Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: /EqIBvnrYru6ekiBIRGwnaaDXKNv3oOqMeH84GJ4nrc=
Subject key identifier: 32:DC:24:FD:D0:75:B7:96:E4:12:A0:C9:D0:DD:91:B1:6F:36:4D:08
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019EBF23261D6EBF1EA61E87F17949837B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0843
Signing time: Sat 13 Jun 2026 04:00:12 +0000
Manifest this update: Sat 13 Jun 2026 04:00:12 +0000
Manifest next update: Sun 14 Jun 2026 04:00:12 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: fJxd9Q7WXIDoW7fxrrCc3jXZfEUPsweh9EOoLNNFUR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:26:1d:6e:bf:1e:a6:1e:87:f1:79:49:83:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jun 13 04:00:12 2026 GMT
Not After : Jun 14 04:00:12 2026 GMT
Subject: CN=32dc24fdd075b796e412a0c9d0dd91b16f364d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:11:25:6c:ee:ad:4c:e2:e3:2c:1d:d8:2a:
a1:56:72:eb:ab:6f:7e:09:02:bd:d2:8d:8b:3d:68:
e9:7c:20:a4:6b:ec:2f:4e:cc:fd:3f:61:53:a6:dd:
85:07:c8:17:61:83:f0:37:16:9d:13:c3:40:ac:d8:
a2:32:91:05:59:cc:c1:d1:dc:ab:63:de:2d:ab:16:
b7:d7:e0:fe:83:70:9b:11:7c:a8:ea:2f:64:f2:a3:
6d:5c:ed:12:fc:f4:d3:5d:c3:49:32:74:5e:a8:e8:
2c:b3:60:06:df:2b:0e:59:5c:b6:d2:91:18:0b:08:
00:b2:b9:35:cd:bd:ad:3e:60:75:c0:a9:73:ed:f0:
4f:43:16:d2:91:b7:36:58:da:b3:ee:0a:03:5e:58:
4c:a2:6a:b7:6e:21:d4:4d:e6:0c:d0:21:37:1b:06:
f0:a6:ad:3f:2a:e4:85:85:b1:6e:e2:9f:e8:be:2c:
e1:b0:b4:65:5e:0d:0a:7e:e8:ee:a6:0e:51:3c:4a:
7c:62:92:7c:c8:e0:ea:c5:d1:21:3a:7a:c8:45:6d:
95:10:5b:0f:ec:de:12:b8:35:39:85:7e:b2:67:94:
2f:7e:e9:ec:69:f1:3f:f5:d2:7d:60:17:f3:f1:82:
fa:50:1b:9f:4d:82:0f:2e:67:09:84:c1:41:ea:35:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:24:FD:D0:75:B7:96:E4:12:A0:C9:D0:DD:91:B1:6F:36:4D:08
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4a:39:d8:3b:e0:48:3e:83:fc:36:97:d4:27:b3:90:44:55:
f2:88:63:2c:d0:5c:31:db:bf:b9:ff:fd:92:22:2b:80:e6:93:
cc:0e:3b:db:f4:56:65:ef:ae:a6:68:8f:82:94:f5:0c:a9:a0:
07:64:16:b3:c6:a1:e9:a9:d4:38:53:62:6b:30:7a:17:03:61:
d7:1f:ff:71:16:55:a3:45:74:a9:ee:d3:9a:06:80:8d:2f:82:
b4:ee:2f:f4:22:95:10:31:92:78:a9:bb:08:c0:e7:8d:c4:70:
6d:e6:f1:1e:48:e5:d2:21:ca:82:86:a8:bf:2d:39:8e:42:d1:
5f:db:32:2e:ec:09:da:1d:51:6c:0e:36:49:15:54:3b:3f:9c:
8e:3b:fe:68:ad:a0:57:2d:0a:e1:82:f9:7d:fe:4e:d7:6a:13:
af:20:be:a4:fc:b3:7c:cb:6c:09:30:46:4c:0c:c4:91:83:74:
a5:dd:99:71:47:fe:36:01:47:6c:aa:17:25:91:ff:a5:fd:e4:
a0:84:81:6f:c4:3b:4f:fe:d0:e8:bc:61:f6:b5:16:64:1b:5b:
e9:f6:93:75:1c:7d:c4:62:a9:65:e2:a2:de:ea:27:24:8a:fb:
97:6d:77:6d:64:9b:41:cc:5d:62:05:57:70:5b:65:f4:fe:16:
5d:5a:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:36 2026 by rpki-client