Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: tYhczgmZvPth742QHOlgsAgfWmMa7mm13i5OGGGCvhI=
Subject key identifier: 75:25:CF:33:78:C7:2E:A9:1C:05:55:F3:61:57:14:04:B4:D0:BC:45
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 019D9C2D199A0A436DD5AB492C93124CAFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0843
Signing time: Fri 17 Apr 2026 16:01:34 +0000
Manifest this update: Fri 17 Apr 2026 16:01:34 +0000
Manifest next update: Sat 18 Apr 2026 16:01:34 +0000
Files and hashes: 1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: CXaWpaeFZYtO29sikf5f3P+hNkkWT68JaPsVfawp4dM=)
2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:19:9a:0a:43:6d:d5:ab:49:2c:93:12:4c:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Apr 17 16:01:34 2026 GMT
Not After : Apr 18 16:01:34 2026 GMT
Subject: CN=7525cf3378c72ea91c0555f361571404b4d0bc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:5e:d2:43:07:c5:41:be:1d:68:66:f5:f0:
b4:60:0a:42:86:45:2f:50:42:89:80:26:85:49:7d:
34:18:22:2d:7b:15:e1:85:26:9a:5c:95:44:6d:79:
5d:5d:69:8d:25:69:84:32:8b:86:f9:47:67:c7:be:
5c:ca:db:04:a0:ce:c0:79:e9:2d:24:1a:da:85:36:
d8:77:7e:65:92:b5:3b:1c:6d:0e:4b:8f:20:0a:f0:
c7:1c:d3:0a:49:83:02:08:76:da:8c:01:ca:14:e6:
b0:4b:97:57:81:27:14:f2:6f:08:8d:21:45:c3:4e:
bb:a4:3d:c9:cc:56:fb:5f:a0:45:32:7b:cf:21:62:
20:ec:1c:85:36:61:ff:55:a7:fd:7e:27:81:98:09:
df:44:f4:8d:73:a2:bc:31:53:7f:64:9b:e6:cd:dc:
52:54:21:d1:4c:90:fa:6f:72:af:53:aa:9a:bf:12:
6a:c0:4e:4a:16:aa:ee:13:2e:62:2d:ea:fb:ab:87:
9a:22:c9:ba:b4:88:28:be:0e:5d:30:0f:21:a7:90:
48:18:eb:42:99:85:f1:91:74:93:0f:5f:33:83:1d:
fd:9e:84:af:2b:8e:5e:85:8a:61:46:2a:8a:f8:de:
bc:77:b8:7d:79:d0:23:44:0d:0c:fa:19:aa:7e:af:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:CF:33:78:C7:2E:A9:1C:05:55:F3:61:57:14:04:B4:D0:BC:45
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f8:af:e9:3e:47:96:43:2a:e9:b0:86:de:97:5c:bf:33:0c:
6b:6f:d0:92:43:56:f2:45:f0:ed:02:a8:42:f8:87:0b:77:dd:
d3:0e:3a:70:ed:cc:f2:8c:44:c4:5e:5d:a8:dd:e4:85:4f:62:
ea:43:99:a3:8c:67:39:73:dc:6a:2a:d7:5c:18:f5:46:d3:56:
be:49:b4:40:41:99:6c:51:71:58:2f:31:25:72:b5:64:e4:3f:
5f:6f:2c:4c:52:bd:33:43:cc:cd:d3:2c:93:4e:ff:5b:14:24:
e2:d1:f8:9f:5e:a3:27:14:ec:5b:42:c7:8b:fb:a1:cd:c4:1f:
dd:c3:d1:74:1c:bf:e9:e7:de:1b:ec:94:77:93:66:70:c8:28:
0b:c2:ee:38:96:d3:ba:69:e9:40:32:bb:77:58:e5:7e:00:54:
2f:ff:51:dc:54:54:13:48:72:12:d3:6f:b2:4b:15:ec:bc:c6:
01:83:a5:9a:df:a5:9d:27:d4:6e:62:a2:39:c2:a7:94:94:56:
b2:15:43:ed:f9:04:ee:f5:51:24:b5:4a:ab:ff:cf:b6:68:eb:
56:23:99:1b:a5:59:99:76:62:4f:23:dd:48:e4:f4:74:20:b8:
17:67:f0:81:97:da:47:49:49:52:49:ba:9a:a1:d7:a2:32:1f:
80:d8:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:26 2026 by rpki-client