Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File: 8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier: YosZ/e1tglik1C1KZVnBdyEbVR2sFZlZdcWt8rMpAUY=
Subject key identifier: C9:FF:9E:AA:0E:BA:B2:71:1A:F6:F8:91:DA:98:EA:5B:6A:3D:2D:F7
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer: /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial: 019D9962880C3833ACAABC149785596CCDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number: 085B
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: EpIosjtl7IXqq2hYM8e2LDLSQh/xCSz/ucNMcNuPVHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:88:0c:38:33:ac:aa:bc:14:97:85:59:6c:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=c9ff9eaa0ebab2711af6f891da98ea5b6a3d2df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:14:06:ef:ce:15:6b:81:d1:2d:70:53:f3:
dd:43:3a:0b:24:9c:1b:d9:25:ad:62:0b:90:27:b6:
a4:b1:8c:65:fa:3a:fb:b3:ad:02:bf:db:f7:ad:c7:
f2:c8:05:97:70:d1:57:40:08:5f:36:2a:05:a1:69:
d6:9c:3f:12:2a:c3:2d:72:0e:eb:5e:c2:26:6e:6e:
26:d2:7a:3e:13:39:27:80:8e:ea:4f:6a:7a:f4:20:
01:7b:8c:ff:26:e9:2e:a9:f3:af:1d:ac:8f:6d:08:
c2:68:5c:b3:d6:c7:66:8f:85:67:f6:35:0f:f6:b6:
14:59:90:53:27:b9:b1:9d:2e:1c:31:ae:e6:af:bd:
aa:c0:47:ee:b2:81:c8:d8:b7:59:1d:1a:29:3e:b4:
03:5f:3a:ab:31:4a:bd:fd:1c:46:82:98:b3:9e:dd:
2e:d5:e5:55:61:66:a3:6e:bd:1b:4d:5e:a5:c0:80:
c6:3d:14:07:f9:4e:c5:c9:e9:bf:04:02:08:77:f4:
77:d7:20:ef:b6:2e:e8:c7:7f:47:b9:00:50:fe:a6:
53:3a:ea:8d:9a:35:f2:f6:cf:50:cf:12:b8:5b:6f:
40:79:bc:81:32:46:01:88:f3:38:ce:82:3c:0c:1c:
26:5b:11:e8:41:70:5a:48:d9:10:8e:1c:aa:79:86:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:9E:AA:0E:BA:B2:71:1A:F6:F8:91:DA:98:EA:5B:6A:3D:2D:F7
X509v3 Authority Key Identifier:
keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:f2:fb:84:3e:9b:0e:0f:51:8b:be:93:03:e8:b6:e0:b3:
fa:57:02:8f:37:89:c9:82:be:18:a0:3c:e2:bd:af:67:56:09:
be:8b:09:73:17:43:b2:1b:0c:66:01:45:69:78:a0:fe:06:eb:
72:d0:71:da:cd:21:a8:c6:7b:96:f8:64:cd:f7:38:3d:a6:6c:
91:92:d6:ce:2e:8c:cd:fc:5d:ad:7c:d3:5c:9a:77:1a:d4:06:
ed:97:73:39:b0:ac:aa:33:19:e2:79:63:cf:37:01:6c:c9:ed:
f4:0d:84:5c:f0:fe:44:fa:b8:5e:66:a3:4d:3c:ce:34:f0:51:
97:13:08:0c:49:76:f3:51:a3:ce:72:de:7b:57:05:d0:07:34:
b7:9b:11:41:6b:8c:16:7e:86:52:0a:8c:96:f8:df:90:fd:3b:
24:5d:ce:54:fe:82:f5:b6:f6:69:35:ee:fb:81:03:65:0d:a5:
24:db:d1:db:3e:23:6a:d0:eb:5f:6e:12:c5:ef:a5:d7:fe:53:
59:68:ee:d3:49:28:fb:91:df:0c:37:7d:cc:0a:f6:6a:04:c7:
ca:60:bd:28:ac:65:57:82:35:10:f9:2e:fc:0c:fc:db:81:df:
7a:88:da:95:4b:80:57:66:9e:32:23:7a:09:4d:ad:93:6c:7c:
75:c3:a6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:00 2026 by rpki-client