Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: 2JPDs+aYPh43X2gBvJBH3T0qRZGCchhmjtP2eiABQmA=
Subject key identifier: 03:C9:6D:BC:67:C3:EE:A1:F0:9A:06:78:AF:07:67:4E:D8:AA:47:0E
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019D9AABE0D0CFF87913CAE994B0DBABA84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0425
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: QsNp+tOkmYKvJOOhqPhSicfSTWJ2BbALhgas9fuc2n8=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e0:d0:cf:f8:79:13:ca:e9:94:b0:db:ab:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=03c96dbc67c3eea1f09a0678af07674ed8aa470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:eb:22:b5:b7:c4:77:27:53:40:aa:25:03:
d9:eb:0b:18:41:3a:df:6e:9b:30:4c:f0:e7:26:6e:
3f:70:79:22:e2:70:06:db:d7:b2:10:65:8b:13:af:
fb:99:42:88:8f:58:3d:a3:9d:8c:b9:4e:32:26:fa:
22:84:13:d6:cf:50:ba:ae:80:61:01:35:e2:33:1f:
6c:04:99:06:0d:40:7f:78:d0:9d:f6:ba:6c:41:1b:
07:c6:d1:32:1a:b5:67:3b:5d:09:15:bc:b2:1e:3f:
22:0b:82:67:e4:98:2d:dd:a9:d0:09:58:42:49:53:
5b:53:2a:a8:e9:86:54:2c:7d:6b:c7:ff:9d:e8:a2:
31:8d:57:97:cf:b0:e5:b1:0d:2e:e2:94:52:ac:e5:
ff:3c:67:9e:db:1a:a7:86:56:45:2a:83:d7:17:55:
ba:ea:3d:be:5c:e8:62:1d:98:4c:4b:f5:c5:4c:c0:
8f:d4:84:66:41:7f:15:c8:cf:84:80:93:aa:f6:c1:
99:48:23:e3:47:96:9d:0d:fe:94:ef:2d:1f:b7:6a:
51:17:c5:a8:e7:1a:a3:a6:73:fd:c1:59:8c:d9:54:
de:3e:e8:9d:a7:a1:7b:e8:cf:38:2e:37:4d:09:8e:
bc:ee:1d:1c:37:5d:79:b1:39:0c:9b:2b:30:9a:55:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:6D:BC:67:C3:EE:A1:F0:9A:06:78:AF:07:67:4E:D8:AA:47:0E
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:14:f9:f5:82:52:db:b6:c6:76:15:03:03:bf:ac:35:35:63:
db:f4:29:bf:4e:19:3f:ad:df:b3:72:74:9b:78:86:e7:e4:a6:
5f:9b:29:03:5b:98:cb:5c:31:87:df:0c:94:6f:1c:65:66:76:
fd:40:68:b1:c1:88:50:54:a5:78:50:14:18:ac:1f:f5:24:93:
cc:30:44:81:ac:c5:c1:eb:90:86:68:36:74:de:88:50:55:99:
fb:68:4c:cd:de:d3:8c:ce:9c:3a:2f:14:61:37:f7:73:8c:31:
ff:60:b0:e4:77:06:23:6f:e1:2e:ca:af:67:e4:c8:8d:b8:06:
6b:5c:e9:89:e7:84:6a:2c:ca:bd:4c:aa:fe:94:46:87:bd:a9:
42:cf:0a:f7:78:97:47:5b:b5:fd:ef:75:8b:0d:95:ce:e3:35:
4b:f5:3f:f0:0e:75:53:e5:4b:9b:0d:b5:3f:bf:6d:eb:af:15:
57:47:cc:5d:c6:ca:85:82:1d:f4:29:a0:7b:0a:fb:84:a1:ad:
63:7b:7e:a1:b4:ab:9b:4f:93:ce:11:5d:8e:67:bc:a1:8a:8b:
f6:ad:f4:d0:14:5f:09:c6:4c:ca:fb:dd:e7:2c:5f:ba:cf:13:
fb:a9:e0:62:7c:59:f8:82:8e:e3:9e:e7:01:fe:d0:4a:0b:1c:
66:a2:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:02 2026 by rpki-client