Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: nGtsi18pdOwgzS/uq9jXsdXrUsl3CYLkV2PIK2Vaxso=
Subject key identifier: D8:F4:08:92:C5:2E:00:44:23:43:A2:77:8B:4F:6E:FC:EE:2C:62:8F
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 019D98F400F6003BE8740292FF6DD933637D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 01:00:20 +0000
Manifest this update: Fri 17 Apr 2026 01:00:20 +0000
Manifest next update: Sat 18 Apr 2026 01:00:20 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: 2ybNs/tNDTNnFDmMRXqNkEATr5WDOU5j0u4GysQbzGM=)
2: l6d-s6pGrwjzo2MVrYFXt_vj8FQ.roa (hash: GWCGfDBQXbx8zU/9pE2/fyqt5ipxe1FQBrMDGvjciQY=)
3: wNW1OJ6nNt-LJ_qt91rusWZGqUk.roa (hash: Uf/zMrnHEJKdoypvZyEP0WBvkTlQGSBhuCZb5Fsvgco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:00:f6:00:3b:e8:74:02:92:ff:6d:d9:33:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Apr 17 01:00:20 2026 GMT
Not After : Apr 18 01:00:20 2026 GMT
Subject: CN=d8f40892c52e00442343a2778b4f6efcee2c628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:42:98:27:97:ba:3a:06:a4:6a:c8:f1:66:
c1:52:33:fa:95:fc:02:ee:5f:6c:e0:ac:d9:f6:40:
43:51:4c:c0:e8:d6:82:24:d4:ea:d3:5b:7b:2b:88:
23:64:7e:0c:c5:28:06:c0:55:ff:0d:de:85:b6:c0:
69:dd:41:5f:87:b6:8d:28:95:65:97:8e:74:07:1a:
ab:c4:63:c4:ee:e1:a0:2f:f1:d6:54:d4:83:22:d2:
88:70:e2:06:95:f2:51:47:27:5d:ce:d8:16:22:87:
0a:d5:6d:16:7b:8f:78:67:14:c0:10:b6:a3:f0:3e:
c4:92:87:6f:a5:73:b2:5d:73:26:19:27:75:7e:ba:
22:a3:79:bf:c9:dd:90:c3:e8:f5:fe:51:37:ea:a1:
6c:11:e6:27:ea:96:1f:c5:15:f8:5d:21:01:aa:3e:
97:d3:2b:a5:d0:8b:e7:c7:ad:d2:29:dd:3f:20:73:
e5:20:bd:ea:94:94:22:7f:44:ec:86:e5:bd:3c:84:
c1:bb:23:2f:47:45:9a:1b:2f:85:90:10:ba:e4:19:
f1:85:3e:72:bd:b6:44:fe:10:e8:77:29:9a:db:c8:
57:56:4c:b4:d8:48:0a:f1:0c:19:f3:8b:c9:02:ea:
71:7d:58:e5:eb:18:b1:b3:25:71:82:a7:67:b7:01:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:08:92:C5:2E:00:44:23:43:A2:77:8B:4F:6E:FC:EE:2C:62:8F
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0d:0c:2e:36:50:de:7d:4f:db:7c:2d:57:e4:3c:f0:ac:9c:
a3:b9:da:1d:86:33:ee:d6:ac:a3:b1:7a:48:fd:c3:7f:88:50:
90:7f:86:e2:c1:1a:be:39:5a:e4:3d:5b:29:19:a7:5a:52:62:
53:57:3d:3c:26:e8:1d:3a:fd:95:21:e0:94:21:18:b6:f4:6a:
94:07:ad:30:da:81:49:53:ce:21:3f:c5:a9:77:00:71:03:ed:
24:f5:97:9d:75:c2:1e:b8:d6:39:e9:7a:71:ef:50:8d:f8:b0:
4f:00:40:4a:64:6d:5b:84:b5:39:76:18:d3:8d:4f:63:39:41:
99:33:df:29:34:20:9c:3f:8b:ea:4a:f3:1b:4f:0d:c7:5d:5b:
6f:f6:69:1e:e7:32:11:86:f7:f6:b0:81:8e:9c:a9:48:b0:af:
12:7d:19:7c:fb:51:b7:31:4b:29:19:bd:f7:f7:32:65:a4:40:
21:f7:8d:a8:2e:75:e3:49:9d:4b:78:0b:61:b2:b6:aa:8a:05:
03:0f:4b:cf:6a:29:b2:95:5b:68:76:d2:6d:30:ba:07:53:4b:
6a:a6:61:c2:b7:8b:b3:6d:7e:08:9b:ba:49:c6:b5:23:fe:25:
81:4a:3c:a5:26:21:76:c2:05:f2:65:98:fc:cb:d8:91:ba:99:
17:f9:78:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9AD2ADvodAKS/23ZM2N9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmJlOTgyMDYwYTQzNzM0ZDBhZDEyNmFkNDZkYTJmMzk1
YzlkZWYwHhcNMjYwNDE3MDEwMDIwWhcNMjYwNDE4MDEwMDIwWjAzMTEwLwYDVQQD
EyhkOGY0MDg5MmM1MmUwMDQ0MjM0M2EyNzc4YjRmNmVmY2VlMmM2MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgRCmCeXujoGpGrI8WbBUjP6lfwC
7l9s4KzZ9kBDUUzA6NaCJNTq01t7K4gjZH4MxSgGwFX/Dd6FtsBp3UFfh7aNKJVl
l450BxqrxGPE7uGgL/HWVNSDItKIcOIGlfJRRyddztgWIocK1W0We494ZxTAELaj
8D7EkodvpXOyXXMmGSd1froio3m/yd2Qw+j1/lE36qFsEeYn6pYfxRX4XSEBqj6X
0yul0Ivnx63SKd0/IHPlIL3qlJQif0TshuW9PITBuyMvR0WaGy+FkBC65BnxhT5y
vbZE/hDodyma28hXVky02EgK8QwZ84vJAupxfVjl6xixsyVxgqdntwFRfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj0CJLFLgBEI0Oid4tPbvzuLGKPMB8GA1UdIwQY
MBaAFPMr6YIGCkNzTQrRJq1G2i85XJ3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGIt
OTliY2JlNmQ3ZjYzLzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kYTNiMWQtN2FjZi00NTFmLWI2OGItOTliY2JlNmQ3ZjYz
LzEvOHl2cGdnWUtRM05OQ3RFbXJVYmFMemxjbmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjg0MLjZQ
3n1P23wtV+Q88Kyco7naHYYz7taso7F6SP3Df4hQkH+G4sEavjla5D1bKRmnWlJi
U1c9PCboHTr9lSHglCEYtvRqlAetMNqBSVPOIT/FqXcAcQPtJPWXnXXCHrjWOel6
ce9QjfiwTwBASmRtW4S1OXYY041PYzlBmTPfKTQgnD+L6krzG08Nx11bb/ZpHucy
EYb39rCBjpypSLCvEn0ZfPtRtzFLKRm99/cyZaRAIfeNqC5140mdS3gLYbK2qooF
Aw9Lz2opspVbaHbSbTC6B1NLaqZhwreLs21+CJu6Sca1I/4lgUo8pSYhdsIF8mWY
/MvYkbqZF/l4/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:32 2026 by rpki-client