Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: Xfuw53hGhKNUN8eqcfG6gpjRzx2vWg7trCRhSzxdwGY=
Subject key identifier: 9C:A4:41:8B:DB:48:AB:4E:4A:78:3D:43:F0:F4:1A:00:19:30:D8:68
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 019D3865E80BA69EF1D348EB05B7C69A3F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: aoW8dBHmlYzwdEqqH5cC8WiGAzLY3OtSSW1wyuuf90w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:0b:a6:9e:f1:d3:48:eb:05:b7:c6:9a:3f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=9ca4418bdb48ab4e4a783d43f0f41a001930d868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:d1:62:a9:80:da:db:bb:7b:b3:f6:58:10:
e0:42:d7:12:d9:59:a9:f7:cb:74:58:2e:c5:e4:a8:
40:fa:2b:57:55:87:bb:bd:bf:16:e2:0d:18:b6:7f:
a4:27:c1:c1:ea:ed:02:f9:7a:a6:d0:82:c0:d3:cc:
fa:bd:c0:11:51:ff:0c:da:e5:62:4c:eb:d7:02:4a:
69:3b:47:6b:ff:c6:ed:53:da:2f:2f:36:d6:58:9d:
6d:7c:07:61:fa:8a:c7:8d:96:91:41:dd:c5:10:3d:
fa:fc:99:f2:f1:5d:d3:06:6d:2a:c2:f9:ee:9d:55:
5c:ed:3f:56:81:8f:99:45:6f:59:8f:19:0f:a0:d0:
b0:83:44:4f:d1:fc:1c:da:2c:df:29:5b:50:4e:46:
b8:61:c2:2d:87:e1:12:bf:6e:4f:d5:f5:7b:ed:6f:
c4:a8:29:fb:17:ea:fa:18:93:fb:2c:12:3a:5c:51:
37:9e:15:9d:2e:ca:65:91:13:e9:6a:0f:f6:e4:74:
61:dd:10:93:37:93:13:71:f4:61:6c:bd:e7:8e:fc:
93:bf:de:d5:b9:36:48:d5:b0:f2:4a:f4:ee:61:fb:
84:c2:4a:ff:b2:2b:56:55:fd:96:0c:70:f7:63:b5:
63:5d:f6:62:84:b6:ee:db:08:f8:a6:9d:3b:1f:de:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:41:8B:DB:48:AB:4E:4A:78:3D:43:F0:F4:1A:00:19:30:D8:68
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:61:2d:b8:13:0f:92:4f:6b:95:cd:e7:41:06:3a:3f:f7:f0:
8f:65:5c:01:35:29:81:6c:69:09:e7:6a:13:44:8b:45:76:b1:
25:10:0c:24:c3:cf:fa:b2:6e:5f:0f:8e:35:f0:3b:ce:5d:a1:
64:08:e5:d2:a2:ec:cc:6e:56:61:4f:83:d8:9c:31:fe:f8:4e:
35:ba:f6:04:dd:c4:f5:b4:6c:b1:72:64:4e:a2:b9:ba:9f:ba:
bc:c9:9c:0b:55:0c:37:29:3f:82:67:76:3b:48:8e:32:21:98:
d7:05:00:41:80:67:58:27:84:51:38:ba:1c:6a:bd:ae:40:fe:
af:61:3c:e0:32:52:86:db:12:cf:dc:62:cc:65:fe:95:8d:86:
a4:f0:12:04:0f:3b:72:02:b1:16:6f:22:c6:3d:13:d8:91:38:
cd:5f:0a:aa:08:1d:59:97:bb:55:2a:c9:79:7a:6b:25:c0:71:
31:f2:66:0c:67:d2:78:33:85:92:fc:9b:6e:a0:57:28:58:e1:
53:b3:87:69:f8:5f:ec:e5:71:36:f4:d9:08:4a:66:34:57:d9:
1b:c9:0c:10:71:85:b1:8b:ef:92:72:1c:8a:84:b1:b7:5d:85:
12:79:91:99:ea:d0:09:19:58:47:fa:32:4b:c8:89:1a:88:ef:
fd:68:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client