Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: Y05XmTstx38S7IvB71Uo760FSvuGLExMvD4FR3eM6Gc=
Subject key identifier: 8D:33:C1:32:9A:34:6C:DE:6D:BB:04:86:CF:F5:35:B7:5B:77:2A:C1
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019FAA1A38B7AC1009155D7672782BDFC9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1709
Signing time: Tue 28 Jul 2026 19:01:12 +0000
Manifest this update: Tue 28 Jul 2026 19:01:12 +0000
Manifest next update: Wed 29 Jul 2026 19:01:12 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: GmSKt8PwMHDptzP0Q17/l3VKD6lfdeWOOoaFclooXzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:38:b7:ac:10:09:15:5d:76:72:78:2b:df:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Jul 28 19:01:12 2026 GMT
Not After : Jul 29 19:01:12 2026 GMT
Subject: CN=8d33c1329a346cde6dbb0486cff535b75b772ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:7c:57:a9:99:0c:d5:cd:cb:e9:e3:18:f6:
95:a4:c1:31:fb:3a:8a:6b:31:ee:e9:c0:dc:4c:62:
30:f3:8d:7e:e6:f8:35:1c:68:17:1d:73:8d:fe:af:
4b:1e:40:6b:c7:9c:c3:ab:90:99:a9:6f:1b:19:d9:
df:8f:7c:d4:0e:61:d3:dd:47:9d:40:df:93:25:bd:
2f:74:7b:4e:a9:b3:f2:6b:33:b1:57:1b:e2:51:71:
2e:f6:6f:63:8e:ed:b6:92:67:2c:e0:13:49:8b:f9:
3e:29:da:f9:c9:ca:5b:5a:1d:73:52:cd:f8:cc:69:
6c:b8:36:2b:6b:31:d0:a1:46:45:37:6e:0b:4d:18:
17:c9:6e:ba:74:b4:1d:15:d2:f0:09:bb:59:60:ff:
3d:55:68:78:cc:7d:45:48:45:d7:b2:55:cd:83:12:
97:36:e1:d2:49:8b:1a:36:35:21:3e:39:9c:fd:57:
da:9a:e3:b8:15:fc:a6:68:0b:45:50:3a:b9:f5:60:
9a:3c:6f:8c:91:9d:57:04:ef:4c:a4:40:31:48:a7:
63:ea:e1:a0:3a:07:2b:77:7c:c1:ee:fa:e2:87:48:
e0:f1:f9:6f:2a:50:2e:66:5b:b0:21:b2:47:9d:2d:
3a:77:c9:68:be:d2:21:10:d9:41:c1:6f:56:ad:e3:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:C1:32:9A:34:6C:DE:6D:BB:04:86:CF:F5:35:B7:5B:77:2A:C1
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:a6:21:8b:08:ad:59:22:99:5e:e6:c4:1a:7f:41:f5:5b:
ae:00:64:d5:b1:c4:f7:2f:ee:17:07:9c:d0:84:8b:6e:59:73:
96:75:3d:dc:ba:61:11:0e:4d:70:33:c1:52:2e:d4:48:25:cb:
69:08:3e:36:28:20:ac:08:d6:0c:59:d1:9b:27:72:19:d5:c1:
c3:a2:14:17:f3:64:b9:a1:5a:d0:e1:4f:8f:2f:3a:15:e8:4a:
f1:22:d7:e0:8a:0c:f3:72:01:8f:bc:3a:ca:2e:7f:24:7a:e2:
ab:0a:e3:e8:50:60:a3:b5:01:9c:cb:fe:87:de:41:9e:ca:15:
78:87:85:f4:95:3d:c2:e3:a7:7e:7b:75:d0:05:27:5f:0b:df:
9e:a5:c7:3d:24:22:96:5e:bf:32:fe:b5:90:c3:92:70:21:56:
7f:f9:14:3e:d4:1f:f3:6c:63:8f:1c:de:95:50:f1:3d:ac:79:
3b:47:7f:2c:38:71:2c:22:c8:47:d4:e9:ed:8e:c2:d3:f0:92:
69:bd:b2:60:de:3a:ba:a2:cb:f4:0e:e8:d1:cb:a8:7d:8a:11:
94:51:03:b2:90:a6:f5:23:8f:6a:1e:f6:7c:24:25:44:5b:aa:
20:ce:9e:41:fb:0d:26:38:9a:2d:cf:02:1b:89:1b:b2:ab:ab:
5c:dd:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:45 2026 by rpki-client