Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: OcFgJJ6iToJwBd8sz5gt98aB+PUDtQ7snHdpv1iXsTg=
Subject key identifier: C4:5F:12:8E:42:92:21:07:EE:1F:6B:14:DF:C3:F9:BA:A6:92:59:87
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 019D9C6391942DD6A342675330161748D4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 17:01:04 +0000
Manifest this update: Fri 17 Apr 2026 17:01:04 +0000
Manifest next update: Sat 18 Apr 2026 17:01:04 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: SVODDF1i4eO6gXlZx608EHvzU8sj7Y9xk2d1rsgFi+g=)
2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:91:94:2d:d6:a3:42:67:53:30:16:17:48:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Apr 17 17:01:04 2026 GMT
Not After : Apr 18 17:01:04 2026 GMT
Subject: CN=c45f128e42922107ee1f6b14dfc3f9baa6925987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:a3:2d:73:f5:7a:0a:31:ca:63:a2:c2:66:
2b:55:f0:88:cf:6e:88:bb:9a:8a:64:ca:88:a9:a3:
b7:45:10:34:b4:30:4a:22:23:af:d4:33:95:35:f7:
27:7c:f5:c4:72:30:6f:97:fa:76:da:d4:ab:b2:86:
d8:a7:51:51:be:e1:cf:88:dc:84:15:e1:d3:d3:1a:
81:98:93:58:0e:cb:b6:6f:6e:1e:a5:e3:e7:05:4d:
aa:a8:fa:a1:8f:64:fd:d7:09:a1:c4:1a:24:bc:bf:
46:8d:36:84:74:c6:86:0b:0b:07:08:17:13:76:22:
a0:4d:3d:bc:7e:2f:0a:44:99:99:f3:0f:67:07:00:
47:77:eb:a2:ab:92:41:55:bc:b2:43:b9:7b:e5:59:
c7:62:6c:39:b7:da:87:2c:0b:c0:d9:28:f0:0f:c7:
b0:4c:f3:c9:5a:af:6a:b7:63:20:af:60:27:fc:45:
8a:62:d7:23:c8:96:c0:1d:43:a2:0d:92:96:12:14:
74:a5:6a:8d:40:a3:25:c3:e1:78:60:da:68:06:c6:
fe:b2:d0:f4:28:04:f1:0c:e6:f0:71:c4:84:44:fd:
1c:8e:9c:d3:cc:94:eb:28:94:77:50:71:6c:a3:78:
82:18:ba:01:be:36:21:ce:0d:fa:aa:66:ce:22:02:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:12:8E:42:92:21:07:EE:1F:6B:14:DF:C3:F9:BA:A6:92:59:87
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:e3:01:5b:72:15:c9:47:33:d4:73:f7:9b:93:82:b0:cd:
3d:2f:60:b2:ea:4a:aa:de:42:26:47:d7:38:93:39:32:12:a7:
27:d6:60:ff:d2:70:2e:91:17:45:81:5f:8d:b2:5d:4c:79:40:
b8:62:40:9c:bf:2e:81:38:07:be:d0:37:c8:81:7e:39:37:b6:
28:59:2d:7c:55:53:c7:5d:8a:ce:7c:da:f6:d6:96:e1:d5:48:
7b:6e:d6:62:31:05:49:8a:d4:3b:41:72:a6:44:be:54:85:c0:
c5:19:a6:09:df:2b:72:23:15:21:c2:b9:7a:e8:20:4a:a5:4a:
57:fb:6f:72:39:22:f3:e8:b3:39:47:72:e2:ce:7b:b0:0b:c9:
bf:39:bf:27:a6:47:80:c7:7f:13:bb:5e:63:93:88:a9:35:51:
66:39:85:e6:0b:a7:4d:13:44:c5:a9:90:62:93:a0:4a:60:34:
a3:96:f1:d2:55:eb:b9:1d:e4:57:a1:e5:fd:4b:ab:01:cd:b9:
cd:8b:ca:13:06:26:f5:4d:f7:4f:ef:3f:ea:eb:9f:54:a6:8e:
0e:82:48:f0:f7:99:42:ee:e5:5b:16:46:46:f1:6e:be:f9:80:
30:e1:d5:a5:11:78:db:e5:07:93:94:ca:c4:69:33:25:0a:d0:
e2:70:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:41 2026 by rpki-client