Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: PtR0nK6AQzUODGxVYzcZfGr6aYidXcm+S2F/wU9cFtQ=
Subject key identifier: ED:3A:FD:17:53:D0:CA:8E:0A:8B:48:C0:F9:DB:AB:6A:BE:39:94:E8
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019D98F5228FF375C693CAD172FCE9BBC220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: jGbdMP3rvDZOML5XwToRW8z4T6FODKY0yQUkjXUh1tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:22:8f:f3:75:c6:93:ca:d1:72:fc:e9:bb:c2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=ed3afd1753d0ca8e0a8b48c0f9dbab6abe3994e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:59:3d:3d:c0:7c:db:a7:63:2f:b4:e7:60:
1c:dd:f4:08:60:d3:08:bc:29:74:24:3b:9a:b6:54:
cc:0e:cf:86:23:c0:15:e7:8e:6f:1a:6c:fc:59:34:
af:17:a9:c7:f0:bd:2b:d7:a1:06:b2:38:0d:93:2d:
51:04:c6:ba:13:96:68:2a:9b:a9:a2:31:cc:82:3d:
78:9f:d9:ea:2d:b2:e9:26:e1:75:b3:8d:ba:58:fa:
d9:9b:4b:32:82:9a:87:19:ed:d9:cd:ea:10:2d:46:
27:2e:65:32:a1:d8:3e:e7:b4:f6:b2:ea:62:fc:30:
8c:d4:a9:e6:ab:4d:af:41:0b:70:89:ef:0e:1c:98:
fb:fb:d3:7a:67:4b:87:5a:97:af:da:02:60:51:42:
0d:00:e3:2d:6c:8c:80:18:d7:23:2f:e1:7f:f3:4c:
76:b7:93:c8:66:ac:fc:2e:a0:60:2a:94:22:4a:80:
70:df:cf:9a:f7:01:9b:71:ca:9f:c7:c4:21:34:90:
3d:69:f5:fc:fc:ea:aa:f0:74:a4:df:c9:e7:e3:cf:
de:9b:e7:b1:b0:6a:fc:df:ba:5e:46:01:53:cd:35:
77:2b:41:de:46:d4:58:72:39:7a:42:b8:b3:d1:11:
f2:d2:ef:56:de:da:29:70:b4:11:fe:a1:2c:9b:cb:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:FD:17:53:D0:CA:8E:0A:8B:48:C0:F9:DB:AB:6A:BE:39:94:E8
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:76:dd:af:42:82:03:18:9c:9f:e5:00:76:57:79:06:d1:46:
c4:d0:1b:a9:a5:6e:b9:15:07:ee:8a:7a:20:28:8c:e7:cd:b3:
b0:6d:5a:7d:b7:bb:9a:4c:fd:f6:86:73:c3:7c:83:40:12:a0:
e3:3a:43:a7:90:cd:e7:a5:ae:eb:05:c6:18:2b:f1:99:d4:8f:
80:23:1b:1a:6f:02:55:6e:71:dd:e2:5b:97:fb:7e:1a:44:14:
fa:d8:12:e8:ba:ec:e9:fe:a0:0c:9b:94:eb:07:14:09:a5:c0:
1a:68:a3:8b:fd:3c:cc:62:4f:e3:73:94:8a:f7:44:7a:5b:e6:
10:c6:35:eb:d5:79:c9:90:38:7e:01:cd:cc:42:05:f0:95:38:
33:19:28:24:44:07:aa:4b:4b:ea:99:0e:54:12:8a:98:de:01:
38:02:4e:b4:99:1a:c9:ee:12:80:67:78:d4:06:c7:ee:a3:a9:
0f:9c:c4:d5:ed:10:71:29:8a:e6:72:76:82:65:83:72:a0:bd:
ca:c0:de:3a:59:f3:5b:f2:96:8c:96:60:53:82:64:d5:33:4b:
33:b9:a4:55:7f:16:8f:c0:b9:86:02:09:79:f7:c0:45:bf:c9:
5a:18:ba:40:17:c8:44:3a:25:8f:9a:6c:bf:ca:64:dd:e3:94:
00:ea:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:12 2026 by rpki-client