Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: uZ5C3598LaIEC7GnBPuD5fY/egEPcDY9+qbBb3Jw6gk=
Subject key identifier: 78:34:86:A4:D8:9A:74:B9:34:74:7F:72:0F:51:3E:87:27:13:1D:B0
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019DA56779356F5D6F887BBF94340729ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 0162
Signing time: Sun 19 Apr 2026 11:01:54 +0000
Manifest this update: Sun 19 Apr 2026 11:01:54 +0000
Manifest next update: Mon 20 Apr 2026 11:01:54 +0000
Files and hashes: 1: 1rgWG4O3JsVa6Vy192wtJnc-5kY.roa (hash: AGWJbzsxdafZPEtjKhcIbgcH63XtDFxzdaV11GVybsQ=)
2: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: i/cey6okY2itxONZAKN22vW9pCUXcik4EnPulDuNdYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:79:35:6f:5d:6f:88:7b:bf:94:34:07:29:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Apr 19 11:01:54 2026 GMT
Not After : Apr 20 11:01:54 2026 GMT
Subject: CN=783486a4d89a74b934747f720f513e8727131db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:ed:15:c7:69:e1:f3:dc:68:e5:fa:cd:60:
af:82:d2:cc:f9:6d:a7:75:0a:b6:01:b6:f7:f3:61:
37:e4:dc:05:84:e3:40:62:8f:c3:5a:b7:2c:78:02:
39:28:72:cb:34:67:b2:28:90:2b:f2:f7:5d:83:2e:
fd:bb:6f:d9:18:07:b0:c5:50:2f:f8:04:4b:18:20:
43:47:f2:f0:e5:2d:76:e9:3b:a9:ad:03:c4:c7:90:
66:a6:18:c8:02:85:22:6d:f6:d9:b6:94:12:9a:7b:
e2:c3:ff:dd:75:1f:0a:e2:49:72:50:44:17:86:0f:
27:b6:2a:0d:aa:52:77:45:a9:2d:46:69:87:eb:fe:
cd:1a:98:79:09:4b:40:22:ed:56:11:71:45:49:f3:
00:00:ed:30:86:7f:46:73:d3:3a:7d:94:cd:df:89:
9a:7f:4a:7e:9f:20:ab:7f:ce:45:71:c5:3c:77:6b:
30:68:79:f0:1d:2c:8c:fa:a1:d5:be:86:9c:12:2a:
9f:0e:10:fd:7f:98:85:e3:4d:aa:70:47:09:23:44:
53:5a:49:bd:18:24:2f:dd:33:19:b9:2f:a0:7a:97:
25:95:45:02:0c:e6:62:c3:e8:8a:ca:45:82:e0:9d:
47:93:e0:05:39:a7:1e:32:c5:2c:0a:23:1c:b8:99:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:86:A4:D8:9A:74:B9:34:74:7F:72:0F:51:3E:87:27:13:1D:B0
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:13:ee:b9:f0:40:e0:a2:30:43:6d:15:da:41:82:49:63:d8:
69:61:80:dc:83:21:88:c1:04:03:c8:0e:01:ba:16:39:6e:8b:
32:c7:53:2d:5f:10:4b:d4:e5:86:9d:8f:5d:5b:3f:64:9f:cc:
b0:da:c4:09:66:86:68:f3:59:54:5b:82:cf:a4:18:6f:59:10:
f1:ed:af:8c:5e:f6:85:6d:2d:a7:2b:f0:1b:4e:49:4a:d5:b6:
5a:10:37:c0:08:0d:4b:7a:c2:1a:2a:7b:bd:11:01:47:67:18:
1b:d1:42:c7:f9:80:a0:d7:63:8e:d6:90:89:a9:f4:96:0d:d2:
09:4e:cd:59:d5:41:af:54:50:4b:10:9c:cd:54:8f:69:bf:4d:
ff:62:69:ae:7e:75:5d:0b:b4:94:6e:5c:61:29:41:7e:b4:bb:
95:15:29:9d:86:05:f9:26:fd:0f:0e:7a:22:5c:14:d0:41:26:
8c:7f:54:ee:9f:d6:77:06:3e:ea:f6:19:d1:70:01:44:b3:57:
30:cb:94:f4:d1:1b:93:00:eb:9d:f1:c5:18:52:1f:40:80:93:
60:71:5e:77:55:59:55:20:11:07:52:3c:00:65:62:68:26:6e:
ab:c4:2d:f0:f4:f8:ec:e9:b7:4e:34:10:1f:d0:e3:e7:ee:cc:
ba:d4:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:31 2026 by rpki-client