Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: hTRKYkvMJbL9ZvhHaHxobSWjLi3KyosNajWrZ9DjUF8=
Subject key identifier: BB:64:25:FF:3E:22:6E:08:3B:FA:FB:77:8F:96:BE:01:08:C2:32:35
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019EBFC877EFDF1A73795021D4BA453B4345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 13DB
Signing time: Sat 13 Jun 2026 07:00:46 +0000
Manifest this update: Sat 13 Jun 2026 07:00:46 +0000
Manifest next update: Sun 14 Jun 2026 07:00:46 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: aFXdm6epeVlP2aOlVz62KWH2vluHY2oEdeDRuS9JWT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:77:ef:df:1a:73:79:50:21:d4:ba:45:3b:43:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 13 07:00:46 2026 GMT
Not After : Jun 14 07:00:46 2026 GMT
Subject: CN=bb6425ff3e226e083bfafb778f96be0108c23235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:58:6e:91:4b:3f:44:4b:d3:e7:36:d7:a8:
6b:4a:03:e6:bc:72:64:cc:a9:ba:c1:0b:62:db:a4:
b5:f6:91:93:8b:ee:30:96:bd:1b:15:25:2a:f2:41:
18:b6:03:94:d4:9e:a1:36:00:8f:5c:ef:8f:0d:cb:
90:a9:63:18:be:7c:fb:d3:42:02:63:99:98:ce:97:
b9:a2:08:9f:c8:5c:c0:b9:16:c7:0d:2a:6f:c5:6e:
0c:9c:ec:1e:34:40:95:27:e1:95:db:22:da:67:4b:
07:d3:4d:be:c1:5c:59:60:5e:c0:2b:c2:e2:e1:38:
32:b2:4a:46:25:50:f2:5f:f1:42:05:21:ef:11:7e:
53:b9:f4:17:a7:94:25:16:0b:52:00:48:29:d2:e6:
14:0d:7b:86:31:44:2a:0c:b0:f0:d0:e4:03:3e:bb:
a6:70:9e:2c:f9:fe:29:fa:ad:e3:b8:c8:f3:55:b1:
9e:c0:47:e5:0f:53:21:fb:f4:d9:89:95:bd:c9:06:
b7:fb:34:79:80:50:7f:43:e6:af:c2:c1:95:ea:23:
a1:41:70:16:a4:8c:5d:c5:c6:0e:09:a0:7e:b8:e6:
94:bb:53:ca:6d:2c:c1:d3:92:0f:b4:29:a8:25:d5:
56:0b:0f:e1:c6:1f:d3:c9:c0:ba:7a:c4:3d:b1:5a:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:25:FF:3E:22:6E:08:3B:FA:FB:77:8F:96:BE:01:08:C2:32:35
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:73:3f:14:b2:2e:53:b4:31:89:b4:97:78:63:f4:fa:2c:78:
21:0e:29:e0:5b:e4:2b:b2:bb:86:09:54:8c:71:b9:62:4e:62:
49:19:32:4e:40:6c:aa:90:25:4a:9b:c4:a2:6d:1c:24:e9:20:
39:c2:3a:5e:f8:65:3d:0f:1d:9a:2a:ad:ca:b3:4d:b7:57:a2:
c5:a5:86:90:7b:df:50:20:aa:f1:ab:1b:cf:7c:07:bb:67:52:
48:93:a5:17:4c:b3:cc:42:ce:a2:c5:96:50:e0:c4:bc:8a:67:
90:f4:3e:92:46:5f:0d:c4:38:2a:2a:40:a4:49:bf:ce:c2:35:
af:41:31:3f:d0:bd:a1:de:75:56:85:0e:ee:eb:0a:a0:43:c5:
c4:bd:87:bf:1f:95:5a:d4:1d:63:6a:d3:71:0f:57:83:3d:11:
ef:2a:e5:a2:c4:83:2d:7a:30:db:a4:74:1c:53:b4:01:b8:e9:
2f:42:9d:fe:88:65:2c:17:bb:de:3a:a0:23:0f:a1:d3:04:7b:
f0:61:e4:63:95:8d:04:54:d7:ef:30:f1:57:2e:15:b3:41:22:
e6:d5:75:ef:f4:40:d0:36:1d:48:0e:54:b7:7f:1b:4d:c6:1a:
34:06:32:e4:b4:aa:d9:93:1e:e7:55:0a:48:79:70:2e:59:f3:
f3:08:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:17 2026 by rpki-client