Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: FsfdhfeNdcUEoYoSYAb/+rXPu8m9SaZ4cjC0/2XfpdM=
Subject key identifier: 5B:0D:61:B6:68:95:DD:CE:A3:39:7C:71:F8:28:16:5B:20:F6:41:72
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 01A13DB8D07DDA3C4A68CCFFD067CE0E5402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:01:24 +0000
Manifest this update: Thu 15 Oct 2026 04:01:24 +0000
Manifest next update: Fri 16 Oct 2026 04:01:24 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: uNtyaNQPIvdgb3kWyUUvfWef8Ukbb79CDHWKo2hTPTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d0:7d:da:3c:4a:68:cc:ff:d0:67:ce:0e:54:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Oct 15 04:01:24 2026 GMT
Not After : Oct 16 04:01:24 2026 GMT
Subject: CN=5b0d61b66895ddcea3397c71f828165b20f64172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:75:4f:98:5f:4d:13:04:f3:28:6d:55:ad:
ab:54:39:91:d8:39:b5:f3:d8:bd:59:93:41:b6:97:
ec:d3:09:52:97:52:d1:24:55:fe:91:79:f0:b2:d3:
11:1b:9e:83:5b:b4:b0:30:c9:e6:02:dc:f7:a1:68:
be:11:ef:e0:77:6e:6d:21:9c:3d:8c:32:1b:70:25:
07:d9:8f:cd:21:5f:ee:13:2d:e4:7d:75:e1:e1:5c:
ae:27:4a:a7:d9:0a:32:7d:29:d8:a3:d4:82:f7:b3:
63:da:55:71:26:3b:66:f2:31:53:15:09:d3:0d:34:
9e:cb:1d:70:c7:f1:0c:66:ff:2f:1b:1b:f6:c8:44:
7a:4b:c6:aa:c8:85:94:0f:6a:dd:65:0b:51:1b:de:
86:5d:d9:7e:9c:61:d7:c4:4a:a0:6d:31:80:1d:b5:
ae:9c:93:b6:fa:20:b5:16:a7:60:cf:a8:53:c7:1f:
7e:4d:aa:d7:26:2c:d0:b4:73:10:3f:e1:1c:74:41:
bb:0b:9b:1f:e2:3e:9f:4b:80:5d:bf:eb:85:66:ed:
e5:87:4d:83:53:50:6f:39:5d:31:b0:27:6b:82:a6:
e3:36:78:a3:2d:29:dd:69:e4:ba:1d:2d:98:83:cd:
e3:4a:af:cf:e4:bd:39:cf:6e:48:13:0a:19:6a:eb:
2a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:61:B6:68:95:DD:CE:A3:39:7C:71:F8:28:16:5B:20:F6:41:72
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3c:c5:53:1b:00:19:60:2c:d2:8f:00:65:8c:dc:3f:b9:ed:
15:4a:da:c4:5e:b9:be:2f:94:50:ae:5a:c8:28:db:ba:4f:1b:
8f:8c:fd:89:e6:b3:c6:99:02:aa:79:0b:00:f5:01:d2:fa:84:
83:bd:58:71:ef:4d:26:0d:30:ec:4e:e4:15:4c:0a:cc:c2:0c:
cb:a4:92:03:d2:cc:aa:2b:5f:a3:24:6d:91:8e:4a:7a:04:a8:
3f:cb:9f:e8:77:0c:05:ce:ce:70:8b:07:e9:15:cc:09:ff:2d:
e0:d6:44:c4:2e:d5:dd:e4:43:4b:7b:bf:65:4d:0a:72:1a:a5:
a1:51:f5:30:f0:d3:75:cd:e2:38:f0:b6:f3:a0:87:aa:a7:3e:
6e:9b:52:2d:15:eb:d0:f9:0c:fd:d7:57:4e:be:39:0d:8c:7d:
9b:a9:ff:2d:21:64:01:c1:f3:e7:f5:17:3c:49:ec:b9:9d:b5:
b1:c5:c0:6a:c0:b4:6b:5c:4d:fe:85:6b:c5:76:b0:57:cc:d2:
77:6c:4c:59:fb:d9:2f:d6:63:23:94:24:5a:89:22:a9:d8:08:
9d:be:95:c8:f1:1a:33:b9:90:2b:87:c2:3f:b1:e9:db:32:90:
6f:b4:62:c5:8c:50:c7:c7:1c:f7:7a:cd:ab:f8:73:4c:65:9f:
cc:7f:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:32 2026 by rpki-client