Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: 3l2m7tWFc3xsUao0ZAm0rISdnqFo20l2AUJyrMpVRo0=
Subject key identifier: 68:23:84:08:65:F2:30:96:AB:0E:03:0B:13:8B:1D:45:AD:DF:3E:20
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019D9AAC20F79631CC338BDDC4B7398843EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0EB3
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: KjZ9jnPZZdMv1RZUnPTQDiISFVtq96M91GH6nBM9IF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:20:f7:96:31:cc:33:8b:dd:c4:b7:39:88:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=6823840865f23096ab0e030b138b1d45addf3e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:1a:af:c6:1e:a4:69:cb:1a:c3:6d:2b:2d:
4c:eb:c7:4b:0f:c5:5f:aa:ab:5c:3e:e4:01:81:ff:
87:a0:33:d5:3d:1f:64:8a:dc:7f:ed:4c:2f:d7:19:
5c:2e:67:5e:f1:a3:da:43:ca:0e:10:dd:13:ba:98:
4c:d3:a2:4b:cf:74:e6:28:42:c5:56:ab:19:20:ff:
d6:d1:90:c6:82:f3:04:ba:ba:ef:1b:dc:1c:6b:f8:
48:0e:3d:01:35:f0:1a:20:64:54:fb:97:49:d7:89:
22:07:fa:06:59:1c:80:35:62:bc:8c:f6:e8:15:74:
b5:4a:87:1d:9f:95:9c:c4:d8:75:5c:1f:71:10:e8:
c1:28:29:a2:07:cb:09:4a:26:b1:49:00:25:43:92:
15:b6:0e:35:a4:56:56:e1:58:eb:10:6f:42:6e:51:
a2:48:61:56:cd:8f:0e:9d:da:65:fc:30:e4:ca:3e:
e3:1a:01:cd:49:39:ff:e2:b1:20:44:e5:73:ab:4b:
c8:db:e5:d4:f6:3a:44:53:5f:00:25:ad:91:9c:42:
79:61:8b:d3:14:9c:95:f7:0e:11:2b:c8:81:c5:5e:
26:d0:ad:60:a4:26:ce:9e:cf:ad:9d:20:3c:05:af:
f0:b0:39:35:ff:6b:72:ae:19:2c:c8:92:f1:8a:d7:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:84:08:65:F2:30:96:AB:0E:03:0B:13:8B:1D:45:AD:DF:3E:20
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:48:7f:a2:2a:80:68:57:95:4e:bc:63:e6:c4:e2:52:a8:24:
8d:5b:fa:0d:81:2b:80:c9:f5:00:88:80:d3:4f:1c:7f:fb:7d:
7d:0a:d2:31:62:34:71:a1:8f:79:08:c5:c4:61:c1:c8:53:94:
67:40:4c:d4:fe:9a:b7:a8:7e:74:54:13:88:fd:94:d2:63:15:
94:85:f8:e8:e5:16:6a:39:51:e9:1b:f1:e8:cc:0b:69:69:ae:
a6:a8:0b:14:54:81:54:43:c8:fc:7e:5f:e0:49:0d:ad:bc:0c:
0e:83:30:55:d7:8b:e3:c7:03:a6:09:4b:7d:d7:5f:4d:6f:fe:
a1:71:cc:07:63:07:a6:c9:ef:5b:b0:6e:d0:5b:6f:fb:ca:e6:
59:8f:11:20:9f:de:a1:33:99:c9:b0:9f:e9:13:90:33:12:ba:
7f:d2:62:81:22:f3:43:2c:f1:eb:f6:87:f4:c4:65:68:35:b4:
ee:8a:87:40:8c:9d:60:f7:b7:dc:a1:64:6f:20:f7:48:94:2b:
fd:7a:d8:2e:ea:5d:e3:d2:5c:6b:b8:6e:72:8f:2b:2b:aa:00:
ee:d1:d8:83:94:6f:0e:9b:93:c1:e7:68:e7:d5:d9:8c:08:8b:
79:d5:68:a2:50:9b:af:7a:4a:6a:b9:cb:4b:fc:91:44:cf:6d:
f9:e8:14:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:48 2026 by rpki-client