Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: EegofpjpnJhlgpdIt+YwXhKNas0ckZtU+YyMTwFqxqs=
Subject key identifier: BD:42:E4:BC:00:AA:75:FB:B5:19:E1:2D:4F:16:B1:00:27:06:0B:FD
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019D984FB36AB59F261113139BB4F7A3A915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1855
Signing time: Thu 16 Apr 2026 22:00:53 +0000
Manifest this update: Thu 16 Apr 2026 22:00:53 +0000
Manifest next update: Fri 17 Apr 2026 22:00:53 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: WyTYemPbcNTRwPrqrrysC2fwDy2WZxJfSAUYSuy36yg=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b3:6a:b5:9f:26:11:13:13:9b:b4:f7:a3:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Apr 16 22:00:53 2026 GMT
Not After : Apr 17 22:00:53 2026 GMT
Subject: CN=bd42e4bc00aa75fbb519e12d4f16b10027060bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:83:cc:85:f1:f3:86:a5:78:3e:53:8c:86:
bd:b6:04:70:f5:94:54:cf:f2:54:56:23:fc:35:37:
65:0c:18:37:fd:04:60:c8:ad:67:fe:04:e8:56:c2:
d0:d5:9c:c0:12:1b:90:c9:9f:8c:2f:b7:ab:fa:88:
7f:8f:f1:f6:d9:e6:da:79:a5:0c:63:92:f0:77:a2:
b8:c9:e3:08:15:37:35:f6:d7:91:ca:50:4a:0b:84:
8e:2a:cb:f7:54:8b:a8:2f:e3:7f:28:a7:20:83:a7:
8a:5a:da:ce:85:79:9b:ee:6f:bb:a3:65:e0:a5:1a:
a7:92:61:91:36:7b:36:0e:6e:0d:9b:cb:61:0d:9b:
c0:4d:bb:a4:6e:58:c6:8b:d2:9f:7c:11:87:de:fc:
cf:83:f6:3f:18:ee:7f:de:99:24:2e:21:ca:c4:85:
b2:92:a4:34:7f:8f:2e:03:8d:14:96:9a:5a:a8:0f:
1a:71:f7:0b:8c:bb:fb:76:a9:4e:bf:fa:c9:23:9f:
f8:4c:d4:69:ea:6c:89:62:99:df:0e:c1:a8:28:e8:
fa:71:12:bf:a3:86:83:a4:cc:fd:18:e5:ad:e4:df:
79:59:d5:1f:ac:44:a4:55:5d:2f:57:1c:5e:d6:39:
54:5e:bf:c5:98:a4:f7:09:e9:95:5d:6e:9f:96:af:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:42:E4:BC:00:AA:75:FB:B5:19:E1:2D:4F:16:B1:00:27:06:0B:FD
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:47:2f:2f:4b:24:b7:66:8c:35:96:77:61:4a:3a:77:12:
02:b1:62:a2:d1:a4:d8:72:c2:7e:4c:57:6b:6b:c9:a9:71:11:
4f:95:70:f5:71:6d:8a:84:e3:09:6a:93:1a:31:a4:80:59:35:
4a:8a:eb:33:1e:ab:bb:4e:15:3b:cd:9f:0a:2c:be:88:e5:1f:
64:9b:58:42:c2:92:8f:24:f9:7a:33:0c:96:4b:70:b8:b7:5e:
05:79:97:4b:af:99:12:0f:b7:f5:19:e0:98:53:19:6d:20:da:
b3:5b:89:81:81:fe:07:39:56:0b:ff:18:fe:b4:fc:04:6c:23:
15:ea:7c:c7:aa:81:f8:1a:81:e5:64:5d:b3:80:20:38:bf:ac:
e7:86:49:5e:2f:ad:f0:ec:85:77:72:bb:ea:e9:bd:06:f3:a5:
94:ff:8b:c2:77:f5:2c:b0:94:d9:c9:77:32:40:06:19:e4:4a:
a9:85:9f:b5:ed:6e:bb:d1:63:11:f8:8c:74:71:ef:51:65:c3:
73:4b:bc:7b:cf:b5:00:77:4a:b7:bf:78:76:cb:94:dd:b2:50:
70:14:61:e2:bd:43:36:04:f2:ac:1e:ac:03:ac:c7:b2:c0:f3:
ec:b4:be:e3:7b:af:d9:03:5e:fd:a1:7b:7a:3e:ee:c9:b4:ee:
db:5a:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:25 2026 by rpki-client