Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: /PzFjzySE0oAmwUGMLzT1HKb+GKpubVrmYUsGHECWGk=
Subject key identifier: AE:5C:55:4E:A7:D7:42:2F:7D:DD:DD:20:12:77:5D:13:8F:43:E5:EF
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 019CAB6BEF77D1F1012487C8B067BC6FA56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 08CC
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: YaoPe1BP3I7Fe2TAt0LvzG2rZtwnycwF0dsUSjfk43U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ef:77:d1:f1:01:24:87:c8:b0:67:bc:6f:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=ae5c554ea7d7422f7ddddd2012775d138f43e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:1e:c0:71:d8:5c:a0:1e:ef:02:2f:a7:76:
9e:53:80:b1:f3:94:0a:3f:41:c5:41:2c:4c:87:5d:
cf:29:bb:82:ad:e0:07:9c:3e:4a:fd:2c:01:e7:57:
e3:15:99:37:12:87:73:82:65:a6:66:a7:d8:e5:4d:
05:25:69:db:0a:74:e7:71:a5:e4:c2:50:bd:7c:64:
5a:32:a7:79:87:73:7c:01:8c:e7:fa:4d:72:02:8c:
13:7b:9b:fe:ec:28:46:46:0e:31:b7:49:72:20:55:
09:72:48:d1:f1:98:60:4a:c5:12:5a:8c:17:7a:b7:
16:f3:a4:db:a3:5f:f8:13:dd:64:18:69:e1:d1:ea:
fd:06:36:9e:54:82:d1:12:7f:6c:54:d9:f7:5e:13:
c9:16:ab:58:e6:92:cc:52:58:97:8b:05:cc:d0:90:
83:c6:02:89:d5:a3:0c:16:51:bd:cd:52:77:26:e0:
d8:36:39:69:4d:dd:4a:1e:cf:98:7c:a3:58:d1:ef:
cf:10:fb:b6:f0:cb:91:af:87:c4:01:0b:2d:32:1f:
8d:90:e8:5f:01:98:47:65:97:98:54:35:3e:3b:54:
7d:d5:f5:ab:25:78:3f:ae:0c:c7:2a:6d:f7:4b:df:
ae:4a:35:9a:2f:80:2f:5b:56:ce:76:c6:74:9a:11:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:55:4E:A7:D7:42:2F:7D:DD:DD:20:12:77:5D:13:8F:43:E5:EF
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a4:04:01:ac:7b:64:dc:88:85:e9:5b:29:71:ce:1e:e0:1a:
5f:4b:4a:1d:1f:c1:cb:82:38:62:9b:16:ce:e4:ea:28:1c:fd:
c9:bf:b6:d5:6e:08:69:31:1b:96:ad:f6:fc:dd:32:2e:ed:0c:
50:45:95:b2:d0:7b:d6:05:88:c7:0e:53:7e:ec:c7:53:eb:18:
5a:3c:f8:5d:e6:08:64:fd:7b:a5:5f:81:6c:9d:33:cd:5a:51:
8f:73:3b:6b:c4:9d:a9:e0:b6:91:3e:21:13:71:80:2d:a3:0a:
a8:8c:26:50:ab:ef:f2:d7:5f:28:69:55:b8:79:02:ec:90:6e:
d6:1a:c2:3f:f1:52:08:b1:de:31:a2:04:2d:59:f4:27:4c:ea:
7d:c2:ad:2d:ac:7b:18:99:b5:ce:39:a6:dc:b8:ce:f5:b9:6a:
cb:df:d4:7f:08:95:79:5f:f0:18:e5:a0:fe:ca:1d:2b:f4:d5:
7e:fa:c0:cb:6a:26:35:b6:64:a1:d2:bf:67:c5:61:4d:bb:99:
af:82:21:e6:a4:51:81:4f:97:a7:c9:23:be:01:5f:c3:70:3c:
5e:e4:ba:08:95:bf:cf:51:9e:85:23:d7:ae:b6:21:d1:cd:6b:
0b:63:61:ce:00:71:35:60:12:37:e0:0e:b8:6a:38:48:a5:d3:
61:43:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:12 2026 by rpki-client