Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: J8JLm3ycnB1ehQXtnSYlUs2kfZj9SE+U0wau+c7WpLI=
Subject key identifier: 79:D9:A3:90:2A:77:F3:B6:3D:98:58:B8:80:9B:6D:90:75:8D:39:9B
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019D9D76346D8E1AE152ED8E26C5487F9CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 036E
Signing time: Fri 17 Apr 2026 22:01:02 +0000
Manifest this update: Fri 17 Apr 2026 22:01:02 +0000
Manifest next update: Sat 18 Apr 2026 22:01:02 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: qgh6+Fqs0W7y29rFPJZDmDhm7Qe7MizudpAD0V2+7qI=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:34:6d:8e:1a:e1:52:ed:8e:26:c5:48:7f:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Apr 17 22:01:02 2026 GMT
Not After : Apr 18 22:01:02 2026 GMT
Subject: CN=79d9a3902a77f3b63d9858b8809b6d90758d399b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:0f:82:89:b3:36:9b:78:60:41:7a:49:2e:
9e:4e:54:3c:43:32:f4:0d:cf:42:7a:9a:50:e4:03:
49:53:14:f8:9b:18:f8:34:09:39:f2:71:e5:f6:c1:
9a:78:90:0d:41:ab:6d:71:d0:d1:2f:2c:91:7f:3e:
32:a0:44:92:a9:af:84:56:04:6f:2c:7c:f1:3a:bf:
db:be:e5:7c:e6:81:ab:2a:41:73:61:a2:7b:e6:1d:
5b:ce:59:6c:73:37:39:f3:90:c0:39:f1:ae:cc:14:
69:cf:75:fd:52:cb:2c:f6:6e:6c:39:2a:97:f8:50:
e4:02:74:5e:ab:7c:45:6a:95:a7:20:b8:e9:58:2b:
06:8e:7a:8d:92:6e:4d:0c:7b:47:b8:40:6f:d3:73:
6e:4f:2c:ee:fa:00:de:e9:d3:82:ee:32:31:b8:9e:
6d:fb:6c:e2:03:3d:4d:c3:ee:66:ae:1a:c8:23:c2:
a8:14:a5:39:ed:23:5c:78:22:97:c2:ab:bb:34:6d:
9e:ea:b1:d9:cf:02:de:44:05:1a:08:dd:9b:dd:77:
92:a8:4c:20:1a:bc:7a:ed:e7:af:53:0a:96:e4:e2:
a9:b8:14:db:78:eb:27:46:83:4d:9b:a9:75:35:62:
6e:c8:a9:68:17:35:93:4b:82:39:7c:c0:69:b6:ea:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D9:A3:90:2A:77:F3:B6:3D:98:58:B8:80:9B:6D:90:75:8D:39:9B
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:55:bb:35:6b:4b:37:17:ad:55:9f:7c:a5:de:6c:ad:49:09:
16:ef:48:e2:c9:4f:f4:31:41:ac:49:01:20:93:72:85:86:d7:
54:ae:5f:37:2a:8d:94:a9:50:ee:49:f0:df:2b:50:61:41:4b:
8f:93:ab:27:be:08:05:f5:b6:42:08:9d:a9:9d:61:82:58:6c:
0a:a7:9f:4c:f9:07:63:28:4a:2c:2d:f2:5f:77:3f:a8:f9:ac:
23:6e:ee:e6:0f:7c:80:cd:0a:1b:85:40:1b:1c:71:02:d2:d5:
ab:1d:07:de:fa:7a:4d:09:4e:46:ae:4a:ce:d3:3a:0f:a0:a7:
02:37:11:9e:58:67:50:5a:79:fb:b9:73:11:00:90:ef:10:7b:
4e:be:0d:d5:02:9d:00:1b:20:be:2c:f6:a7:4e:6c:e7:f0:f6:
eb:c8:c3:5b:83:41:cd:ed:ac:13:d6:85:58:ee:bb:08:9c:b4:
92:e8:bc:f9:93:7a:de:73:a5:2e:d4:a9:c4:8a:5a:df:a9:5d:
19:50:06:42:ef:61:04:80:af:84:48:26:e3:cf:25:8d:49:ba:
b5:d4:d7:62:de:3a:eb:44:47:48:36:65:43:67:c7:db:21:1e:
8a:62:d2:6d:e3:1a:70:34:30:a9:1f:ab:a0:b7:74:f8:db:fd:
23:c7:6e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:44 2026 by rpki-client