Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: xhSd2F580bO3kwI3XUP8Lzg5kz+wzBIetk1R77y8CCQ=
Subject key identifier: 23:63:35:FE:71:D0:4C:D6:06:89:25:BF:F4:D2:A1:C5:6E:97:23:64
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 019D9850A8FC2C455841AACA6825BAFBC9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 08D6
Signing time: Thu 16 Apr 2026 22:01:56 +0000
Manifest this update: Thu 16 Apr 2026 22:01:56 +0000
Manifest next update: Fri 17 Apr 2026 22:01:56 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: uX6vzHqOVCUWQkGPEI5oCHnnhkPItizLYjD8X0vPcZk=)
2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a8:fc:2c:45:58:41:aa:ca:68:25:ba:fb:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Apr 16 22:01:56 2026 GMT
Not After : Apr 17 22:01:56 2026 GMT
Subject: CN=236335fe71d04cd6068925bff4d2a1c56e972364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:00:6a:2a:94:c8:f5:e0:26:85:dc:55:6a:
f2:ea:94:01:74:1b:ab:c5:20:0f:f1:40:ac:46:37:
1c:41:33:d4:89:18:6a:eb:e8:41:90:10:b5:b9:8a:
b5:f9:9b:d3:22:ff:b0:08:ef:78:6f:33:c0:4a:b9:
04:a3:5f:11:55:5f:62:29:3e:5c:95:9f:a9:3e:8b:
df:e9:86:b3:4a:54:fc:cf:28:3f:b1:a6:7c:6e:17:
7e:eb:6f:c2:5a:d6:c1:5e:90:a6:36:48:e2:36:72:
3a:b9:ac:07:90:5b:1e:46:e0:32:9f:41:f5:53:b7:
c1:c5:c3:e1:da:4f:d8:f6:71:dc:3a:cc:d0:79:4f:
f2:19:bd:c5:2e:f6:40:bd:ae:49:97:35:4c:9a:6b:
be:8f:19:52:ae:8e:a0:d9:01:b0:df:7e:a3:df:9a:
f2:83:d6:8d:2e:bd:0e:03:6f:96:b7:f3:12:df:f7:
08:03:8c:76:8d:35:0e:c0:d9:26:5e:5d:d8:62:b3:
da:a9:59:0c:b0:53:59:b7:73:bb:77:07:63:77:d8:
6f:6e:56:93:c3:4a:85:65:0b:8c:a3:61:e2:66:e6:
25:8a:37:de:32:8d:25:9b:bc:36:04:78:c0:79:d1:
25:c6:5a:cf:9e:97:a9:dc:d8:c7:4c:14:2f:10:cf:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:35:FE:71:D0:4C:D6:06:89:25:BF:F4:D2:A1:C5:6E:97:23:64
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a4:cb:34:a7:f7:90:6a:aa:ba:0f:ad:5c:88:ac:fa:b0:3e:
3a:2f:35:59:ed:55:6b:54:6b:93:63:9b:e2:61:fd:03:a5:33:
20:68:4a:30:27:f1:3f:a1:21:ab:19:fd:8c:52:ca:e2:bc:20:
ce:87:0d:2a:b4:d7:b9:65:ca:20:5c:aa:8a:18:0c:19:a0:84:
05:11:df:01:95:18:6b:61:7e:07:66:ce:5b:42:0e:cc:8f:4c:
27:8e:21:b6:25:65:39:d2:80:77:52:f2:5f:29:8d:e3:61:7f:
bf:aa:b5:b4:fa:5e:0c:3a:a8:8d:2d:ad:c4:6f:f7:eb:d4:21:
d3:a0:40:44:a6:a8:be:c1:74:bf:cf:a9:6c:07:1d:ed:f1:4a:
aa:28:f1:f0:67:0c:67:4a:e5:ac:86:d0:a2:23:16:e0:3c:15:
e0:27:6e:b9:60:9f:45:ee:c9:d3:2b:ed:70:e6:ad:d4:81:a9:
93:46:ca:b9:2d:6d:06:a0:78:2a:c0:e8:50:7e:94:c2:8e:26:
74:74:f4:99:19:26:59:76:27:01:f6:3a:46:96:ac:9a:b9:cb:
cf:74:22:28:21:88:f7:ec:a6:3d:c6:55:bb:32:01:ad:89:9a:
7d:5d:92:57:18:81:36:da:e1:d6:e2:4b:75:19:3a:c1:9f:27:
fd:e2:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:20 2026 by rpki-client