Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: JefbHMBpaq6UXE+1vku1awduwNuOhKodbvOl2l2BP3I=
Subject key identifier: FE:33:86:F1:F7:69:00:F1:4D:58:F5:2D:45:6D:4B:42:1B:39:97:56
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019D9AE37714E794A5614EBFC2B4C56F6080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:31 +0000
Manifest this update: Fri 17 Apr 2026 10:01:31 +0000
Manifest next update: Sat 18 Apr 2026 10:01:31 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: mrvP0MFCKtBEDBcfjhh1Fl+lrY3S3Xv/wakzt3gFl+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:77:14:e7:94:a5:61:4e:bf:c2:b4:c5:6f:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Apr 17 10:01:31 2026 GMT
Not After : Apr 18 10:01:31 2026 GMT
Subject: CN=fe3386f1f76900f14d58f52d456d4b421b399756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:19:df:fa:10:a7:da:ab:29:fa:de:0c:01:
0a:6d:00:be:22:76:8c:0c:16:a6:47:dc:b7:c1:1f:
95:74:18:a1:67:1f:e5:0d:ac:01:25:56:a7:13:33:
4b:1d:8f:25:1b:98:89:8c:a0:bd:9e:6b:09:5e:fd:
1c:44:54:c3:0f:c2:0b:f9:a5:16:16:fb:8e:39:cf:
ad:5f:5c:42:95:27:04:d7:9e:b8:96:4a:66:42:52:
4d:8b:91:26:fc:2d:a5:e6:b1:24:34:a1:39:f5:c1:
f7:c7:c6:bd:0c:52:39:a2:df:3f:90:46:be:9a:2e:
a6:1c:af:2e:3a:a2:4d:ca:49:65:6c:86:67:48:42:
77:4b:da:00:c4:21:4b:30:22:b0:b2:cb:be:f8:81:
1a:71:09:2d:a8:9c:41:c2:4b:aa:97:62:fc:0f:5d:
4c:7b:d4:a2:2e:e4:c7:51:d9:87:a7:26:d2:a3:5c:
7c:31:4d:a6:76:29:15:16:ad:ec:11:8e:b7:88:5d:
8c:83:4c:76:c7:b2:83:f4:6d:81:57:83:9b:c7:5e:
71:17:9a:4d:af:44:d0:7e:23:bd:77:4e:35:2d:15:
74:7b:02:0d:ef:45:ca:5b:58:6a:4a:ab:f3:72:29:
06:51:7a:28:22:3e:cf:74:8a:2a:36:bf:b3:61:d6:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:86:F1:F7:69:00:F1:4D:58:F5:2D:45:6D:4B:42:1B:39:97:56
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:b3:b6:d5:1e:66:75:59:fd:2a:6b:2d:a3:d6:88:57:99:
b6:a1:17:17:b9:3a:a4:7e:c0:ae:17:ef:9d:df:d3:09:4d:3a:
5e:5a:64:35:58:10:1f:a0:8d:cf:0c:7b:f5:89:e4:bc:2a:98:
27:5a:dd:2a:68:f3:25:7d:2b:6b:b1:b0:f8:46:8e:9c:4d:82:
8b:a4:7d:9b:55:ef:97:08:0e:27:02:55:89:34:58:75:70:23:
e1:c0:fb:89:c9:5c:32:95:de:19:be:79:48:ea:47:34:b9:0f:
de:fe:04:27:57:cb:f3:f3:88:e7:71:bf:b4:ad:39:b5:de:92:
47:80:e2:68:cb:cd:5e:df:89:c0:9e:77:00:77:b2:99:ab:c5:
5e:7a:a7:2d:38:92:59:9b:8d:6b:ae:63:3d:8d:0b:3f:fe:45:
5b:5b:ef:a6:61:ab:cd:b1:5c:1f:cf:10:df:4e:27:12:d6:bd:
17:ca:5c:9c:8f:a8:89:51:2c:c6:a7:3b:28:b3:ab:e1:eb:9c:
71:57:c5:dd:6b:71:18:08:38:24:5c:af:92:42:16:a4:2d:be:
a5:a7:b7:0d:1d:4c:4d:73:b2:81:d2:29:99:e2:f9:26:9b:fa:
63:28:79:7d:01:a3:b2:d9:0b:0d:9a:50:d0:63:c9:cb:25:df:
b1:3e:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:33 2026 by rpki-client