Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: QWdG0u2l7Li5g30R0dbbGQy07mn8G5zb5iGj/Kr7hh8=
Subject key identifier: DD:F2:45:44:07:EE:F0:2F:1C:47:78:23:C2:31:B5:8F:E8:C4:F3:52
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019D9A3E0C6694F608AFB45D4EE657D7D512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1343
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: D3x2YBpBCEN/btKWarxTx1EjOnRdWjn75jnywvGl3JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0c:66:94:f6:08:af:b4:5d:4e:e6:57:d7:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=ddf2454407eef02f1c477823c231b58fe8c4f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:29:eb:8f:e6:dc:a8:eb:da:71:c2:22:41:
ce:68:c2:9e:06:2b:83:cc:9a:0a:83:ab:9a:23:c4:
ce:10:2e:0c:2c:92:b1:41:18:da:bd:4b:9c:d2:f4:
7a:7c:e6:87:7b:a8:19:b9:d8:37:38:a6:13:d4:4e:
77:4f:c0:df:0a:13:ae:d2:c5:14:f9:3d:23:81:cd:
d5:dd:ed:41:8c:18:17:6b:0c:c6:10:77:ef:1e:d5:
95:aa:87:5c:fc:9b:87:17:ec:f3:16:4c:3d:b4:be:
ca:7c:98:21:0f:55:eb:aa:93:f5:23:e5:63:63:92:
32:57:64:09:86:99:01:e0:ee:95:f0:30:e8:c4:4e:
20:5a:5b:d3:bd:c9:5f:f9:22:71:bd:44:f0:19:df:
84:f9:d5:dc:18:fd:70:38:07:fa:23:4d:0a:e9:86:
b5:8e:3e:9b:e3:1e:d8:1a:1b:77:b5:5a:e1:54:ab:
9f:46:8c:e5:33:75:6e:a4:c6:b2:a0:2c:62:b5:e9:
0b:7a:5d:23:a9:4a:46:71:ed:79:a5:89:e1:09:1a:
1e:7b:52:d0:a5:49:d5:a3:46:83:e5:65:2e:5e:27:
b4:71:73:64:9a:8e:3a:b9:7d:70:b9:45:22:7d:51:
f1:25:e2:74:79:d3:97:ed:9d:a6:52:02:a3:aa:3b:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:45:44:07:EE:F0:2F:1C:47:78:23:C2:31:B5:8F:E8:C4:F3:52
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:e9:4f:c9:71:6b:93:79:da:25:39:4d:e7:d3:72:1d:61:
2d:74:21:86:86:a7:6a:ca:df:17:aa:ab:cd:b5:2d:d6:e1:d0:
e7:92:28:7d:78:ed:a6:f4:e0:a9:d0:68:d1:f2:14:14:96:e9:
7e:e1:69:dd:f6:9f:25:34:0a:90:d6:ea:6f:59:f1:60:a9:5a:
43:c6:85:53:a2:5a:8f:69:e4:16:34:52:6a:13:5f:2d:39:16:
63:1d:aa:60:59:0f:99:9e:5b:3a:1e:be:9d:30:dc:d8:4e:07:
1f:d4:fd:5c:5f:cc:fa:1b:2f:cc:19:3a:7e:00:2a:4d:5f:74:
ac:01:2e:fd:b8:64:83:cf:57:32:5e:36:a1:51:a7:12:f4:86:
cd:be:b9:ed:2f:45:c1:a6:ae:96:2b:fd:57:b7:8b:a2:82:b1:
4c:c1:2b:1f:83:44:de:6f:8b:3c:6a:82:89:28:c5:69:b8:2e:
87:be:00:ee:6e:e7:95:f2:63:34:72:39:13:c6:3f:ce:6f:39:
c5:d9:cb:f2:0e:6b:46:cc:e5:ad:74:9a:c9:8b:d5:60:6a:c6:
f1:59:a0:c2:3c:5e:45:51:32:15:c6:f9:02:0d:09:0e:26:69:
4e:7d:9f:74:54:2d:1e:82:ca:1f:1d:78:79:cf:3b:94:82:47:
30:35:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:02 2026 by rpki-client