Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: GPl42GOrkhgN4MM0aNYoGMgeKEPMbzADMQaNm3qXjFg=
Subject key identifier: 84:FB:EF:C7:7E:C6:0F:BB:39:7E:C1:4C:EB:96:DF:05:09:3B:94:05
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019DA30A468FA4B9648037542E726D077453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 00:00:52 +0000
Manifest this update: Sun 19 Apr 2026 00:00:52 +0000
Manifest next update: Mon 20 Apr 2026 00:00:52 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: UxQVnHPDXNmVjcEGydu1pau3Udxzf9TpaWCsJDDk60A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:46:8f:a4:b9:64:80:37:54:2e:72:6d:07:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Apr 19 00:00:52 2026 GMT
Not After : Apr 20 00:00:52 2026 GMT
Subject: CN=84fbefc77ec60fbb397ec14ceb96df05093b9405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:b6:1f:b8:15:b7:80:40:7c:9d:6b:f8:4e:
c3:26:6f:62:25:de:e7:ff:e4:41:14:5e:58:ef:08:
2d:f0:6f:22:b4:6d:f4:58:3e:1d:cb:a1:44:d1:c9:
24:b4:3d:ab:b8:65:07:bd:a6:19:24:d5:dd:73:be:
07:5e:74:c1:a8:47:3a:20:9c:d6:00:6f:ed:09:54:
e2:0b:a5:06:f1:fe:41:e0:ea:29:6a:92:df:07:8e:
05:87:f0:f9:56:81:a6:8f:73:13:d4:65:17:d3:38:
f2:4d:91:e4:11:c4:81:f6:1d:34:dc:03:66:78:99:
11:eb:57:53:64:d7:ff:cf:0b:74:85:82:65:6f:c2:
7e:fb:32:91:77:a5:21:b8:20:da:49:9e:fd:23:5c:
2a:80:9f:1c:76:8e:65:50:ca:b7:77:fa:88:30:1c:
7b:8c:ce:0c:30:aa:3c:7a:f7:7e:98:20:17:e1:2e:
1f:da:65:8e:61:c2:d1:d3:38:9d:77:50:53:29:c6:
22:2a:2a:f8:33:fa:05:ce:34:4a:2b:7d:ee:dc:0e:
86:42:b4:29:d1:e2:81:5b:1c:22:2f:cb:2c:df:08:
e5:a1:fc:03:24:ab:95:30:b4:0b:68:a2:1d:cf:e2:
02:b7:1a:17:f7:9e:d4:b7:82:b5:a0:57:14:48:f2:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FB:EF:C7:7E:C6:0F:BB:39:7E:C1:4C:EB:96:DF:05:09:3B:94:05
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5f:36:26:58:15:76:85:b8:12:30:e1:4b:ca:e4:6b:fb:1c:
50:5a:06:8c:92:b7:19:78:f5:aa:98:b7:3a:b0:7d:39:8f:8f:
0f:5c:26:e7:62:d3:da:b3:86:db:88:6d:48:79:9c:e8:b5:f8:
eb:12:e3:78:6b:9a:4f:75:c3:3c:1c:5c:e4:36:27:c5:fd:18:
13:a2:72:5f:4f:17:af:78:63:72:72:bb:60:b3:a3:4f:71:55:
70:ca:d1:20:9e:d9:60:75:34:2a:d0:c1:d9:fb:ac:6f:d1:bb:
db:2e:39:7b:ba:13:0a:f7:cb:3e:77:d5:94:84:bc:0a:61:23:
36:cc:2d:0f:7f:1a:15:a9:ff:ab:57:81:8d:ed:a7:e6:1a:6b:
4b:8b:16:3c:ed:95:99:fb:58:ac:08:79:7f:ea:bd:79:6d:f2:
79:fd:a6:42:d4:07:83:7d:50:03:cd:9c:b8:3e:48:74:a8:24:
9b:9c:a0:24:7f:eb:c3:13:ee:59:72:e7:fa:bf:68:a0:24:04:
60:72:a9:97:3a:ab:9a:a6:70:e8:2b:ea:46:b7:21:1f:b5:3c:
e6:59:68:29:a8:5e:75:fc:c3:d3:6a:73:0e:50:45:31:40:09:
24:10:37:5b:88:e1:98:ec:51:b5:38:91:be:2d:51:96:45:b1:
48:e3:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:12 2026 by rpki-client