Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: AogBJwehQ+Je3XHaZO4J3fhSPmqpVwJJ+Vru5RPNECU=
Subject key identifier: 42:15:C3:7A:75:89:71:A9:8B:E8:D6:0F:A5:1B:B7:D0:E6:0E:BF:B7
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019D9A06BE8879479B8F7C9F9FCF190FF8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 12B2
Signing time: Fri 17 Apr 2026 06:00:26 +0000
Manifest this update: Fri 17 Apr 2026 06:00:26 +0000
Manifest next update: Sat 18 Apr 2026 06:00:26 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: GGBzmqOq3ozyPgs5Hq/wBHU2NJtITABuW0Jb5RWFSCI=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:be:88:79:47:9b:8f:7c:9f:9f:cf:19:0f:f8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Apr 17 06:00:26 2026 GMT
Not After : Apr 18 06:00:26 2026 GMT
Subject: CN=4215c37a758971a98be8d60fa51bb7d0e60ebfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:85:a0:7d:68:1c:62:5d:4f:b6:da:c7:43:
8c:75:ca:21:c3:12:95:5a:f0:fb:47:22:5f:9f:68:
05:90:4e:3a:a8:de:cc:25:ca:86:af:70:57:c9:92:
a8:6a:8e:04:28:b1:1c:57:ee:9b:ef:11:b0:49:5f:
f7:b5:7c:1c:b7:24:a6:b8:20:ee:99:0c:ce:2c:17:
19:a7:0b:25:c8:bc:c7:7a:5b:53:c7:6c:e0:d1:d5:
6f:b5:16:18:e1:9e:7c:9d:45:a2:ff:e2:8b:0e:d9:
90:f6:46:ae:d9:e5:2d:12:fb:76:a2:1e:26:4c:6c:
ea:db:a1:08:e2:b8:c0:a5:04:7a:29:d8:aa:4e:66:
5d:69:16:64:1e:51:74:5e:ba:66:c8:be:85:20:0f:
41:6f:14:7d:29:91:d4:64:7b:f0:7f:62:40:90:eb:
a1:42:f0:5c:f0:e2:cc:a7:e4:9b:10:99:a1:73:49:
5c:fb:7d:ac:2f:c0:d2:42:c6:d4:4f:fb:86:70:46:
ca:9d:f2:a2:79:67:99:15:df:bd:e8:72:34:30:3a:
89:dc:ea:ad:70:77:6e:a0:ed:2c:da:22:23:22:f2:
37:49:2a:ef:bf:97:7a:9a:49:21:9b:0b:43:dc:94:
0f:14:6e:45:7a:62:a1:c1:cd:29:b3:31:68:e1:28:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:C3:7A:75:89:71:A9:8B:E8:D6:0F:A5:1B:B7:D0:E6:0E:BF:B7
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:a0:a5:7b:fd:f4:f4:83:c3:1f:7b:3d:6b:fc:4d:20:6e:
35:c3:b0:16:64:e2:00:c2:70:2c:41:98:a8:82:90:8e:3e:8a:
08:d8:b4:9d:f7:69:76:48:c2:28:21:3f:e3:72:00:34:4a:61:
aa:90:22:dc:9f:e0:2b:22:8d:39:49:37:10:16:59:a4:37:9e:
ac:c2:05:cc:6f:1e:a2:6c:e2:aa:a0:e0:39:3e:77:d0:3d:0f:
66:12:0a:26:9a:d0:35:b4:3f:c5:aa:98:f1:8f:3b:24:f4:7b:
cb:98:b2:36:59:3a:f6:9b:87:94:33:f5:18:30:65:6f:5b:42:
5e:a2:e2:c6:de:66:0a:2d:20:16:46:02:ba:65:8d:be:8d:f1:
6d:0f:2f:1c:7c:1e:ef:27:c3:ac:65:d7:36:6b:de:74:c0:f9:
1e:f6:d8:51:3f:8c:e3:b0:fd:cc:e7:c9:6b:52:60:90:d8:9c:
d7:32:ba:25:52:57:20:d8:17:01:2a:99:f9:93:06:74:7f:3c:
46:5d:3c:7b:c9:98:cc:b3:85:db:ce:a0:2c:e9:5d:40:57:b3:
4f:fa:2a:59:ef:5b:1e:07:96:b8:d0:42:c7:27:46:81:a3:b7:
e4:e2:cc:11:a9:3a:a4:d5:f4:9b:83:24:64:9b:3e:35:72:af:
42:f0:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:21 2026 by rpki-client