Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: 3NzpahTJqWcfDqJHzbFVdWiqx4R7DBycHAI43UUhUNk=
Subject key identifier: C3:45:CC:29:35:37:FC:39:DD:D8:FE:A5:53:85:78:D8:1F:08:D9:08
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 019CACB4BDB161B865819072F69C62CE3711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 04:00:52 +0000
Manifest this update: Mon 02 Mar 2026 04:00:52 +0000
Manifest next update: Tue 03 Mar 2026 04:00:52 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: jxMi4UXF8ypraeF1enU/dMAS93V0TZKGkmZs8wXy8ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bd:b1:61:b8:65:81:90:72:f6:9c:62:ce:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Mar 2 04:00:52 2026 GMT
Not After : Mar 3 04:00:52 2026 GMT
Subject: CN=c345cc293537fc39ddd8fea5538578d81f08d908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:b6:55:c0:c0:08:2f:61:b6:6d:96:b3:28:
b1:0f:34:e3:e4:7e:2c:53:08:b8:90:f8:20:bc:4d:
ef:be:51:26:b6:e9:bf:87:64:94:ac:db:d2:aa:d5:
5e:bf:5b:a0:1d:fe:8c:f2:cd:78:d2:c0:7b:b0:f2:
bb:34:b6:4e:77:35:45:69:e8:61:d5:df:25:c3:b6:
75:69:d8:3f:8b:4a:b1:58:e8:c4:2d:71:2a:1a:91:
89:fc:cb:7c:7c:01:a5:16:3b:6d:e0:91:e3:73:04:
0f:79:17:79:24:f9:0e:e5:bc:35:c4:1e:a8:ec:c4:
8c:89:e2:0c:bc:0c:52:b0:40:bb:12:ad:76:bc:0c:
ad:e8:48:bd:92:e8:02:4c:b2:54:a0:2e:d7:9b:ed:
ca:ba:7e:08:bb:28:4c:b9:42:31:f3:35:2b:ad:43:
78:8c:bb:7b:59:20:4e:08:8d:61:d4:d6:be:18:f8:
77:d9:14:7c:ff:dc:fc:a6:85:8a:87:f3:e6:ac:95:
36:8a:0a:2d:75:d6:d3:a1:59:a7:03:13:10:ed:e4:
6e:0e:a0:f0:8a:76:c9:8f:cb:2f:30:a6:75:8b:8c:
fe:a2:54:83:cd:60:cc:56:3e:29:42:60:6f:b2:35:
e1:1a:36:12:f9:e9:d9:13:b1:21:4d:da:c1:51:67:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:45:CC:29:35:37:FC:39:DD:D8:FE:A5:53:85:78:D8:1F:08:D9:08
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:3f:31:0a:4c:0f:23:24:3c:94:61:98:5d:9b:63:e2:f8:
9a:92:ce:fc:5e:8e:5c:05:0c:33:b7:11:9d:1b:20:cb:8f:93:
4b:e1:7c:fc:0f:0f:d1:54:17:cb:45:6d:23:3b:cf:19:b2:f3:
1d:35:20:ef:80:26:96:d6:e3:78:0b:bd:57:2c:87:02:51:1f:
70:42:d5:23:8d:f1:5a:7c:5c:14:79:3f:cf:b1:87:94:fe:8f:
af:74:f7:d5:53:42:02:6e:04:14:9a:c0:4a:b7:e0:f7:0e:29:
a9:97:32:7d:03:53:be:a1:a9:c5:26:29:9a:8d:c3:97:57:cd:
49:0a:60:c4:73:66:03:71:92:7d:71:78:32:c4:84:d0:95:3f:
f9:9c:3f:96:35:55:43:de:69:f4:84:95:ca:5d:d2:8d:07:60:
f3:7c:2f:60:6f:8f:34:23:23:b3:e7:14:df:d3:d1:58:5a:b1:
3e:a8:0a:25:ed:a3:91:e0:96:ac:a5:14:a0:65:e9:0f:3e:65:
26:ac:32:b6:5a:15:49:21:c2:b6:af:00:96:db:40:da:78:5e:
4c:97:96:44:96:cb:18:71:dc:e3:67:a1:6b:ee:9e:74:7b:ac:
36:7b:b7:10:dd:b1:ae:48:0e:68:a5:27:6d:f4:1f:59:f3:0b:
76:c2:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:36 2026 by rpki-client