Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: O8g0JbFI+6B4eq3UFxLBX695fmG9Zt1Me9VfnERV9Wg=
Subject key identifier: 4F:12:1A:E7:90:97:67:37:E4:E4:A9:3D:D6:05:C3:A6:C5:7A:DB:DC
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 019D9A06AD300D05E73D794BDF6F9536297C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0719
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: 4Odoo+faMyYAHhVtsD6MPaQEKBV7p8Sdes4xzTNThGo=)
2: C9oMe1YGJS29C9D0RZNPa4l9ZGs.asa (hash: m/CMHyBpsoSrORDL0dlkFqewhiO241S8p6mdES9DKBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ad:30:0d:05:e7:3d:79:4b:df:6f:95:36:29:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=4f121ae790976737e4e4a93dd605c3a6c57adbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ce:c8:d9:a5:16:2a:b1:66:a4:55:61:6b:6c:
9c:5b:3a:a8:87:b3:d9:42:a3:0d:61:2a:72:3f:46:
2f:2b:6d:d1:5f:ea:99:37:a4:25:1e:e0:b5:3a:63:
db:43:32:40:6c:2b:f5:fb:f4:83:0b:b0:55:f4:90:
99:84:90:79:60:75:5a:2c:d8:c8:72:8e:c2:96:52:
84:aa:7b:97:aa:e1:41:7f:ca:11:a5:78:11:53:9e:
2a:18:4d:b1:f2:b1:7d:bd:83:9b:1c:f2:07:8f:7f:
de:31:28:30:20:09:ff:36:94:02:bc:57:4b:12:f1:
ec:98:57:9a:51:04:d2:51:fa:3f:73:2a:2b:51:4e:
c7:1e:97:27:93:6c:0c:d4:6a:17:17:db:20:34:4c:
54:bb:e0:69:b9:4d:e8:22:66:52:51:ed:10:e5:f9:
49:22:5a:d4:67:13:d6:c8:9f:05:15:4f:b8:b2:f7:
21:db:8a:59:49:e9:ad:c8:35:a1:4f:4c:f0:41:e7:
19:1d:84:b9:84:27:c5:76:af:0d:32:ff:77:3d:a4:
d3:af:57:62:d8:a0:66:98:81:f4:a4:82:a0:1d:90:
6d:c1:ed:f1:f7:18:b1:6f:02:95:36:0c:5b:66:6d:
5f:49:0a:5b:f9:2f:52:fa:cd:9a:fc:6a:ba:69:78:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:1A:E7:90:97:67:37:E4:E4:A9:3D:D6:05:C3:A6:C5:7A:DB:DC
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:df:ee:f2:96:a8:eb:25:90:4a:dc:8b:e6:21:18:33:7a:b9:
21:55:68:06:a9:9c:d5:40:a0:77:fe:5e:e7:92:80:11:e4:5c:
31:c4:2e:b3:81:f5:55:68:4d:df:03:f3:03:a7:ef:3d:1a:21:
e3:f1:fe:87:1c:58:c0:de:7e:75:40:22:df:a6:8f:90:3e:f6:
54:8b:75:98:c5:40:85:70:aa:95:4e:ca:ba:06:06:14:e6:ed:
b2:af:d3:5a:ad:18:38:6f:ef:49:a3:ca:6f:a1:fc:53:34:ba:
28:df:1c:0b:c0:08:dd:b2:ce:dd:46:01:47:9c:8c:de:e4:25:
bf:3e:76:83:94:7f:39:11:9d:ab:be:3e:93:d1:fb:9b:fb:b7:
b8:6e:7c:8e:72:3e:5e:38:47:b8:ea:68:df:97:38:b4:8a:d8:
7b:f9:38:87:b3:fb:ab:f3:eb:7f:6d:40:8a:ab:d6:d0:23:07:
fa:40:a8:1f:af:54:d4:23:01:94:cd:ec:5c:29:4e:a0:96:e7:
5e:0e:53:d6:f9:2f:18:4f:4c:3e:2b:d4:ad:c5:74:87:90:ad:
56:02:19:cf:98:c6:c8:75:39:43:e7:06:ac:84:2e:1b:a3:65:
17:12:5d:d2:10:22:f4:e9:e2:33:76:f4:21:ce:06:bb:b8:dd:
ec:79:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:30 2026 by rpki-client