Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: TsnWDZJiTrdojdbm/hMbdZZhTDz5ekf7aftiAKoW7KM=
Subject key identifier: F1:1D:E4:BC:E3:93:BC:69:0F:07:3C:A8:24:36:7B:48:BD:A1:64:BC
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 019D37C02BE93E4ED878D425B0225337BFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 0AA1
Signing time: Sun 29 Mar 2026 04:00:34 +0000
Manifest this update: Sun 29 Mar 2026 04:00:34 +0000
Manifest next update: Mon 30 Mar 2026 04:00:34 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: moSHHuEoG9wexwLaY0FTVWm1kYoJGvVIthFmqyiVd3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2b:e9:3e:4e:d8:78:d4:25:b0:22:53:37:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Mar 29 04:00:34 2026 GMT
Not After : Mar 30 04:00:34 2026 GMT
Subject: CN=f11de4bce393bc690f073ca824367b48bda164bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:9f:1c:b4:4d:e4:c0:21:23:fd:86:47:79:
ba:11:07:bd:44:30:09:23:89:6f:2d:34:49:31:2f:
d7:ee:6d:66:0a:31:60:5b:71:72:45:e4:ee:5b:2e:
5f:48:a0:18:a7:9e:02:06:59:fb:8b:14:10:5f:1c:
2b:53:46:8b:6d:1a:34:8a:41:e1:af:5c:c1:3f:1e:
0c:af:2f:62:d6:45:ac:df:f4:5d:02:97:90:c9:e1:
90:f3:b7:51:1a:5c:e7:27:1d:49:ff:d5:a0:1d:4a:
8e:fb:b9:68:d2:bb:bb:b8:50:f7:2d:1e:e8:ae:fa:
1a:87:4f:fa:a3:2f:74:4d:53:29:5c:09:cf:85:4d:
81:50:91:df:b3:7a:3f:b2:d3:65:32:f3:42:b6:66:
8c:32:14:fd:e1:8f:7b:59:9d:5e:5e:a1:87:02:40:
57:9d:04:e2:27:81:e7:77:1b:14:6a:3c:6a:1d:53:
e7:dd:c0:64:b7:58:fa:54:77:c6:eb:d7:ee:47:68:
28:9c:a6:d6:7f:d4:ab:aa:c8:53:7a:8b:66:63:8f:
38:90:52:58:f6:e5:ec:df:9d:00:b3:d3:39:6f:47:
79:f0:b1:b8:2c:e5:1a:7c:9f:47:73:74:1a:c1:ed:
5c:c2:e4:d2:3c:09:a7:ed:d8:68:6a:dd:6f:db:30:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:E4:BC:E3:93:BC:69:0F:07:3C:A8:24:36:7B:48:BD:A1:64:BC
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:33:63:6d:d4:96:1b:74:6d:17:c9:f9:8a:7c:9f:6f:cb:25:
14:bd:74:31:a0:96:85:b6:aa:ce:ea:6d:f0:08:b0:4a:20:60:
37:dc:9c:9a:ac:c2:da:2e:aa:c5:4d:5a:75:b5:57:1b:96:f4:
be:f7:89:17:81:23:7d:44:3b:87:16:1d:00:2c:2e:b4:56:85:
38:87:6b:61:cf:e4:af:a8:6f:33:69:80:1b:93:e7:53:aa:85:
53:dc:aa:28:b9:03:ef:e1:92:f6:7e:cc:51:5f:37:4b:47:19:
a9:39:32:e3:40:16:f3:4e:ca:46:cd:3a:67:30:aa:3a:0e:d8:
2a:10:24:2a:2d:88:b8:94:6c:6f:19:7a:60:09:c2:bd:b2:68:
38:7b:92:33:be:e7:41:0c:d2:25:14:a7:ff:d2:26:2d:d3:2a:
5b:ce:ce:8f:c9:d6:d5:7b:b9:7f:ff:fa:0e:a4:07:9d:f7:68:
cd:b5:eb:70:27:e8:6d:25:e9:cb:8d:17:81:44:00:43:6b:ad:
5d:4b:48:e3:5b:a4:5b:b2:3e:5c:cd:a3:2e:e7:69:9c:b6:b1:
03:e6:db:d8:7e:ad:ac:37:79:b7:6f:66:67:a3:75:54:0a:ea:
ef:6e:a4:b9:f5:ab:77:89:33:30:21:e9:8f:58:1e:c2:40:2b:
24:2a:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:52 2026 by rpki-client