
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: T1y5fus9DvJWEUlIwNEHZRVumg4W9uJp1CsUB/lzA98=
Subject key identifier: F2:8C:9A:56:44:33:E3:7E:F3:55:C3:C8:C6:46:E2:0F:C6:52:F8:86
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 019CAB6AE51B5F5813FD0B2FCCAB909D6D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:35 +0000
Manifest this update: Sun 01 Mar 2026 22:00:35 +0000
Manifest next update: Mon 02 Mar 2026 22:00:35 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: jT8tyPTnmciIobFtEOMvu34wEwQEAdhvTQ5MVEtu6wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e5:1b:5f:58:13:fd:0b:2f:cc:ab:90:9d:6d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Mar 1 22:00:35 2026 GMT
Not After : Mar 2 22:00:35 2026 GMT
Subject: CN=f28c9a564433e37ef355c3c8c646e20fc652f886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:7e:2e:59:c3:7f:ec:74:97:83:2d:c3:ae:
59:3c:a3:73:69:f2:5e:1e:32:ca:f0:15:60:72:4e:
fd:51:db:10:8d:f1:28:3b:11:62:e2:b7:db:17:a9:
01:e7:7b:8d:01:78:c1:27:35:eb:78:5d:77:71:7c:
b5:01:c1:1e:b6:c6:05:b8:63:9f:8e:04:50:8c:df:
5e:f9:86:d4:f1:2d:b5:5b:d2:ae:23:27:ce:cc:53:
a1:17:50:33:b5:85:46:de:8c:e5:4a:99:b3:f5:77:
cc:86:6a:7d:87:f5:b0:2d:33:cb:90:a1:a7:8d:e6:
c4:2f:8b:84:a8:da:84:90:f5:d1:c5:b6:7f:f9:42:
2f:79:63:08:fc:d6:3e:46:18:1b:e1:40:f1:a3:fe:
db:55:37:f9:e7:89:4d:7f:72:f7:4e:2c:a9:f6:df:
cf:2d:76:e4:3b:a9:b0:16:b2:e7:4f:75:06:10:75:
84:18:43:b8:bf:85:3f:f6:1f:3a:4b:e9:2c:b5:c4:
e5:a4:12:ad:dc:08:7f:5a:5f:a7:a0:dc:1e:96:9b:
d3:52:ea:e6:ea:6e:7c:ff:e2:d4:0d:86:68:95:90:
86:bd:60:67:77:c0:f9:dc:8f:8b:1f:7e:1d:33:0c:
b7:ab:01:48:f9:8f:c4:74:ee:d7:99:b9:83:3b:0a:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:9A:56:44:33:E3:7E:F3:55:C3:C8:C6:46:E2:0F:C6:52:F8:86
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:34:34:a1:4a:7e:fd:09:0c:09:31:97:17:ac:b7:1c:c4:
e5:df:c5:e1:cf:a9:4d:75:f8:3f:f5:fd:05:2b:de:16:e9:50:
30:8e:37:ae:29:d3:d1:ba:0e:00:f4:5f:d5:44:16:3c:69:6e:
e5:23:2d:5c:60:ee:24:1e:9e:05:d0:25:43:84:8e:f6:e6:e0:
08:ba:32:47:45:96:cc:7f:9c:bc:6f:09:bc:b4:13:41:5e:2a:
e7:8f:8d:89:3f:97:e9:63:f4:c4:3c:ac:a6:42:4f:a5:7a:97:
8a:4c:13:a2:af:fe:e9:92:63:16:cd:e7:5d:a2:1a:0c:cd:81:
0e:da:f9:6a:d2:46:f1:9b:1b:6a:a4:22:e9:a8:36:3d:05:c4:
fa:73:c2:4f:e7:34:38:ff:96:4a:b6:fc:d2:f2:90:24:8a:63:
e1:dc:8e:d0:b1:7f:4e:0a:ea:54:79:22:b2:6d:ef:80:20:af:
41:58:09:46:ff:ee:cb:c0:b6:0b:b1:b6:c2:fe:72:9b:cb:f9:
ea:ba:19:30:5d:0d:80:f0:41:e8:17:a5:02:e8:62:9d:10:84:
0d:97:6f:a3:ac:b5:3d:86:8e:9e:ec:6c:de:8d:62:4f:4f:fa:
9f:b0:86:8e:2c:bc:de:cc:be:ba:d8:0e:de:75:80:ae:d6:96:
71:bf:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:44 2026 by rpki-client