Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: URb2yrNaquTNb8bVeLTP7GkhOZRcOsB8xVdS/jbl23g=
Subject key identifier: 3E:1F:D2:89:6A:0F:46:B4:84:96:81:F1:AD:0D:71:C5:F2:4B:A5:D3
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 019D9B87C08EF02FCDAED57096EEF6D89203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: 0DdGghZkrQhyl5NYVxlrfM0f+U0J7vAc0YTh5MptIOw=)
2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c0:8e:f0:2f:cd:ae:d5:70:96:ee:f6:d8:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=3e1fd2896a0f46b4849681f1ad0d71c5f24ba5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:c7:cc:26:89:ba:24:8a:15:64:5e:c0:79:
d9:7e:97:6b:50:78:2b:37:05:e6:42:06:1e:bd:3f:
19:1d:09:63:b1:90:b1:12:3d:24:7d:e0:44:4a:f5:
d2:c3:54:79:d6:1b:6b:89:89:3c:31:c0:87:b6:7a:
41:df:9e:f8:60:9f:ef:42:0a:39:40:dc:c4:df:b0:
43:29:ff:0b:1e:8a:4d:07:8a:8b:e0:ca:d5:83:f8:
89:23:7e:53:ee:45:b8:c7:73:75:b6:ca:18:97:fa:
f6:0e:65:a8:56:86:0a:66:6f:00:79:1a:f4:0e:5d:
06:bd:22:a2:f6:1b:54:5f:80:b8:36:fc:98:17:9a:
d4:9e:e7:06:e3:53:de:e0:26:08:1f:c1:a9:5c:93:
30:89:a7:db:0c:51:48:10:3f:7e:87:6f:ce:db:2c:
3d:7b:f4:07:1a:90:19:1a:b6:d4:0b:93:12:22:63:
ce:12:46:11:95:b4:f0:62:4d:2f:43:2b:dc:95:29:
26:e4:5b:8e:7e:c1:b2:c9:dc:fd:66:7a:4a:13:54:
a1:12:ef:3d:2d:8d:75:d1:67:30:90:57:bf:b3:f4:
40:50:91:0f:a6:24:49:d0:44:f1:46:2d:66:ef:40:
35:89:f8:b3:d4:47:cb:39:29:43:9d:5c:48:09:59:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:D2:89:6A:0F:46:B4:84:96:81:F1:AD:0D:71:C5:F2:4B:A5:D3
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e8:0e:ca:b2:80:d4:7e:6a:15:45:bb:e9:11:8e:81:9e:67:
83:4d:77:df:09:bc:51:72:79:a0:eb:38:1a:85:93:b2:06:e5:
27:69:f9:72:4e:3f:10:b5:1d:ac:3b:40:bf:22:9c:40:b7:d7:
f8:4a:d4:49:87:6a:f0:99:90:7c:c8:fc:a1:38:93:1d:0f:85:
9b:9c:77:07:36:cb:0a:b0:f1:8d:2c:df:d9:d7:98:ee:ab:b6:
7f:1f:63:2b:cb:80:0e:9e:4f:7a:11:2a:c8:85:0e:15:87:eb:
23:31:de:ea:37:8a:27:12:63:c2:ef:fa:2f:00:cf:3c:6f:79:
88:91:e1:cf:41:55:a9:06:40:8d:aa:0a:7c:71:81:6c:6d:e1:
53:f9:07:09:eb:4c:85:4e:51:73:76:87:24:6c:e3:88:1a:ec:
8a:16:ad:75:34:f6:33:8d:62:19:a2:49:58:91:c4:cb:3b:e5:
8d:5f:08:f1:a1:24:d5:a9:c2:5b:e5:06:b1:8e:7e:0e:ed:28:
66:85:a4:a9:b6:7c:83:45:98:af:66:bb:cf:6d:92:bf:dc:d3:
58:32:17:31:4b:28:b9:8b:db:cd:86:11:98:c3:c6:62:3f:c6:
ce:14:5e:a8:5e:96:49:ba:3a:b4:ec:31:ea:f5:32:c8:20:84:
09:d3:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:32 2026 by rpki-client