Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: x97duzlluVwoRegRcmsBO7hdcdFG+3s+iJZO9++YCSo=
Subject key identifier: 17:CE:EB:89:C5:B4:3A:90:5A:3E:98:84:6C:42:6B:BD:6C:51:39:7D
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019EBE7FA8561E8F3FAC9860FD976F0D02FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 01:01:37 +0000
Manifest this update: Sat 13 Jun 2026 01:01:37 +0000
Manifest next update: Sun 14 Jun 2026 01:01:37 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: +d/pv11jv4cIZpSsssbOMomv/ZHB4dAdCzk1Sfe6p6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a8:56:1e:8f:3f:ac:98:60:fd:97:6f:0d:02:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jun 13 01:01:37 2026 GMT
Not After : Jun 14 01:01:37 2026 GMT
Subject: CN=17ceeb89c5b43a905a3e98846c426bbd6c51397d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:cd:eb:01:0c:e8:dc:91:27:97:cb:65:a4:
5e:85:e0:e1:9d:00:f1:3c:54:6f:a9:6e:1e:11:38:
14:4f:47:00:cf:c5:25:62:95:b3:98:db:c9:4f:96:
1b:a1:bc:b3:0a:fe:68:93:92:0e:1d:21:05:92:a6:
2e:68:df:4f:bf:6f:01:b9:f7:95:8c:5d:1e:53:02:
49:a3:91:ff:9a:83:ae:4c:67:a7:8f:4b:4f:9a:c4:
37:c7:2d:77:12:bb:24:ee:5f:73:e1:72:4c:5d:f3:
d9:40:77:eb:e3:7c:28:dd:64:98:0d:9a:b7:f0:8a:
0e:b9:54:35:b2:99:14:4b:65:0b:f0:8a:51:9f:98:
04:5f:a3:81:fb:21:8d:9e:f5:bb:4a:af:41:1b:a4:
40:68:7a:22:bf:75:ed:11:23:a4:06:7a:5a:13:ac:
c2:14:4a:33:b5:90:5c:4a:d6:04:55:c1:36:54:8d:
81:cf:41:dd:c6:a4:70:f8:05:d0:27:c5:04:6b:65:
e7:5a:fd:1e:a1:36:a4:5e:79:51:26:84:3b:19:61:
3b:50:f4:88:49:8e:0d:34:cb:db:31:b6:9f:30:ca:
76:52:80:93:36:28:5b:56:d3:d3:6a:8f:70:52:3f:
d1:49:34:9f:08:34:92:1c:09:ef:16:04:db:3e:78:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:EB:89:C5:B4:3A:90:5A:3E:98:84:6C:42:6B:BD:6C:51:39:7D
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:05:b7:30:9a:77:8b:df:b5:77:f9:e5:69:39:e4:1e:13:
64:fb:c3:c4:37:32:6f:8c:15:14:fb:00:27:57:e3:21:7b:5d:
bf:2b:3a:cc:42:6c:01:ec:01:a2:0c:4a:51:4c:2c:3f:5c:1c:
17:d8:c1:01:c3:5d:fb:c8:d6:70:7b:60:8b:d4:2c:2c:2c:52:
08:ec:6a:2e:df:2d:db:6a:94:93:c5:7f:7f:48:b3:3d:13:65:
7e:80:79:92:2b:74:a9:58:0f:1b:21:38:0c:90:b5:fa:e9:08:
27:b6:60:6b:79:23:b7:7f:e9:95:a0:01:4d:08:c9:9d:f4:92:
87:03:22:b4:10:51:84:f8:1d:d1:6a:3d:49:c6:ee:f9:11:c8:
2c:c2:cc:f0:c3:ef:b2:f0:bd:07:11:fa:2a:c4:7f:94:fc:15:
0b:7f:36:5e:17:2d:41:e1:43:cb:97:a5:84:ad:0b:07:93:cf:
37:ff:0d:fb:9c:c8:2d:7b:c8:e0:72:3c:7a:30:36:a7:43:52:
43:32:d1:60:81:b3:af:98:5f:9c:86:d4:2a:43:fd:1a:7a:45:
22:17:52:43:13:fd:dd:2a:86:27:71:ad:98:6a:b7:dd:cb:b2:
12:6e:e4:c7:80:62:9c:85:96:4a:e3:02:d9:09:60:a0:d7:de:
d1:7d:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:10 2026 by rpki-client