Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: Uv7fsmoq4Z3+0hUKSlVXCUkyS9VMxUHBWX7th8AOw3M=
Subject key identifier: 87:47:FC:0F:EA:C4:84:DF:90:B4:D8:50:51:A9:C7:6B:60:B1:08:97
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019D99990B9FA6A783D3DAC06F874B41DC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0D41
Signing time: Fri 17 Apr 2026 04:00:37 +0000
Manifest this update: Fri 17 Apr 2026 04:00:37 +0000
Manifest next update: Sat 18 Apr 2026 04:00:37 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: JwyZfYrqIIGcxxkpkLs6OUVw1E0ok+w5TQoXKp/sFek=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0b:9f:a6:a7:83:d3:da:c0:6f:87:4b:41:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Apr 17 04:00:37 2026 GMT
Not After : Apr 18 04:00:37 2026 GMT
Subject: CN=8747fc0feac484df90b4d85051a9c76b60b10897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:b5:79:c4:1b:86:4e:4a:c6:c7:95:6f:70:
db:da:56:61:ba:fc:55:e9:02:a3:e8:87:6a:de:7c:
7a:da:c1:b2:c5:96:62:6d:4f:b7:73:73:86:e4:8a:
c1:a8:91:cf:f4:67:d3:66:af:3a:9f:3d:ac:f5:c7:
cb:a0:d2:88:31:ec:57:eb:c1:25:60:b0:b8:61:3c:
fe:e4:2f:22:dd:89:03:6c:a4:60:22:b6:88:94:e6:
32:fe:95:79:59:5b:2e:b6:b4:70:31:62:a7:63:0b:
05:4a:a9:21:4f:59:2f:a4:ad:03:80:98:52:a8:e8:
94:68:6f:92:0e:c5:d1:48:f6:d2:76:6b:df:62:9e:
37:b4:33:db:0a:95:dd:5b:08:32:7a:9e:32:94:3b:
09:02:7a:e8:c4:3f:4d:2a:8c:71:3f:5a:fe:aa:13:
59:89:bd:d9:b7:e1:52:02:40:d7:9b:ee:c0:08:da:
bb:e9:c4:61:9e:50:b1:b4:87:64:1b:f3:7a:90:7a:
8d:23:85:ca:03:6e:b9:2f:74:12:ba:59:c1:33:f7:
6d:fe:31:64:e8:cb:aa:9a:14:88:67:c8:9d:0c:07:
6b:b0:a0:59:b6:2c:f1:89:26:12:e8:5c:a6:0e:7f:
8c:75:ef:ca:cc:d2:3a:d5:d4:59:21:d1:45:0b:bd:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:FC:0F:EA:C4:84:DF:90:B4:D8:50:51:A9:C7:6B:60:B1:08:97
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:10:9a:ce:f9:49:81:97:e6:31:3f:8f:19:84:2b:42:30:6d:
28:68:df:08:ff:e3:31:c5:81:4d:78:07:04:ab:e8:f9:da:d3:
81:6c:46:36:da:4a:c7:8e:4e:f1:a5:48:78:20:c3:5f:ab:7e:
74:95:fa:75:58:21:0e:88:f3:24:3a:6d:3b:e4:0e:d9:94:e1:
6c:33:61:bf:01:54:41:1d:18:8b:77:43:c9:b9:fb:db:b8:eb:
61:e2:31:47:c3:ac:6f:ab:4b:00:fd:50:42:49:1c:9e:3b:05:
47:61:ce:0c:29:a0:27:6f:9c:6f:22:2c:c0:2f:88:f6:8b:1a:
a2:a5:8d:7e:d4:53:73:4f:0b:81:48:de:fb:60:90:03:6e:7c:
ce:20:31:d6:af:f0:d4:9e:68:6e:97:19:8d:68:6c:46:6a:0e:
a8:80:b5:6b:a7:68:ac:72:6b:1e:b7:df:b9:e6:e5:c5:62:ff:
8c:bc:a2:de:20:cf:08:27:cd:e6:dc:2c:a6:b1:cc:2c:d0:07:
f3:d9:3d:d0:71:44:f1:09:b1:2e:7d:72:99:e2:b9:7c:d7:aa:
12:f2:d2:01:1b:1c:11:b7:34:05:fd:47:b7:67:60:bf:5e:83:
e9:d9:af:e4:76:8e:19:71:cb:e1:83:56:3d:69:b2:44:98:f2:
8a:10:d3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:33 2026 by rpki-client