Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: 9fTqEY6TrbrXAPJuxzhj6mw0HlGqWdAcKYsrx/kYgXU=
Subject key identifier: 90:80:D5:73:64:AC:3A:31:47:8F:29:03:F3:F3:C0:9B:99:A4:54:11
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019D984F93F934624A1EA17020CF2F31017C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0CC1
Signing time: Thu 16 Apr 2026 22:00:45 +0000
Manifest this update: Thu 16 Apr 2026 22:00:45 +0000
Manifest next update: Fri 17 Apr 2026 22:00:45 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: NO3k7s3xxjFelSKdWQGzJjZ3I3LJ3S409OkQKuEOjU8=)
2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:93:f9:34:62:4a:1e:a1:70:20:cf:2f:31:01:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Apr 16 22:00:45 2026 GMT
Not After : Apr 17 22:00:45 2026 GMT
Subject: CN=9080d57364ac3a31478f2903f3f3c09b99a45411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:50:47:ff:a9:48:d1:a7:5b:21:a5:4d:d1:
81:b4:7b:7a:b1:e8:35:e7:f8:0e:aa:1f:8b:c6:af:
1a:06:00:66:da:ef:55:20:29:09:0d:66:1e:a3:8e:
a8:f5:99:1e:87:06:35:aa:87:9f:b7:13:7b:02:46:
7a:8e:e8:d8:d1:08:85:74:8c:b2:34:90:42:29:28:
6a:46:1a:ce:80:c8:98:6a:18:7e:17:c5:de:0b:80:
d1:12:16:61:a2:7f:f6:24:b8:3e:f3:da:c8:2a:be:
d8:0a:a4:36:d0:4c:f5:7a:05:7d:c3:6c:d2:a8:d8:
0d:b6:27:26:70:35:5f:8c:25:44:3b:99:db:6e:77:
4b:40:9a:92:1d:a3:0f:c9:ef:8e:b6:d1:3b:10:8e:
6d:6f:c2:11:cb:4c:fd:54:24:39:84:1c:4b:b9:ed:
37:43:a2:6e:67:b0:f9:7b:66:1f:2c:cd:84:b7:80:
b5:83:b1:ee:d1:9d:f8:2e:38:62:0d:1b:75:a2:e1:
3d:63:f7:4b:9d:13:c5:27:d0:66:e6:76:7d:e5:a5:
46:5d:74:71:5f:45:a5:67:fa:78:40:27:3d:83:30:
4d:94:a0:19:24:7b:1b:81:45:85:80:59:35:63:ff:
e7:ca:1f:6d:03:23:1f:ce:78:31:f0:c2:1b:b4:fb:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:D5:73:64:AC:3A:31:47:8F:29:03:F3:F3:C0:9B:99:A4:54:11
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b6:8b:5e:c5:db:37:33:91:3d:bd:6b:b8:ac:fe:40:03:26:
5c:84:99:db:4e:a6:08:87:68:60:cd:1b:e0:fd:5f:b6:27:8a:
4c:dd:58:a8:ec:77:5c:9a:b9:a8:ba:fb:6b:af:41:41:19:65:
f4:50:07:af:7c:5f:53:d3:e0:5c:d4:34:aa:9c:75:63:30:e6:
d5:d7:0f:5b:58:ba:d0:c6:3b:07:0e:60:dc:dd:3f:ad:a5:61:
06:45:c7:25:3a:b8:be:a2:cb:bb:ab:95:5d:12:89:c2:1a:4c:
6d:68:b2:c8:a3:ab:91:11:33:08:0c:bf:b5:fc:38:90:2e:c1:
22:24:b8:0e:7a:d2:59:77:51:ad:6e:c3:8b:57:52:c4:98:43:
c4:6e:a4:3e:e9:fc:32:6c:e3:92:53:3f:8f:b0:3a:a9:85:6e:
47:e1:29:cb:92:17:2f:33:90:2e:04:ec:5b:bf:81:c9:80:25:
78:b7:5e:3e:45:03:f8:16:ff:9a:44:82:d1:65:d8:c4:68:3f:
6c:b8:01:6f:43:49:44:a5:19:25:88:0d:bd:c1:22:52:32:1a:
27:ba:41:09:54:c9:10:59:2b:ca:9e:17:8c:5c:a6:2d:6b:5c:
4e:f5:00:57:ac:39:48:48:2b:90:cb:1d:70:aa:a6:75:13:a0:
f5:f3:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:00 2026 by rpki-client