Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: FlTSbWWTkWtTVpC67nH9WXqZ9z5KIYeNUj7x8YHH74c=
Subject key identifier: 65:51:98:0D:39:70:A1:7B:BD:0A:EA:4F:23:5A:34:78:D4:59:82:DC
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019D98F51B33B878F1DCD9E1E22AB326C816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: MZ0IaMaMS1AnRbUQIoh33k7yNGDlVIEc98wvDZdd7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1b:33:b8:78:f1:dc:d9:e1:e2:2a:b3:26:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=6551980d3970a17bbd0aea4f235a3478d45982dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:02:07:c8:2c:ee:2f:30:5e:90:45:02:b9:
d7:e2:93:19:2b:f4:cf:72:d5:17:2b:4f:2e:af:ca:
0e:d0:52:c5:09:8e:cb:79:6b:ad:69:3f:ff:77:7a:
e0:ff:70:4a:8b:91:7a:c5:f6:dc:e3:6b:48:b7:c8:
12:87:33:f5:a0:4d:76:90:d5:bd:26:8b:db:47:ad:
09:f2:ab:c4:a4:ac:5f:6f:2e:dc:49:39:d3:61:01:
41:9a:18:de:42:ad:75:82:13:28:46:df:64:13:2f:
fc:26:da:38:2d:8b:2e:d3:28:6c:65:0e:68:ef:54:
7d:6f:b1:e2:a4:41:0f:b1:2e:04:44:a9:44:69:90:
23:87:0f:09:4a:db:1a:c3:39:32:fd:f4:56:2b:cf:
0d:c8:89:0a:8e:8e:1c:d1:31:c0:c0:83:c2:34:a3:
85:77:e7:26:24:0f:26:1f:3b:c9:ff:34:64:51:c2:
4b:52:10:9a:01:b0:3c:37:38:0c:e0:52:f8:30:77:
05:da:14:51:36:93:b2:fe:e1:36:d2:0e:7d:fe:99:
67:3d:5e:b1:1e:72:84:a2:0c:99:6f:47:fd:1b:a5:
4d:33:b7:9f:89:1e:9a:ea:f0:fa:31:7d:65:75:62:
48:70:7a:96:ab:ff:7b:86:8f:39:5b:80:38:b8:61:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:98:0D:39:70:A1:7B:BD:0A:EA:4F:23:5A:34:78:D4:59:82:DC
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:60:da:01:64:7e:ec:a3:50:dd:b3:f5:4d:3a:42:bf:7c:67:
bb:87:41:21:5f:03:54:67:33:88:1f:ef:00:a5:8e:06:ef:85:
0d:ac:46:f4:93:ed:41:21:c6:93:f9:92:20:4f:e6:14:3c:65:
ab:8b:ca:79:fb:35:5e:24:60:0b:b2:b2:1e:bb:11:2d:7a:78:
4c:87:a6:d8:d9:4d:48:da:5c:7d:cf:58:36:1a:4d:04:17:69:
91:71:25:4f:97:f1:53:ac:59:b1:36:ee:a2:34:3f:7a:05:c3:
7c:65:d6:3a:15:f8:f4:f7:dc:2b:af:c5:45:56:a7:8c:70:9d:
7c:1c:04:1d:4d:b2:ed:64:10:27:1a:51:e0:43:47:23:41:fc:
f3:63:19:c5:32:96:c6:16:bd:a4:33:71:1b:7b:70:5c:0a:61:
3a:da:14:ad:62:fa:3b:bd:e2:4b:6d:2b:b9:86:08:d3:89:d1:
51:fc:a9:83:0b:9d:3a:6f:9c:85:91:a5:a9:4b:33:1d:99:83:
1a:e2:6e:3e:8d:34:88:e2:05:04:82:e4:d2:bc:04:f7:a1:27:
9e:44:ee:24:28:8e:3a:33:e2:ea:4c:82:d9:b2:25:62:7a:2e:
ec:32:b1:72:cf:a9:90:71:39:42:5f:d1:ef:2d:d5:2a:f5:54:
a5:15:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:49 2026 by rpki-client