Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: I8z/KjNl4y6p5X4jm/Ca3cUsgKwK+1qR2Ml1EEAE2wY=
Subject key identifier: 22:BE:95:B3:49:08:79:2A:02:8C:24:AA:09:65:5B:12:41:2A:0B:94
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019DA3E69C1CB38A29AF3E16170295B0753E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 17C7
Signing time: Sun 19 Apr 2026 04:01:32 +0000
Manifest this update: Sun 19 Apr 2026 04:01:32 +0000
Manifest next update: Mon 20 Apr 2026 04:01:32 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: ApiZPeZSQBflzZwqJVY9AiKnQ4KkZ0mC5AztLEne7dI=)
2: mImUBsIy_K7hP2R4qNRN0dtJq4M.roa (hash: RhFRQt0PkCizfyNCWeuFtu6GmF01B1uaXSkERKXxJrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:9c:1c:b3:8a:29:af:3e:16:17:02:95:b0:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Apr 19 04:01:32 2026 GMT
Not After : Apr 20 04:01:32 2026 GMT
Subject: CN=22be95b34908792a028c24aa09655b12412a0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:e9:20:c2:61:79:3e:6c:dd:5b:9f:88:75:
54:9e:5c:83:0a:28:3f:09:c3:8e:0d:94:fc:70:79:
1a:b4:8c:67:6e:be:83:3e:61:c5:87:9c:53:9e:69:
5b:09:52:83:2d:e5:8d:51:cb:23:ff:ed:70:ea:18:
69:99:3e:7e:67:44:75:fa:7f:9e:57:52:a2:09:ae:
e4:fa:00:ce:90:4b:53:99:fc:19:49:ef:61:de:d4:
e8:b4:a6:9f:6d:43:40:04:a1:8b:a3:a9:73:fe:fa:
3f:a3:49:41:77:ff:c6:d0:3d:aa:34:44:d3:50:d0:
1b:0b:2c:ae:2a:44:3d:85:53:54:72:c3:08:73:0d:
94:dd:fc:9d:c4:6b:f6:50:d9:54:84:61:a3:e7:8c:
f2:12:39:d1:80:3a:94:86:4c:7f:98:6b:1e:ad:cd:
4b:70:38:03:2e:5f:3e:e3:2b:1e:c1:a3:a9:3d:3b:
d9:18:1d:a8:d7:5e:d6:fe:6f:d0:da:bf:50:05:81:
f4:51:6c:58:8c:5f:7f:37:60:f5:41:df:c0:b9:36:
13:14:e9:ea:1b:3f:30:9b:2a:e6:f7:e6:bb:46:7e:
c5:cf:38:58:70:00:96:dc:ae:f6:68:4b:64:d0:95:
40:d9:63:33:75:bb:11:c2:43:02:ca:3b:9b:bc:b4:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:95:B3:49:08:79:2A:02:8C:24:AA:09:65:5B:12:41:2A:0B:94
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f5:73:4e:58:08:b6:9f:ca:b9:a7:5f:80:e3:9d:50:af:3d:
4c:0f:9f:cd:43:85:fd:e8:bb:b8:86:0a:be:9d:50:e5:e0:49:
82:24:ac:ba:4b:43:aa:a1:50:8f:45:09:45:ae:4f:12:94:ab:
21:ae:8b:a7:ef:cb:13:02:68:73:0a:62:46:33:8a:9d:54:47:
3c:eb:73:d9:d6:dd:56:31:ff:a9:d8:2c:ec:e3:96:f8:b6:b2:
7a:7b:90:80:5e:bf:6a:42:98:af:28:97:ad:55:3b:c2:22:ad:
5b:aa:b0:81:af:d2:45:b1:76:6b:ca:66:79:1a:1c:16:9a:cd:
75:9d:b3:ef:a4:33:d6:6d:08:35:d0:b2:76:75:a0:65:cf:c3:
90:d4:d9:5a:0f:0b:46:c8:a5:81:9b:a3:38:b2:2a:5b:f3:14:
38:48:c6:01:c4:3f:57:e8:d9:90:60:8b:a6:59:e0:9b:d6:d6:
5f:ff:98:79:ec:58:20:87:e5:a6:23:23:ea:ee:0c:27:20:e2:
28:49:a7:d9:30:da:2c:92:3a:d7:1b:98:0e:ad:bf:49:b6:eb:
7a:8d:f0:77:7d:a3:6b:04:19:59:8b:0e:35:29:53:20:f2:a6:
3d:45:f9:8d:e4:5b:58:f1:55:fc:7f:01:b8:9f:52:e7:06:65:
18:4e:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:53 2026 by rpki-client