Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: 83LCI9kQi33Ym/B3ikj+sVt8+508xHf3OCoAuokl8VY=
Subject key identifier: 45:E0:29:B7:29:C3:7B:C0:A5:F4:73:A7:76:A1:7F:2E:79:9B:98:B2
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 019D98F4CF68B9E3B7E65CC01743EB8E9327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: CS0RtMiBLybQecwteovjDBsGv3EFfRLgZrMbhDiuUaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:cf:68:b9:e3:b7:e6:5c:c0:17:43:eb:8e:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=45e029b729c37bc0a5f473a776a17f2e799b98b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:99:d8:6c:a9:f9:36:16:35:09:30:b8:ca:
c5:26:53:31:7a:c3:ef:31:de:7d:5b:c8:dd:02:91:
62:5d:20:dd:01:a9:5d:27:f6:d8:fb:5e:20:ee:f3:
da:72:57:f0:cb:77:c9:50:84:00:9e:d0:5c:da:d1:
36:c4:a0:73:bc:37:e7:89:3a:6b:02:96:84:09:4e:
57:61:5e:86:d5:b2:cf:da:07:6c:ae:43:46:b6:e4:
ee:15:62:66:80:57:63:4c:0a:1e:56:86:3c:63:ac:
b9:83:fb:8e:66:5c:79:70:ab:e3:71:62:06:59:41:
83:0c:39:29:8a:a9:e5:f5:c5:69:bc:fb:13:22:30:
d6:88:86:a7:6b:b0:fe:93:58:85:d5:35:07:c0:54:
f4:b8:15:a6:59:9e:b7:56:bb:da:5f:1a:93:25:19:
b9:7a:86:bd:04:0f:2c:6b:59:0c:c0:81:71:de:13:
3c:aa:82:07:76:0e:d2:a6:61:2c:da:4b:04:c4:84:
08:81:89:15:fe:8b:74:e5:fc:f7:39:f8:23:1d:14:
97:b9:b3:aa:7f:a7:b1:31:a9:33:2c:56:c5:ab:4b:
5b:6f:d4:b1:a9:f9:87:0b:fa:07:0a:07:fe:04:88:
b1:4e:66:34:e5:58:60:ca:db:37:d6:8c:a4:9e:ee:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E0:29:B7:29:C3:7B:C0:A5:F4:73:A7:76:A1:7F:2E:79:9B:98:B2
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7c:22:02:a9:37:07:6f:1d:d8:34:05:92:97:95:fe:b4:9d:
3c:31:33:c9:24:59:80:b1:ff:4d:b2:ce:91:d6:c3:14:db:7d:
9c:2f:63:18:9c:98:3f:b9:bd:a0:22:c3:33:ca:a6:37:21:49:
d0:7b:d2:be:84:94:14:69:66:9c:66:71:e1:b6:10:9a:31:2b:
97:c6:cb:12:23:b9:ed:be:6f:ef:28:d6:aa:b9:f3:0b:59:c1:
26:f2:c6:18:2b:c1:f1:40:7b:21:da:3e:02:7f:69:3f:4a:82:
ae:9e:ee:f3:1f:6b:97:d2:95:a3:53:98:97:8a:fe:3b:24:62:
9d:06:80:36:f8:ec:4b:a9:14:86:7f:98:c8:1b:0b:49:66:ca:
c3:a1:2b:67:76:3e:f9:09:b9:9d:56:7f:4b:72:5d:27:7b:02:
bc:2a:4b:b6:7c:6e:e3:83:2e:a5:ee:0e:c6:21:e4:22:a5:67:
7b:f5:ff:78:ac:45:7f:4e:e1:8c:ef:95:72:0c:60:81:69:21:
9f:0c:3a:cf:65:69:0e:6f:89:c6:e3:78:22:b1:4d:96:9a:96:
d8:21:fa:76:3a:a5:af:9b:a7:57:b0:0f:ad:1e:e3:d4:0a:85:
77:a9:25:80:10:60:8e:fc:a8:f7:a7:bd:66:b3:04:4a:ef:79:
65:df:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:19 2026 by rpki-client