Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: /TQbzPcjYvZTdrNgx+XEZpt9HOVQBfIvIpR+uMR3N2E=
Subject key identifier: 0F:F2:A3:2F:EC:FC:C7:C2:4A:45:62:78:0B:DD:97:AD:43:4E:E7:27
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019D38664FE05AF8982C654FBAA65B02691B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: bvZKpuuZXXk99MK1zbnApOiE/6fdqe0Msv7swp3esCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4f:e0:5a:f8:98:2c:65:4f:ba:a6:5b:02:69:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=0ff2a32fecfcc7c24a4562780bdd97ad434ee727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:e3:cb:18:10:4e:4e:af:9c:93:ca:c2:ca:
80:cc:bc:ba:5c:66:43:9b:77:37:e2:cf:d8:ed:29:
28:b2:4d:18:2a:a1:96:ef:b6:d2:1a:22:d5:f5:2f:
e3:dd:67:4f:f3:de:5e:af:9c:8a:37:0d:d6:23:02:
6a:6f:64:93:9d:a3:4a:8b:2a:61:7c:60:3e:f8:bf:
af:35:c3:42:3c:b6:29:57:64:e0:8a:1b:6a:3e:13:
c0:d1:14:49:ef:1a:23:f2:c3:21:4d:f1:79:0e:ac:
9d:c7:57:6b:a4:77:07:be:06:6a:f3:e3:af:6c:65:
28:06:b7:6b:31:99:f6:c3:5b:7c:f7:ec:d3:29:aa:
a0:12:85:ed:ac:b6:1c:83:a6:c3:fc:10:e2:cd:59:
4a:eb:7f:99:37:34:12:78:7f:dc:91:7b:c2:5a:f5:
0d:e0:53:50:0f:24:42:b5:16:a7:fb:3c:36:65:0c:
9a:a1:8c:12:b0:33:b5:0a:e8:e0:b2:4c:56:58:41:
f4:a6:e1:07:32:a2:65:5f:67:80:ed:28:93:bb:1f:
ff:31:3a:e9:b5:ca:13:9c:1c:be:6c:8e:9a:66:38:
e0:90:a7:a6:51:fc:4b:32:15:b4:95:89:99:8e:1c:
05:f5:04:85:a1:e4:b0:a9:30:b4:1f:34:3f:a8:be:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F2:A3:2F:EC:FC:C7:C2:4A:45:62:78:0B:DD:97:AD:43:4E:E7:27
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:d6:1b:ac:2c:be:fe:02:2f:8e:93:14:98:fc:c6:c9:2e:
24:e3:44:53:3e:2a:17:78:2f:81:90:5f:ba:40:a3:34:06:bf:
8b:a1:8d:0f:47:5e:1a:51:a7:cb:65:b4:b0:05:ff:02:3f:8f:
7e:75:65:36:82:88:7a:cc:07:3d:d5:64:16:6d:2f:76:e0:ee:
1b:3f:8c:8a:1b:32:1a:4c:05:88:89:ad:fe:a3:b0:37:cb:f9:
cc:48:f8:d2:dd:ec:7b:af:cc:44:04:42:28:34:30:f1:bd:66:
49:83:b1:de:a0:13:c5:3b:71:6d:d9:26:c5:c9:4c:97:dc:b5:
97:37:86:8b:a5:e2:46:92:8f:c0:ca:cd:ad:9e:32:af:ad:91:
6e:e8:0c:d2:63:88:4b:45:6a:13:c7:a4:96:b3:a5:d3:9f:de:
ce:69:58:a3:b9:6e:d6:c5:ec:e4:6b:95:e4:5c:22:56:61:66:
fd:bd:d3:04:e0:62:d8:69:9b:a7:8b:5c:71:29:a7:26:f8:1a:
28:f1:bf:da:d0:60:e3:f4:f2:4a:9d:71:79:a5:91:21:a6:29:
6f:31:a1:71:07:b3:3c:cd:12:06:44:90:2c:29:21:03:86:e5:
a2:1a:16:bf:58:52:9d:8a:6c:15:19:24:7b:3a:01:ad:c1:92:
e3:60:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:17 2026 by rpki-client