Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: HfVaj1tZKkkopAHd3srqZyzrWn8vNONRHDDjiymoqRE=
Subject key identifier: 0C:CD:FA:C4:A4:46:9B:E9:4F:BD:96:4E:03:B4:8B:0F:99:98:1E:7C
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 019DA3E6E496228F41D605B741CFFD99731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0A6C
Signing time: Sun 19 Apr 2026 04:01:51 +0000
Manifest this update: Sun 19 Apr 2026 04:01:51 +0000
Manifest next update: Mon 20 Apr 2026 04:01:51 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: LUp47ODWFsxKIr7u8n6f97mfTDAYnthSMs9OS117fBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e4:96:22:8f:41:d6:05:b7:41:cf:fd:99:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Apr 19 04:01:51 2026 GMT
Not After : Apr 20 04:01:51 2026 GMT
Subject: CN=0ccdfac4a4469be94fbd964e03b48b0f99981e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:d7:aa:df:5f:bf:2e:be:50:28:50:95:cb:
e5:2f:82:6d:09:4a:fd:ce:1f:d2:98:22:8c:65:6d:
c2:b4:27:46:cd:64:cf:cf:05:f2:d6:e7:82:61:a8:
fb:5e:69:a1:e0:09:23:a4:b4:b5:48:7d:56:a7:81:
82:9f:a2:c8:30:bc:e6:75:11:75:ca:b4:9c:cf:c0:
9b:d7:38:04:48:1f:0b:c9:ce:5f:d4:9d:04:61:54:
1a:8f:26:b8:33:48:a9:43:69:08:97:90:3d:18:a2:
e1:2c:c5:b1:5f:34:e7:71:e2:c4:85:cb:4b:c9:c4:
1c:c9:10:53:7d:df:ea:88:f7:4c:93:2e:63:ac:7e:
8a:3c:30:b6:cf:5c:3f:56:5e:0e:68:3e:d5:5d:94:
a0:0b:13:71:41:7f:44:d5:79:a6:cf:20:b0:f7:a9:
18:d4:ab:ee:41:bc:a1:9f:2a:47:de:b5:91:b5:74:
bc:f6:2f:ae:77:0c:5e:d2:fe:91:3d:7c:20:ec:23:
8c:ac:5c:64:98:f8:14:91:64:1c:60:e4:aa:48:1f:
7c:51:18:d4:ae:b3:c7:d8:dd:18:d3:02:0d:6b:7d:
74:76:65:17:46:e7:f1:24:fc:d7:67:2c:7d:2b:72:
0d:dd:d7:84:a6:d8:97:cc:58:06:9b:b9:fe:6c:91:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CD:FA:C4:A4:46:9B:E9:4F:BD:96:4E:03:B4:8B:0F:99:98:1E:7C
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:aa:ee:ca:2a:54:c5:0e:df:1a:9c:31:53:d4:17:36:cc:
e2:89:20:73:9f:47:cc:78:1c:c5:15:41:6f:5a:66:ec:a2:e4:
df:00:87:9d:2f:31:0a:0e:10:41:a0:b2:9a:b6:55:67:3a:ca:
ca:1f:5f:a9:0a:97:70:8a:51:c8:74:16:63:27:f3:ed:95:c0:
08:b1:be:38:f8:ab:dc:64:bc:53:23:c6:e1:c3:cd:ad:63:e3:
32:96:0c:a3:fe:32:b3:7d:7f:59:68:de:1c:cc:73:79:01:71:
b1:94:f3:57:ff:04:e7:83:af:f4:c7:04:2f:02:d3:e2:be:9b:
c9:89:28:3a:67:b6:e1:15:ba:30:bf:1e:4f:40:00:58:9c:80:
f0:2f:f4:fa:b5:88:f3:d7:c8:08:3e:17:64:25:46:6d:83:e4:
aa:95:9a:5f:e5:d7:4e:a1:bb:9f:42:dd:71:2a:15:79:d5:85:
38:df:99:00:de:b3:4b:cc:c5:c2:c5:40:a1:d5:aa:dc:a1:a5:
04:0c:4d:b2:a3:d5:c3:21:58:1a:c7:86:c2:41:cd:54:aa:f5:
bb:2e:72:18:5b:2a:78:f0:b5:b0:02:06:78:0f:23:a3:6d:84:
b6:73:f0:0c:48:c0:b2:42:11:20:09:44:6b:c6:2a:bc:db:1e:
89:5c:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:43 2026 by rpki-client