Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: bXLz/8glMEimcffAvmIbbSGeuZ6pPHgObItUpzSqs+c=
Subject key identifier: 12:67:FF:71:C2:B0:77:7F:65:CC:3A:25:6B:07:64:EE:15:90:62:94
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019D9A071A65CECE314FC473E32080B2DFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0D1B
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: LKPbzJ58xWmaiianAJ+0Vl9+Tv+Pd0kTRQofbV+BQIc=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1a:65:ce:ce:31:4f:c4:73:e3:20:80:b2:df:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=1267ff71c2b0777f65cc3a256b0764ee15906294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:26:5d:c1:e7:ae:b0:7d:f8:75:08:b4:56:
3c:44:f8:cf:d0:a0:2a:1a:d2:dc:c0:fb:1f:02:0c:
3b:b4:43:05:5c:1c:d5:7f:b3:cc:af:28:1e:bd:96:
26:62:1b:4e:09:d5:cb:36:42:19:93:19:c7:be:cd:
f9:fa:2a:55:c5:86:b6:1d:17:2e:bb:d2:84:9e:d1:
ef:4e:12:56:d5:57:49:bb:13:9d:d6:31:f5:ee:40:
ac:19:4b:a1:4d:c6:b3:4f:5e:64:a9:ff:e6:f9:1b:
0c:a1:6b:f0:2b:97:ab:32:76:df:cb:56:13:4f:c4:
25:02:3a:90:19:fd:90:a1:b7:48:ee:e8:b7:63:a7:
4a:6a:4c:9c:a3:38:e8:8c:e1:1f:18:39:4e:1d:7f:
bf:20:40:61:c8:a1:aa:cb:58:65:c1:7a:5a:71:25:
bf:04:04:a0:33:98:42:7c:52:ae:cc:b1:9b:a5:89:
b2:33:30:45:42:ca:85:84:ce:2f:98:5b:8e:6d:a0:
64:b6:cb:9e:75:89:df:e0:28:d2:bc:d1:48:ba:b4:
4f:19:5a:f7:8c:da:6f:73:59:94:d9:72:3d:e8:70:
3e:d0:98:f1:1a:17:b0:4f:a4:95:f2:4b:2b:fd:92:
42:a5:6d:ab:d4:1a:40:df:0e:f9:a4:c6:4d:69:6f:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:FF:71:C2:B0:77:7F:65:CC:3A:25:6B:07:64:EE:15:90:62:94
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f6:68:ba:24:b6:3e:21:d2:a1:82:c9:b4:41:e6:36:c9:32:
16:8a:7f:80:52:9e:a6:32:70:69:a0:5f:df:00:7d:be:c8:c4:
69:07:96:32:a3:3d:b8:74:ba:2d:dc:f1:d0:38:53:8c:6f:ad:
2a:b0:c7:e2:90:cd:c2:9d:3f:55:c1:6e:cd:fa:12:7b:a0:93:
ad:6d:48:5c:6f:81:62:3f:9f:ed:99:06:7c:84:ea:73:90:e5:
01:41:85:63:6f:3c:78:1e:d8:c9:3b:9b:ee:45:39:37:bb:2c:
f0:b7:ce:a8:f4:d9:72:58:fa:8f:43:91:5c:69:be:79:cb:01:
a0:6e:d3:49:99:e2:b4:2d:ed:1e:70:cf:ec:65:89:2c:95:0b:
d6:fa:a3:58:ef:3c:d8:6f:a6:90:5a:fb:73:82:6f:79:1b:f7:
19:48:0b:78:1e:ef:a3:8c:dd:a0:6a:ed:25:03:b7:d5:bc:b3:
b7:b7:ea:c7:79:a5:cd:f7:29:e4:e6:54:a2:6c:9b:e7:8e:4b:
7c:4b:35:a0:51:dd:d3:6b:55:86:cf:79:65:8c:a8:7f:8d:ad:
da:07:78:7a:8e:02:70:72:87:5d:4c:a2:e1:2f:dd:f0:9a:6b:
fe:b6:f7:b4:8a:f0:66:62:38:43:4c:b5:d1:42:29:ca:26:30:
ab:31:9f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBxplzs4xT8Rz4yCAst/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjYwNDE3MDYwMDQ5WhcNMjYwNDE4MDYwMDQ5WjAzMTEwLwYDVQQD
EygxMjY3ZmY3MWMyYjA3NzdmNjVjYzNhMjU2YjA3NjRlZTE1OTA2Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiEmXcHnrrB9+HUItFY8RPjP0KAq
GtLcwPsfAgw7tEMFXBzVf7PMrygevZYmYhtOCdXLNkIZkxnHvs35+ipVxYa2HRcu
u9KEntHvThJW1VdJuxOd1jH17kCsGUuhTcazT15kqf/m+RsMoWvwK5erMnbfy1YT
T8QlAjqQGf2QobdI7ui3Y6dKakycozjojOEfGDlOHX+/IEBhyKGqy1hlwXpacSW/
BASgM5hCfFKuzLGbpYmyMzBFQsqFhM4vmFuObaBktsuedYnf4CjSvNFIurRPGVr3
jNpvc1mU2XI96HA+0JjxGhewT6SV8ksr/ZJCpW2r1BpA3w75pMZNaW9dQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJn/3HCsHd/Zcw6JWsHZO4VkGKUMB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPZouiS2
PiHSoYLJtEHmNskyFop/gFKepjJwaaBf3wB9vsjEaQeWMqM9uHS6Ldzx0DhTjG+t
KrDH4pDNwp0/VcFuzfoSe6CTrW1IXG+BYj+f7ZkGfITqc5DlAUGFY288eB7YyTub
7kU5N7ss8LfOqPTZclj6j0ORXGm+ecsBoG7TSZnitC3tHnDP7GWJLJUL1vqjWO88
2G+mkFr7c4JveRv3GUgLeB7vo4zdoGrtJQO31byzt7fqx3mlzfcp5OZUomyb545L
fEs1oFHd02tVhs95ZYyof42t2gd4eo4CcHKHXUyi4S/d8Jpr/rb3tIrwZmI4Q0y1
0UIpyiYwqzGfuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:19 2026 by rpki-client