Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: 7b+9/bFGTCVz11H+O0pTLHmBK+GJzoeqXdRpqGKZWzQ=
Subject key identifier: 95:CE:A8:52:8B:40:BC:F2:19:60:21:09:F8:B1:9C:BE:C4:8D:73:96
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 019DA3E662BBADF500E5C8676627CA13E78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 04:01:17 +0000
Manifest this update: Sun 19 Apr 2026 04:01:17 +0000
Manifest next update: Mon 20 Apr 2026 04:01:17 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: A129X7CWRKAPThieUeK3Bb2k9m8EzTs9339AuJ1Vu2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:62:bb:ad:f5:00:e5:c8:67:66:27:ca:13:e7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Apr 19 04:01:17 2026 GMT
Not After : Apr 20 04:01:17 2026 GMT
Subject: CN=95cea8528b40bcf219602109f8b19cbec48d7396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:70:59:bc:d3:9b:e2:f9:50:41:92:94:f3:
d8:32:fb:0a:6b:af:c0:14:d1:ff:41:74:00:91:37:
c1:54:74:97:1b:0e:70:c8:f6:f3:d9:57:51:d5:40:
de:39:a7:78:27:6c:be:7c:d4:05:70:04:10:03:02:
16:1a:95:46:b0:43:fc:39:14:63:cf:9f:65:37:71:
bb:a4:da:6a:26:d0:a0:66:58:d3:59:7b:38:77:61:
46:b0:59:b3:73:57:0c:2f:a0:60:c1:f4:3a:c8:6e:
a9:76:8c:49:fe:67:8f:df:1e:cf:27:4f:dd:3b:0c:
1e:ca:05:58:1f:56:65:02:1a:2e:32:b4:ec:6a:6c:
d1:fa:52:c4:5c:24:7c:b9:d9:1a:46:b1:00:8c:d9:
2a:16:e8:db:e2:cc:00:dd:6a:29:4f:e0:ae:b1:b3:
71:d7:bf:43:95:04:46:5e:35:78:4d:4f:82:2f:c2:
ee:bc:14:21:9f:b0:8f:b8:06:34:87:b9:ea:7c:f5:
c2:83:1d:e5:ba:2c:0d:24:8e:84:e8:27:d1:c3:41:
e6:a8:77:2c:d7:30:f4:fe:54:b8:57:2f:35:83:5b:
49:39:76:36:e1:93:e8:3a:a3:42:81:4d:c5:b9:78:
96:0c:28:96:85:33:aa:8c:a7:c1:31:69:44:64:56:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:A8:52:8B:40:BC:F2:19:60:21:09:F8:B1:9C:BE:C4:8D:73:96
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a5:df:5c:af:f2:e0:20:cc:f3:ee:2f:ec:71:3a:3c:6b:68:
6f:35:54:48:05:bd:0e:a8:2c:7a:d2:f6:97:ae:3b:df:97:42:
33:35:e7:91:9c:94:87:7e:0f:c6:ab:71:c1:5e:d4:3b:28:92:
73:4d:bb:26:ec:47:1b:55:04:21:ee:ac:81:30:63:28:4c:87:
c9:a3:b8:4f:7a:85:3b:ea:9e:f5:a7:f8:56:8d:55:85:78:63:
af:69:28:f4:17:c0:d2:cf:8c:8a:47:65:f2:19:e8:6e:de:8c:
8b:6d:1b:ac:a2:cc:15:fc:d3:82:18:6a:7b:a3:cd:5d:1a:08:
05:e7:ff:dc:bc:6e:94:87:ce:b0:1a:ce:1e:b1:c4:65:f0:df:
ec:b4:2f:0f:99:11:38:fd:ab:37:c9:10:0c:87:4b:a9:ac:ff:
24:14:c3:7a:c1:18:79:29:ba:b3:8b:cf:3a:18:b9:ab:bc:02:
a2:13:22:7b:de:1b:d5:a2:2f:d3:0a:74:b2:fb:f8:b2:02:80:
3d:7f:c8:5c:2e:4f:eb:e4:77:30:2e:5a:9e:5e:53:bc:2e:c6:
5c:0d:f7:f1:13:56:7e:cc:c8:d6:ee:89:b4:9c:a2:cf:ca:69:
b1:d8:5c:a1:57:f7:d1:9a:65:8c:38:ed:b4:76:8a:23:4e:8d:
ef:0a:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:16 2026 by rpki-client