Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: 9OTAj5N1gKN4A+mUP+lGqSv+1pVY6f3F7tDVCJprJQY=
Subject key identifier: 98:AE:2A:8D:54:8D:CC:EF:72:C4:83:DA:2E:68:DA:F0:3F:9A:15:36
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 019D9BBF0A0647599873C146D429BD937099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 19E9
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: x7gT5mprjqyIKzPXzZkQ/q0USCH/ipZgssOSGOBDs3Q=)
2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
3: QtiXcakAti6d2iXhKH347YHNMXo.roa (hash: pow1d1/9bSpkBqspDh8+9JjMr6QZKuXaq7BSx5gfwvI=)
4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0a:06:47:59:98:73:c1:46:d4:29:bd:93:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=98ae2a8d548dccef72c483da2e68daf03f9a1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:fc:56:58:25:71:8d:e4:d4:95:16:ea:e4:
c3:9a:b2:40:17:da:61:7e:eb:d2:eb:df:8c:c3:7c:
8b:fe:b8:e8:e7:e0:aa:53:14:42:ed:5f:df:df:37:
ab:f4:64:ac:12:52:16:77:70:43:6d:f2:7d:58:e2:
3c:02:46:ed:35:cb:97:9f:6c:93:49:ef:4c:0a:02:
15:5c:c2:f1:52:67:aa:df:d3:17:ca:95:42:b2:69:
f8:25:3d:9c:02:ec:17:60:4b:ac:f0:74:06:9d:13:
09:2a:3f:c7:bf:b2:ae:eb:28:2e:15:5c:23:9d:b0:
71:20:57:1c:92:29:30:73:00:7d:81:bc:cc:14:d6:
ba:de:40:98:d3:ee:6b:72:b2:ae:52:d3:5c:72:45:
dc:84:38:0d:50:44:da:fc:58:23:a3:54:b3:80:3f:
c1:93:ae:1a:d7:9c:dc:fb:d6:72:ac:64:59:bc:ab:
35:1b:93:b7:59:f7:19:50:0a:be:df:4c:5d:95:8b:
be:55:1f:2d:7d:f3:62:e3:90:ec:59:0a:92:a8:60:
00:01:0d:a2:b0:0a:d1:0b:a8:a0:9b:32:47:8d:ee:
9a:4b:d6:bf:f5:02:e1:a6:00:68:b0:68:5a:be:31:
25:6e:e7:bf:e3:f3:0c:b9:10:00:ed:c1:d9:74:3d:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AE:2A:8D:54:8D:CC:EF:72:C4:83:DA:2E:68:DA:F0:3F:9A:15:36
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:06:42:93:97:33:04:f2:3d:e7:a8:92:7a:49:57:8e:b9:c4:
3c:89:6a:1b:e1:92:f8:2e:30:d9:a1:61:03:f3:1f:f8:c9:97:
30:81:92:81:bc:c6:de:37:80:2a:8e:3a:0b:63:10:49:da:52:
50:fb:db:f2:57:ea:fa:58:41:e4:f0:6c:58:74:c7:67:0d:5f:
04:42:a0:cd:b4:1c:f2:5a:b7:d2:d9:ee:8f:d2:5e:6f:c4:d2:
4d:65:59:f2:ad:e4:28:4a:2d:dd:f0:8f:98:c7:57:2a:72:1e:
f4:93:2f:b6:07:d9:aa:fe:7a:8e:06:44:ac:bd:0d:ae:c0:d4:
55:95:e3:33:d0:6b:87:95:ee:a7:a7:6f:29:13:2a:21:4c:0a:
25:f3:e8:75:08:e6:85:93:1a:aa:d5:27:d7:b7:60:92:cd:6e:
5a:0f:23:70:a4:1e:b0:d8:e9:c4:7e:58:f0:2a:c5:44:db:ea:
61:2b:15:4e:42:ec:dc:39:f5:56:f4:84:7c:1d:4b:c5:05:26:
b5:2f:72:e2:28:68:cd:0d:16:2c:54:16:b0:3b:07:1a:59:4b:
9e:f5:02:cf:80:2f:2a:b0:42:02:34:85:f4:96:93:db:9b:bd:
33:76:66:ca:8c:98:0b:7c:f9:f9:93:af:f1:24:51:0c:5f:41:
5e:1b:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:11 2026 by rpki-client