7A:57:41:24:FA
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:4e:0e:2e:78:d4:e2:7a:3a:24:b9:b3:33:f4:f0:6e:cf:
2a:0e:bf:56:e9:c2:0b:37:6e:bb:8c:f9:24:10:50:5b:af:38:
e2:46:d4:2e:c9:96:bc:73:14:9b:a1:a6:91:a4:e1:16:58:d9:
78:19:c5:7d:02:85:12:c9:c1:5b:bc:78:fa:60:16:6a:24:45:
56:3d:ad:ab:82:2a:e3:64:53:8b:7b:f6:69:0e:5c:4e:4a:cb:
ea:76:d5:d6:02:9b:7c:c8:c1:5e:66:1c:27:0f:28:6a:94:9d:
eb:81:b8:76:c1:b9:6e:f7:18:43:e8:4e:ca:24:b6:02:6e:4f:
60:79:94:63:c2:9f:bb:e9:8a:6b:4c:d1:de:9b:bc:1c:ff:cf:
e3:c9:d6:13:17:bb:02:3e:ce:48:a7:e9:84:75:23:4c:7e:20:
a7:e2:0b:8e:1f:c4:d5:07:31:8b:cc:32:78:eb:6b:35:20:ce:
d8:89:35:82:dd:bf:61:63:e0:d8:97:9e:f3:b3:58:1b:b4:f0:
ae:c4:2d:1c:9c:b5:9b:80:96:f8:40:c4:89:dd:c7:95:39:8e:
07:95:b1:18:ea:3f:e4:1e:7b:e3:f3:35:18:ce:2c:bf:b5:ec:
26:8a:6f:24:b3:76:d3:97:bd:1e:97:ed:2a:f4:c9:e4:d7:99:
77:b0:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:01 2026 by rpki-client