Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File: 8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier: EgOSewBPb3uT+1TaICumcocHOPD+LJ/X1O7hRRb+3FM=
Subject key identifier: 39:EF:C4:3E:B6:CB:10:DA:F5:58:9D:8F:7A:3D:4F:57:01:1A:A2:68
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer: /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial: 019CABD9F470F5B02CC5D5D66E2345F69176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number: 07E0
Signing time: Mon 02 Mar 2026 00:01:53 +0000
Manifest this update: Mon 02 Mar 2026 00:01:53 +0000
Manifest next update: Tue 03 Mar 2026 00:01:53 +0000
Files and hashes: 1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: 3WsRhWxl45Z16IktxHi03Y8mpKyRxrjv1ot0k10Y+SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f4:70:f5:b0:2c:c5:d5:d6:6e:23:45:f6:91:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
Validity
Not Before: Mar 2 00:01:53 2026 GMT
Not After : Mar 3 00:01:53 2026 GMT
Subject: CN=39efc43eb6cb10daf5589d8f7a3d4f57011aa268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:dc:74:e4:f9:9e:e9:5b:7f:3c:0f:62:35:
90:c6:1f:32:45:bb:77:44:a3:31:b0:fa:81:b4:76:
15:ac:b8:af:7a:48:c3:18:33:be:54:ed:83:76:bc:
a5:14:78:58:73:33:40:e7:7e:ad:d8:64:3b:5f:7c:
cc:66:7c:e5:8e:e6:2c:03:01:6b:16:7d:d6:50:80:
3d:ca:09:d6:fc:34:70:4b:ab:ff:bd:f3:e9:2b:69:
c8:bc:b9:76:aa:eb:d2:cc:25:0b:33:65:41:fc:8b:
0f:b7:2e:a4:20:7b:2e:83:cd:24:f9:35:45:fa:e5:
c5:03:c5:78:fb:6a:c4:2c:82:54:60:d3:f6:d9:62:
37:0a:b4:38:08:93:21:f3:17:7b:ad:cf:b9:0f:a8:
99:1f:1e:e3:da:62:42:fc:e2:b0:09:08:44:86:db:
3a:53:ef:ed:c2:3c:fa:5f:c1:81:43:00:14:1d:7b:
73:67:0b:00:d1:87:55:31:b6:31:54:d4:25:d9:02:
28:df:40:a7:df:11:37:07:ef:57:8f:0e:9d:87:9e:
82:56:4e:2e:d1:e9:d2:2a:14:fa:4f:a6:66:f2:76:
ad:78:1d:86:20:b3:94:2a:97:c3:e4:15:26:d3:2d:
23:45:5c:10:c7:f7:88:7f:15:2d:15:42:dc:10:e1:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:C4:3E:B6:CB:10:DA:F5:58:9D:8F:7A:3D:4F:57:01:1A:A2:68
X509v3 Authority Key Identifier:
keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bc:e6:95:96:70:7d:92:f6:cb:85:fc:67:9e:b3:91:65:67:
e9:fe:6b:0a:27:d4:50:6e:30:96:05:2e:7c:42:53:69:0f:c4:
18:54:33:46:02:4d:d9:5a:5e:e9:11:aa:55:e7:0e:67:62:7e:
48:a5:6a:61:7b:00:4f:fc:22:92:35:b6:43:ac:9a:9b:8f:97:
54:d4:c9:95:49:75:5d:49:d0:cf:02:49:99:27:59:58:82:c1:
d5:79:ab:d9:ae:f3:6c:16:88:c6:b1:b2:1f:c0:a1:ed:c2:89:
5e:ba:0f:57:c4:a1:01:d1:04:a4:35:34:39:f1:0a:cf:fd:77:
cb:84:cf:43:10:56:07:96:8d:79:cf:9e:6c:ae:96:3e:2c:b4:
85:35:81:7b:55:67:5b:e2:fa:de:cf:aa:ba:dd:61:c8:ee:4b:
c3:73:99:b9:d3:65:90:ea:e7:06:84:ec:82:8e:90:09:9b:b1:
7c:a4:04:ba:24:05:d7:45:1d:57:4b:0e:98:af:32:ed:9f:fc:
3f:2c:c6:d7:80:1a:34:30:9a:e3:23:70:31:fa:0d:cb:e6:a0:
f9:02:51:7b:23:84:d5:da:8f:5d:7a:71:89:1f:b3:6c:61:ee:
ce:91:c0:d8:7b:15:c3:b9:72:2a:de:93:e6:ac:38:12:3a:45:
52:be:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:36 2026 by rpki-client