Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
File: 8grs7rj8hZw3YvMTcflKAE24zEI.mft (raw, json)
Hash identifier: yf1RgYVog45nxLxYcC1CmrKuODVDuz61r10f6FYlgNM=
Subject key identifier: 55:23:EC:63:4A:14:2A:CC:16:86:2D:53:DF:A8:D7:BA:63:9E:8B:A1
Authority key identifier: F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
Certificate issuer: /CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Certificate serial: 019D9C6312D6B55B77FCB98AD31D3F6B4819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
Manifest number: 7C
Signing time: Fri 17 Apr 2026 17:00:31 +0000
Manifest this update: Fri 17 Apr 2026 17:00:31 +0000
Manifest next update: Sat 18 Apr 2026 17:00:31 +0000
Files and hashes: 1: 8grs7rj8hZw3YvMTcflKAE24zEI.crl (hash: q/6rgLt++k1BchM6+hAriM8Qoivvwl9h6N9GZ7/sDls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:12:d6:b5:5b:77:fc:b9:8a:d3:1d:3f:6b:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20aeceeb8fc859c3762f31371f94a004db8cc42
Validity
Not Before: Apr 17 17:00:31 2026 GMT
Not After : Apr 18 17:00:31 2026 GMT
Subject: CN=5523ec634a142acc16862d53dfa8d7ba639e8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:c1:b8:f4:6c:16:66:49:2b:4c:8b:f6:72:
85:bb:fc:b5:ae:81:40:9b:b7:47:a6:c7:12:ed:b8:
09:7e:c8:29:a2:e3:d2:1e:45:bb:f1:66:c7:5a:f5:
54:e6:1f:2d:58:85:e6:c9:ed:16:76:32:3e:95:ef:
aa:05:9d:d9:85:ae:9c:66:95:19:2f:7a:44:8a:35:
8f:72:95:11:63:82:f4:ed:86:7f:3b:f9:03:bc:4e:
aa:3c:37:12:da:ac:64:97:f3:70:dd:e1:be:83:c4:
01:73:33:94:23:f5:53:12:47:d4:7f:22:20:cf:98:
d8:d7:c7:0b:df:73:8f:03:57:fd:39:c9:d4:cf:b9:
dd:dd:de:23:39:48:2d:29:04:77:0c:7a:98:5d:8f:
a5:14:f5:e2:45:33:db:3c:b7:86:7c:66:46:d0:01:
66:7b:50:96:90:63:1f:2a:39:e0:f6:ea:00:f4:95:
d6:3a:d2:70:36:e5:c2:ad:1d:e2:af:3c:9c:d0:f2:
cd:2f:d6:8a:12:e5:67:72:87:58:1e:b7:a4:6c:62:
76:a8:a6:52:3c:01:4c:28:36:65:52:6a:0f:c1:2e:
6b:56:54:cd:d0:90:a0:fb:e5:57:25:09:7e:25:76:
59:04:ef:cc:4b:bb:53:6c:1c:15:0d:4a:41:af:69:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:23:EC:63:4A:14:2A:CC:16:86:2D:53:DF:A8:D7:BA:63:9E:8B:A1
X509v3 Authority Key Identifier:
keyid:F2:0A:EC:EE:B8:FC:85:9C:37:62:F3:13:71:F9:4A:00:4D:B8:CC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8grs7rj8hZw3YvMTcflKAE24zEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1062e7-435d-4a91-a1e4-bd6faf022bf6/1/8grs7rj8hZw3YvMTcflKAE24zEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:7f:96:11:28:c1:0d:3e:b7:d5:6c:ba:70:3c:21:bf:07:
20:07:ee:57:45:89:f9:f9:94:1a:e9:6d:32:64:4d:d9:cc:f6:
88:2f:a2:51:94:5d:9f:9e:8d:54:f0:13:10:fe:3f:e9:35:2b:
60:fc:8b:b7:18:13:fe:5e:6d:4e:d6:b1:bb:54:61:f6:dd:f2:
35:ca:54:32:f7:ed:4f:4c:df:e5:de:ad:c9:5e:3b:a4:cd:d3:
c9:a2:33:57:87:b8:5a:1a:1f:d9:90:07:30:72:e8:a8:8a:bc:
54:51:41:ef:3c:f1:97:fc:ff:b0:d7:e9:22:e3:0d:c3:47:96:
7d:a4:a2:2c:d4:2e:6e:35:c6:04:9d:ca:53:e4:e1:61:ae:eb:
1b:49:fe:4f:25:46:6d:12:6c:52:8c:47:1a:1d:f0:20:87:22:
a3:f1:8d:d7:4a:bc:3a:f7:f0:f4:d4:40:c3:e8:f5:fc:f8:21:
1b:4c:39:1a:b2:83:6c:b2:56:b4:53:90:89:90:48:a0:2d:06:
9d:58:4a:3b:bd:b5:45:34:24:10:e5:9b:80:84:ff:69:d7:a8:
c9:75:cb:74:d6:0a:5d:c1:5f:59:ac:e2:7d:94:12:40:7e:e3:
d9:2c:28:5a:33:e6:a7:5d:e3:b5:4d:17:e7:8a:6e:b3:5d:0c:
84:94:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:23:58 2026 by rpki-client