Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: C0lRpeTqg5fUE1SjXacEPw3Up3iE+czF9ek7Z2rxM60=
Subject key identifier: 28:B3:B9:96:58:F6:0E:0B:AA:F2:7F:90:A8:26:94:BD:F8:D2:69:98
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019D3865D7D680221A2DD7A05B3A9B0C00B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: VPr1ENe6Pm56ylY+sUzsmE2P4oa3AQcE/ekyuYZKxZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d7:d6:80:22:1a:2d:d7:a0:5b:3a:9b:0c:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=28b3b99658f60e0baaf27f90a82694bdf8d26998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:6b:a2:d9:11:4c:cd:ad:ae:ab:ee:86:32:
eb:2b:06:4a:65:95:93:86:da:11:25:7a:2c:de:fa:
2d:2f:e2:50:90:04:ed:36:7f:95:6c:0b:ee:0a:2e:
44:be:08:41:39:48:1c:06:be:cc:13:1d:bc:79:00:
1c:b0:70:a4:02:8e:1c:77:6e:91:d4:e4:25:25:ce:
b6:06:92:68:cb:d4:b8:77:7c:16:da:4d:42:67:16:
23:61:2e:c0:2a:7b:6e:6a:b2:e9:71:3d:a3:bf:fe:
c3:9e:bf:50:c5:52:b2:42:f5:fb:93:d8:9b:b5:26:
f7:f6:8a:9b:d7:3f:5e:67:1f:36:c8:65:d9:af:4b:
00:df:df:33:80:b6:64:1f:8f:29:2a:ce:1b:0a:7b:
45:5f:95:37:82:02:47:37:0d:0d:7e:c5:21:cc:fd:
17:06:c1:7e:74:2d:2e:1b:66:86:02:5c:8c:2a:07:
62:bc:51:14:72:80:24:a2:5d:3b:dd:3d:b3:f2:9d:
67:cb:52:79:df:bd:8c:53:ca:77:8d:d1:99:eb:12:
c1:5a:71:be:d9:02:16:85:db:b9:0a:89:72:23:7a:
61:d6:6b:fd:a7:6d:d9:db:3a:41:f2:8b:c7:f2:7c:
15:98:76:af:28:36:c6:1d:8a:61:1b:dd:ca:d6:9c:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:B9:96:58:F6:0E:0B:AA:F2:7F:90:A8:26:94:BD:F8:D2:69:98
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:43:20:d3:4c:28:19:32:a6:ba:ce:84:e0:9a:ec:b3:62:f0:
5b:23:51:4f:80:99:f2:35:a8:f8:22:db:9a:d1:43:cf:9d:25:
9b:f8:c8:21:f9:53:6b:91:b7:28:25:5b:40:68:57:8c:ce:35:
66:a1:cf:54:e7:ad:f1:5b:8d:1b:90:33:b4:d2:5a:51:66:27:
94:2d:cf:e3:d5:bb:8e:6d:97:00:75:18:cf:34:24:de:fe:46:
2c:bc:f4:2a:5c:15:d2:a5:b2:24:91:25:19:9e:0f:de:5b:11:
ac:02:0f:1d:b7:a2:02:22:08:e0:6d:92:54:b7:8e:b6:e5:80:
de:39:8f:2b:e0:95:cf:2a:e7:b1:8c:82:0e:00:8e:26:3d:09:
25:52:26:c1:f8:0f:f3:ff:b4:4b:8d:ec:ba:58:73:5c:4e:dd:
56:10:3c:9f:a0:57:5d:a8:a5:52:c4:3e:81:e0:4a:b3:7e:5c:
c1:2e:1a:9e:e0:80:50:16:b3:d1:5d:ae:4d:4a:ba:d4:fd:79:
d3:c6:91:66:e2:1e:1b:06:85:d8:11:69:7d:8f:e4:c3:54:48:
ab:93:5c:dc:10:6d:58:16:f1:ba:8d:ca:a3:6e:95:76:c3:51:
c7:6b:4f:29:80:79:93:22:8d:a9:d0:76:63:d5:6d:b5:12:92:
86:b0:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:54 2026 by rpki-client