Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: HNTRgqork2A2PmE34qontA0ZMPLbBR74vCfiFI5fdPc=
Subject key identifier: 1A:F3:8E:AF:49:30:0D:86:02:99:FD:35:23:98:75:25:06:A5:B5:61
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019F17556760C2929E8690B65AD0E0252960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 07:01:40 +0000
Manifest this update: Tue 30 Jun 2026 07:01:40 +0000
Manifest next update: Wed 01 Jul 2026 07:01:40 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: DwbAQkTRaoXSp6MxAPYfSFs7/WRQvEY+xIBsT8PfhFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:67:60:c2:92:9e:86:90:b6:5a:d0:e0:25:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Jun 30 07:01:40 2026 GMT
Not After : Jul 1 07:01:40 2026 GMT
Subject: CN=1af38eaf49300d860299fd352398752506a5b561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:06:22:57:c0:f9:a6:c7:c1:25:4d:47:40:
44:84:7f:e4:98:58:b4:17:cc:6d:d6:f1:0c:92:7d:
ac:98:40:fd:f4:91:f2:9f:8d:3f:0a:59:4d:06:6b:
b0:72:19:5f:a2:b4:89:9f:2a:25:27:ba:3d:76:62:
1c:ac:10:cf:f6:75:10:4e:d2:3e:fa:1b:18:72:15:
14:f6:19:e3:c1:eb:e9:17:52:fb:9f:4a:22:61:fb:
80:c6:4c:6f:05:98:07:e6:2c:f4:cc:36:52:0d:5a:
0c:40:82:6c:58:05:36:62:6f:73:f0:73:a1:73:0a:
d2:f2:25:9c:91:33:eb:e7:0d:3e:00:93:aa:8a:f1:
10:42:74:a1:d3:a2:8d:2f:b7:b4:3b:52:d3:e1:ec:
c7:78:d8:be:f8:b9:7e:85:e8:94:20:72:aa:bd:21:
ac:cf:21:2f:a3:7b:b8:74:e9:e0:14:0f:39:ac:ef:
f3:8f:de:8a:84:85:03:0f:bf:8f:92:67:4f:12:71:
f0:8c:36:32:9e:3e:26:35:5a:8f:c3:83:7b:ff:77:
85:38:a4:6d:f4:31:fd:d4:85:29:c6:61:db:8c:bd:
dd:ed:8e:bf:18:7a:ba:3d:65:5b:6a:90:a9:97:20:
71:fb:39:c8:4c:46:43:2f:76:27:39:3b:ca:82:58:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:8E:AF:49:30:0D:86:02:99:FD:35:23:98:75:25:06:A5:B5:61
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:8f:85:f4:95:25:b9:57:b6:92:10:70:9e:f8:f5:e9:0e:
17:fa:8f:33:ca:e0:93:4c:90:78:23:66:98:f4:9f:ed:7d:f3:
e2:78:19:e5:a5:0e:c5:12:51:67:15:85:79:77:0e:8c:f3:7e:
64:ec:84:c2:c2:7e:74:5c:98:48:16:99:ef:52:21:2d:fc:97:
3c:a0:49:6b:52:31:ab:79:11:82:67:95:13:6b:26:27:82:57:
61:ec:64:bc:59:64:9f:eb:4d:aa:0b:f9:49:10:3d:17:50:98:
22:ac:ad:87:40:e1:70:26:80:a4:90:84:8f:8d:2f:ab:5b:b3:
a3:63:fb:4b:fc:7f:fd:e0:8c:f2:70:fb:cf:2b:3b:37:0a:f5:
24:51:a6:d9:6d:a8:56:f2:f2:0e:a6:72:77:29:b0:b8:7e:9f:
48:66:e0:04:36:67:3b:62:fa:6b:00:fe:24:0a:bd:49:33:f5:
a3:ad:a1:a9:4e:26:3a:3b:79:cf:16:ae:61:82:c5:15:60:e3:
52:35:40:fb:30:bb:e4:3f:be:12:4c:68:26:90:94:70:57:66:
57:6b:48:41:55:05:ab:2e:ad:0a:ec:f6:95:64:f0:38:47:61:
33:a1:f5:8b:c1:38:d5:6d:c3:50:06:e1:41:2e:dd:a6:36:ba:
c4:b9:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:21 2026 by rpki-client