Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: w8Y01lqgXXQOcJ9A0RoNClBaXFpU1jyd1zG2rwuGoyw=
Subject key identifier: 97:59:BF:58:51:CC:F3:C0:AC:BF:86:7B:4E:C9:6C:DF:59:E9:DF:6E
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019D992B4BD0D61BAEBCF32CA9E0FB972418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 12D5
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: YyQSApJQ9vJCldZLp7m48eguXI+3RxojXrNT3X/mvhI=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4b:d0:d6:1b:ae:bc:f3:2c:a9:e0:fb:97:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=9759bf5851ccf3c0acbf867b4ec96cdf59e9df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:0f:ce:61:81:dd:67:e6:d1:db:17:69:18:
75:4d:14:de:53:86:eb:10:dd:80:5a:a2:59:1f:1c:
86:91:37:fd:e7:cc:b1:80:71:8f:e0:d1:15:76:59:
2f:44:96:0c:a1:c2:6c:a7:9d:81:3e:b9:8b:4e:94:
8f:02:d4:74:f2:77:75:ca:72:07:5d:3f:8b:ca:fb:
6c:e8:28:6e:56:df:62:c4:ce:43:5b:1a:d3:8a:12:
4d:d4:9b:ae:2b:f6:63:82:8d:7e:ec:53:08:98:1d:
18:aa:2c:7a:0e:d5:57:ce:6c:f3:c2:41:6d:00:63:
29:bc:82:05:ba:c5:7d:82:57:d7:10:9c:5d:a9:33:
01:40:86:9e:d3:03:ce:47:89:18:8a:29:f5:be:46:
b2:b1:a5:75:09:4d:3c:85:80:99:37:5c:d0:4f:31:
75:84:34:d1:9b:8c:76:5a:ab:9e:93:ee:7c:33:f8:
4b:72:e0:af:b8:be:19:4d:43:04:5f:16:2c:9c:97:
b1:7e:08:cf:32:fb:e8:a4:79:6a:d3:44:02:38:39:
eb:59:78:42:f8:40:be:71:ad:07:5a:15:a9:1a:06:
2a:44:64:d3:53:bc:98:cb:d0:af:2a:5e:89:af:ff:
26:91:66:2b:f4:7b:a8:58:63:4c:7b:f9:16:9d:9d:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:BF:58:51:CC:F3:C0:AC:BF:86:7B:4E:C9:6C:DF:59:E9:DF:6E
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:e1:1b:6f:d9:b1:04:39:12:d4:9d:ba:eb:e6:d1:3b:eb:
a2:a5:3b:20:54:0a:ab:2c:bd:29:22:87:71:86:17:30:ec:32:
82:2d:be:6b:34:fe:a1:bc:52:92:94:ce:e8:1a:66:f1:05:84:
b4:ed:0a:05:e3:ba:64:16:cb:26:0f:d8:fd:35:23:45:8d:45:
b2:de:da:9c:00:6c:15:0e:fe:1c:7a:c5:6f:13:20:83:45:cd:
ec:c2:6c:a9:07:a8:d0:fa:bd:9c:03:1a:32:d2:20:e4:11:3d:
47:b7:cf:7f:dc:a1:9a:9b:e6:67:98:39:28:ef:55:15:0a:ba:
3c:21:18:0b:85:87:9d:4c:6b:73:6d:c4:dc:e8:f5:b0:d3:43:
9a:d8:52:77:ad:35:4f:d5:a2:36:33:2b:8b:f1:8e:49:43:73:
fd:f3:19:0d:b9:14:81:5e:32:85:57:39:54:70:90:72:04:71:
de:d2:3a:de:ea:9f:f2:81:b2:07:5f:ed:ff:4d:1f:c2:3d:fb:
68:19:3c:5e:0d:59:47:0d:af:b1:48:c4:38:a9:90:4d:01:77:
a3:fd:4f:3e:7f:97:5e:26:58:a4:78:3f:1f:ff:48:6f:fc:39:
47:a0:d5:55:b0:01:d8:31:6b:88:e2:a9:d1:ff:a6:77:c0:89:
e4:18:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:59 2026 by rpki-client