Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: MdX/2uN7AwRNIxdy/piJ9MnPpPve+XQOOV4ATQE9PbQ=
Subject key identifier: 27:F0:74:5A:53:65:73:D7:31:0A:15:04:97:02:95:84:E1:DD:96:7B
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019CAB6B0268115268076A8B070442ACC539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:42 +0000
Manifest this update: Sun 01 Mar 2026 22:00:42 +0000
Manifest next update: Mon 02 Mar 2026 22:00:42 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: QEB6hdC7frr/kjTxqHBMNCeeKxbA4n8a4v7i+qP6ICo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:02:68:11:52:68:07:6a:8b:07:04:42:ac:c5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Mar 1 22:00:42 2026 GMT
Not After : Mar 2 22:00:42 2026 GMT
Subject: CN=27f0745a536573d7310a150497029584e1dd967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:96:93:f6:b4:9e:f3:f4:83:f0:93:e1:41:
05:df:d8:1f:93:c1:b1:47:07:ac:f3:2f:aa:58:46:
f8:12:d2:09:19:3f:2c:cf:ef:9b:45:40:5b:37:86:
97:2d:3d:3a:b0:8c:05:67:0e:fd:33:89:6d:ef:53:
03:6c:09:95:00:e0:a2:36:37:0b:21:7e:eb:76:96:
8d:96:a0:8f:34:c6:ac:bd:db:db:7e:21:cf:29:1d:
ab:b3:ea:c3:46:90:c1:8d:08:93:22:c7:a0:4c:2a:
dd:a6:da:f9:49:49:9f:0c:b1:f4:fa:01:79:e8:47:
81:5f:5a:f7:a1:c9:38:fd:77:69:a9:e6:66:c6:d9:
c1:32:99:f7:d2:3e:08:05:d9:bd:1e:a1:b4:db:59:
e9:ea:73:ff:d4:0a:0e:11:ac:2f:be:55:b9:61:9e:
2c:b2:f5:c0:3e:da:df:01:50:90:af:f3:cb:7b:ef:
c1:1a:25:18:a1:56:12:87:60:a1:e0:b6:8d:5a:8d:
8f:96:89:a4:b5:f8:23:ef:92:0f:ea:45:ac:03:81:
9f:21:ea:17:20:3d:31:30:d8:d0:69:9d:1c:54:e4:
17:52:00:58:06:11:6a:85:50:c5:79:2c:e7:83:29:
e4:e9:d9:9b:0e:d7:0f:02:15:1c:03:f7:91:3b:61:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:74:5A:53:65:73:D7:31:0A:15:04:97:02:95:84:E1:DD:96:7B
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:98:1c:42:23:fb:a9:b5:2c:6e:da:62:cb:77:09:76:f9:
cd:64:37:9a:53:93:59:4a:84:82:15:ba:a8:b7:4f:79:ea:0d:
ec:85:c2:5d:bf:27:94:6d:0d:3b:29:cf:67:79:e7:d5:70:ad:
93:38:79:c8:cf:53:b5:66:6e:2c:74:1f:f5:2d:00:ff:e0:fc:
6f:2b:65:da:18:07:f7:0c:aa:d7:3f:0b:77:5d:af:94:e6:56:
20:bb:99:dd:83:cf:79:a6:a6:31:a2:8f:7f:50:3a:d5:7e:23:
6c:f1:4e:5a:a2:a0:7d:c8:9b:88:07:fa:91:1d:8d:58:15:15:
1d:f5:c2:ff:1f:0b:e3:b5:bb:9f:c3:7e:c4:2c:57:c8:b1:2a:
f3:34:16:84:6c:3c:e7:27:9b:d3:7c:63:e2:2f:38:36:81:4d:
3f:41:4b:67:d5:c9:98:e3:51:bc:23:a5:7c:d5:a4:65:9c:08:
2c:30:0e:83:29:e4:8e:fb:4b:d7:cb:a3:02:92:c5:48:ef:6d:
9f:19:1f:6b:00:9c:24:56:ab:42:52:74:3c:68:c4:85:2c:46:
da:5c:82:f4:0c:51:33:5b:82:7b:08:1a:94:ba:e3:e0:d1:9a:
21:80:f3:cd:69:bf:51:a5:40:03:47:ed:d2:21:16:1b:0b:95:
09:ba:5e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:59 2026 by rpki-client