Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: vEl4XzKKvv9mCoiKGayTDMWoCsSm4z59qKcVE1juJNM=
Subject key identifier: A6:44:BC:06:42:0E:AE:4F:5E:5F:27:C6:4B:55:10:66:15:D2:39:D6
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019CAAC6CF9094211EB06C614BEEAC07400C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 12C7
Signing time: Sun 01 Mar 2026 19:01:21 +0000
Manifest this update: Sun 01 Mar 2026 19:01:21 +0000
Manifest next update: Mon 02 Mar 2026 19:01:21 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: G7KhShEh8liI6NDVv1ZnCPWFBKUNLaHOApbFBc6zVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:cf:90:94:21:1e:b0:6c:61:4b:ee:ac:07:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Mar 1 19:01:21 2026 GMT
Not After : Mar 2 19:01:21 2026 GMT
Subject: CN=a644bc06420eae4f5e5f27c64b55106615d239d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:4e:65:7a:61:42:29:02:50:8f:61:ac:af:
c9:e2:71:af:d9:e4:64:38:90:78:96:23:12:12:3b:
92:47:40:81:e8:7e:85:d9:23:11:fa:26:af:e0:14:
4c:e9:5d:36:4e:b5:3a:3c:05:34:39:92:04:a8:50:
72:41:df:fa:02:11:84:64:e6:7a:d3:9d:ad:4f:7c:
dd:dc:76:f7:ee:5d:dd:aa:ec:8c:52:3d:a6:fb:df:
74:8b:ad:5d:c2:64:ab:45:0d:2b:e2:ae:cd:9e:8d:
e8:08:8e:23:1e:06:22:7c:9f:9c:bd:72:9f:5f:68:
af:93:15:1d:dd:1d:91:65:11:0c:33:52:c7:b9:81:
1a:9d:97:bd:53:9d:80:d5:84:36:88:dc:98:78:08:
92:92:cc:89:f9:c7:2a:ed:67:37:b2:96:b2:dd:c3:
00:cd:6b:8d:6d:06:86:5d:ff:03:43:7c:7d:8e:c3:
e6:ad:bd:54:4b:27:84:93:7f:d5:54:01:6a:13:0b:
aa:db:e3:0c:94:eb:72:19:ee:50:47:8e:56:37:02:
9d:13:44:af:5d:a7:a0:aa:c7:ff:b3:00:c4:b0:3c:
21:8b:d3:38:36:75:e6:5a:d6:0a:e6:33:0c:6c:c4:
6b:9b:f0:a0:11:e3:74:bf:35:34:cd:b9:13:04:d8:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:BC:06:42:0E:AE:4F:5E:5F:27:C6:4B:55:10:66:15:D2:39:D6
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cf:60:80:18:54:37:fe:e1:11:af:0e:36:32:49:68:64:fe:
b3:72:03:cc:90:1e:3d:1c:f5:cf:ab:c3:8f:1c:e7:6c:9f:54:
bc:49:4c:68:82:fe:0d:6b:82:14:e0:e7:b5:1b:78:07:9d:a4:
29:ae:27:82:9f:7b:28:11:dc:3e:d4:34:79:b8:58:98:af:08:
7b:b3:a7:09:70:b1:f8:58:11:85:00:ed:92:c4:84:b1:96:7a:
c8:22:5d:1c:e0:52:c7:33:c7:f2:7d:da:4b:ad:1c:74:b8:58:
5f:e6:42:86:00:6f:15:48:fe:8b:7d:5d:32:f0:3c:08:85:b9:
09:b0:c1:7a:fb:8a:3a:b6:25:3a:36:9a:6b:f8:37:1a:d9:5f:
26:21:45:df:85:34:58:43:de:24:20:e0:7e:57:7a:cb:de:8d:
9a:90:e5:d3:3b:45:32:32:54:42:a8:ac:a8:52:b6:3d:ee:2d:
23:87:6e:15:52:9a:a1:4a:84:d2:52:5d:5c:26:4a:e1:db:dc:
bc:9d:57:50:57:68:12:78:9c:8a:59:41:ef:c0:5e:e4:8d:87:
55:04:7f:de:49:c3:9c:e9:f4:d3:95:4f:eb:51:44:63:37:6d:
96:6d:16:42:cb:1c:e4:dd:29:87:88:3d:34:ec:37:68:4f:26:
3a:c2:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:24 2026 by rpki-client