Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: sHcUEqKi3FDw+7dc2F+/sQ77hN2d+7lppeRTqYSH9B4=
Subject key identifier: 72:1A:53:54:EA:3B:FA:6E:4F:20:7F:42:81:18:F4:52:02:6A:7A:B6
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 019D3865F6F439C39AB85498B11E1E640643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: /DkXiX4QwjlZ6rIKHHAKqxg7tPxkGJrGWaD5U5IjeA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f6:f4:39:c3:9a:b8:54:98:b1:1e:1e:64:06:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=721a5354ea3bfa6e4f207f428118f452026a7ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:5a:de:54:04:d0:35:12:64:45:39:dd:b6:
3a:6b:44:44:59:5e:8b:08:23:3d:12:18:27:03:ed:
6b:95:9b:2f:aa:88:e0:29:78:5c:1a:d4:20:47:08:
86:35:44:5f:98:dd:cf:f9:a5:56:9f:53:7e:ee:b2:
18:a1:c2:55:9e:38:84:ab:fd:a7:72:5e:68:a3:c1:
83:ff:03:7f:43:17:90:eb:4c:b9:97:b5:41:1a:b2:
b4:77:32:bc:b5:a6:63:7e:aa:cc:62:9f:f0:cd:4d:
2e:91:51:b7:df:91:fb:0f:be:85:94:b7:d5:27:87:
c3:4a:1d:32:52:fe:ab:e0:d9:43:70:5c:df:1f:48:
e2:64:f0:53:a0:17:e1:25:e8:78:66:1a:82:15:aa:
f5:b6:d6:f6:83:85:30:ef:0a:1e:0e:80:4d:45:ba:
5f:99:ab:06:e7:e0:24:1a:a4:2c:a5:3c:a6:bf:ba:
a6:5d:ce:b2:3d:d7:63:04:d4:56:3d:9c:eb:d0:bb:
b7:78:a7:9d:51:fe:8a:78:cd:d9:19:08:f8:eb:c0:
af:48:9f:d1:3b:03:35:8e:9f:1f:a4:83:bd:8c:21:
1e:e2:b7:58:d9:73:e5:1a:77:ef:63:e2:bc:1b:2c:
38:02:5d:78:62:3d:3f:fa:44:9d:bd:26:96:a3:1a:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:53:54:EA:3B:FA:6E:4F:20:7F:42:81:18:F4:52:02:6A:7A:B6
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:50:76:55:3b:3e:a3:12:f7:b5:12:32:e4:dd:68:4c:53:
0f:6d:11:2e:03:99:88:f2:b9:46:3b:2c:76:50:24:c0:4c:98:
2f:fc:54:5c:88:c4:80:f2:c3:70:57:1e:b5:e7:c0:10:83:b5:
09:07:b5:c7:4c:62:db:39:d7:4d:4d:78:54:bd:65:ff:ad:22:
c0:76:31:ef:db:9b:69:a9:79:70:4e:5e:9d:1b:3c:d7:56:d4:
e2:66:d4:7b:bf:97:48:95:54:b4:e4:c0:26:10:67:d6:0c:1f:
7c:32:d7:35:01:d2:04:81:a4:a0:18:bb:95:c6:78:f7:63:d8:
0d:cc:46:0b:df:d0:6b:e6:db:94:62:1d:a0:c3:46:1e:5e:c3:
c0:87:20:60:b7:d2:70:7f:f3:ae:47:ab:4d:9d:87:f0:3a:e5:
ae:45:30:1c:f4:49:41:c3:02:ba:c0:39:84:41:dc:15:6f:4a:
ba:fa:14:2d:dd:33:43:1e:11:10:aa:33:d5:c6:ea:a3:66:a0:
2d:9f:77:c1:21:94:8b:cd:4b:b2:b8:e6:c3:c0:2d:13:5f:88:
db:19:e3:06:2f:c5:67:a0:c1:c1:c1:b5:fc:b6:cc:1f:69:93:
09:ce:22:69:f2:75:d7:df:07:83:94:fd:e2:83:40:b1:74:f8:
6a:46:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:59 2026 by rpki-client