Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: WAk5gII46OAGg86q4rAhzlUU42ct37mhaiHXI22GN5I=
Subject key identifier: 70:F9:AA:DA:1B:20:4F:67:53:0F:B7:35:5A:40:FD:AB:0F:7F:BB:8E
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 019D9AABCA3EB7644905111D1D86A1D6961F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 088C
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: btnEuTj0+ltPjdNC8yHME9JlXYFoiFCmFkuEIGQA5zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ca:3e:b7:64:49:05:11:1d:1d:86:a1:d6:96:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=70f9aada1b204f67530fb7355a40fdab0f7fbb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:26:c2:9a:9d:85:71:07:19:ee:37:5a:4c:
34:42:e6:e4:ec:7d:8f:44:fe:02:57:8a:3d:16:cd:
9d:ef:b1:02:5d:d4:70:7b:56:05:05:1a:11:ec:31:
23:41:7b:65:40:26:d3:c3:a0:63:c9:95:5a:09:7f:
27:45:6d:cd:6c:bf:1a:94:d3:97:21:9f:6b:0c:22:
f4:52:b5:de:ed:e8:3a:f4:b0:56:3d:e4:9e:1f:be:
59:46:3e:a6:ac:cb:da:36:00:b8:95:36:c1:bf:5c:
ce:67:23:9e:d2:61:6c:e5:28:cb:85:8f:f8:10:23:
0a:5d:b2:f9:33:4b:fb:20:a6:06:f7:a2:5e:f1:b5:
31:c1:91:1b:e3:fa:bd:fb:de:44:69:b8:2c:bc:f6:
e6:bd:6e:aa:ea:78:49:ba:ce:8b:da:28:5d:1d:b4:
16:83:3d:53:0b:65:71:09:4f:f2:df:8c:97:35:ed:
7a:9a:d1:af:a9:03:05:2a:0b:d0:7d:1d:a1:01:aa:
53:37:e4:ca:cc:d9:d7:7a:0e:8c:22:06:f1:18:4b:
0f:a4:52:82:8b:7e:a5:0d:db:e2:72:69:b2:7d:77:
2d:54:3a:24:63:d6:3d:89:2f:03:b9:29:86:67:86:
6d:91:90:4c:52:d7:b2:ef:5d:f1:51:12:a7:c6:dc:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:AA:DA:1B:20:4F:67:53:0F:B7:35:5A:40:FD:AB:0F:7F:BB:8E
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:33:bf:82:91:30:3a:ae:a3:a4:e6:88:ff:56:21:3b:41:9d:
bd:df:87:36:7e:14:9c:01:b1:97:20:48:d9:49:21:10:e0:75:
25:64:8d:11:de:ba:27:0a:86:2a:73:00:a4:d3:33:74:e8:d8:
ed:eb:f3:bd:70:bc:1b:d9:92:7a:7c:88:75:70:04:88:4d:e2:
73:a4:0b:87:4d:6d:b0:df:f2:9c:46:a0:62:30:4d:9b:db:0f:
7a:68:cd:af:35:f4:cd:ff:c6:33:05:5e:cc:28:ba:06:63:38:
97:ed:bc:7a:08:3a:45:0a:f1:f7:57:c6:44:c7:1d:24:ff:5d:
5c:88:00:75:93:ec:db:a2:38:39:d5:88:ae:2c:e9:1c:29:32:
21:92:5c:ee:07:08:0d:2f:4b:27:54:f7:f1:eb:f7:64:41:7e:
26:8b:69:22:c9:42:76:95:89:7f:fb:8f:d1:6f:01:43:66:03:
e4:2a:df:b3:c4:5e:a7:75:4d:83:8c:be:d5:ec:c4:af:fb:74:
5e:22:87:eb:82:14:ed:be:1e:56:34:7e:67:7f:b3:6c:2c:f4:
c6:b9:82:d7:8d:61:19:f6:58:40:31:7e:ce:9a:88:50:77:26:
15:e0:6f:b8:a8:a1:cb:63:94:9b:48:95:ec:cb:da:fc:0e:e7:
11:f5:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:00 2026 by rpki-client