Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 7PNGEJsspWZuYbLu09xDPkFnua8+BLbci3CeVL8Kj4c=
Subject key identifier: 09:BE:0B:C3:C3:3F:97:E9:C1:0F:DC:56:AE:05:62:D9:D4:31:EA:C7
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019D9AE320C7AE2C2DCC170CF1E7F629017E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 15F8
Signing time: Fri 17 Apr 2026 10:01:09 +0000
Manifest this update: Fri 17 Apr 2026 10:01:09 +0000
Manifest next update: Sat 18 Apr 2026 10:01:09 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: zn6sDWwg2+TP7/o3g1Fsr+GoIAX6y2bTPVDHhYgoiJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:20:c7:ae:2c:2d:cc:17:0c:f1:e7:f6:29:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Apr 17 10:01:09 2026 GMT
Not After : Apr 18 10:01:09 2026 GMT
Subject: CN=09be0bc3c33f97e9c10fdc56ae0562d9d431eac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:07:43:64:fd:b5:8a:0d:d2:db:dc:1b:4e:
4f:57:9d:e3:2b:13:32:42:10:54:fe:84:74:cf:a5:
e8:ab:8d:dc:3f:85:3c:50:c3:4d:39:2b:88:f2:1f:
21:6c:ed:24:38:f2:ec:c1:b6:48:ff:fb:fa:b8:69:
c3:b3:73:2d:13:9c:29:0b:73:5b:a9:76:1d:9c:84:
4c:9b:56:ae:3c:c7:ae:68:6e:92:b5:f5:ba:e2:75:
76:9d:6b:8e:91:2a:13:a8:2d:22:ae:55:22:ba:30:
9d:70:db:de:8d:cf:f0:35:90:6d:9f:13:ce:d7:af:
0a:a1:92:e3:36:24:77:d3:8b:d7:0c:ec:e7:bb:5e:
ed:45:f4:1f:34:61:ed:92:fc:4c:60:ef:3a:b3:bb:
86:0b:a1:6d:46:08:c2:6b:a7:66:e9:c6:86:35:87:
75:90:82:d0:e8:0f:38:48:8b:b2:88:d4:be:6c:58:
8c:d4:65:76:b0:70:af:ec:27:b6:ef:14:88:b9:b8:
f9:92:1d:7c:2a:59:3c:d4:ee:1c:99:fe:87:90:9a:
17:70:48:81:0c:e0:64:af:04:3f:f6:c6:b7:36:2c:
35:c3:11:49:48:21:94:4f:5d:6f:8b:76:13:3c:e5:
e9:a0:07:a5:10:bc:3f:5c:8b:f9:e3:5e:7e:17:4f:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:0B:C3:C3:3F:97:E9:C1:0F:DC:56:AE:05:62:D9:D4:31:EA:C7
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:3d:03:dd:dd:94:15:43:06:43:46:42:71:ff:74:96:31:
6d:c0:1b:fa:b6:c1:7d:8c:f2:c1:59:e7:6e:ac:f1:a8:e4:87:
41:0c:03:3d:40:c3:66:c2:ab:9a:56:73:e1:e8:2c:6a:fb:66:
1a:c9:13:c0:4c:89:e2:a7:a0:58:02:98:fb:12:d5:f0:30:4b:
b5:98:52:a6:d4:62:6e:e5:8b:c9:ee:5a:6a:1b:8f:18:a7:c9:
37:1f:a0:a3:bc:fb:45:51:60:bf:f7:fd:bc:97:c9:0f:ba:78:
e6:92:49:e4:6e:24:fa:2a:fa:7e:0c:7a:6d:34:31:c4:3d:8e:
8e:9e:3d:4b:5e:39:4d:4b:fd:cd:0b:6f:b7:b5:2b:1a:ed:69:
7d:bc:ae:ad:1d:bd:7d:a1:c8:2c:86:5a:0b:33:2c:9d:ba:4d:
fd:19:07:ee:51:c4:f1:7b:31:ab:48:69:95:e0:24:d0:81:98:
3e:08:d5:c0:aa:30:3b:dd:7a:4b:c4:bc:04:bc:6a:2d:27:fb:
13:31:06:33:6b:58:58:d3:bc:84:52:6b:95:45:da:af:14:54:
d8:82:cb:b0:98:05:ed:ac:de:53:bd:76:a8:10:4d:3f:fd:9c:
27:e7:2a:22:8f:36:24:f1:f2:0c:23:ea:06:61:a9:db:c8:80:
15:ed:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:13 2026 by rpki-client