Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: GciGLzeWCO66QUYzGXIeCPBd+F5MHvk8a0jhKgZQ/X4=
Subject key identifier: B7:03:B0:66:BB:10:7A:43:73:86:E2:75:C7:6F:1D:29:6C:1F:08:22
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019D99997A1FB5813FE73D0985029053412B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: pg1HjzWpqbyUO6tH5169bwCahEQ3RyY9pticQTQyFcc=)
2: XXKVsIY0HbIJymCv56HgZpurwFA.roa (hash: Sk/E2nAzU4UxwMsd952VhcruaPuVHKtKy3ii+1Myr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7a:1f:b5:81:3f:e7:3d:09:85:02:90:53:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=b703b066bb107a437386e275c76f1d296c1f0822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:a2:06:31:a8:bc:bb:a6:4e:74:f9:0f:a1:
19:9c:23:84:0f:79:51:57:38:31:6f:d6:21:ad:58:
3e:d4:3c:12:ac:fc:50:70:71:65:96:9c:c9:e9:d7:
ba:ae:6e:f5:42:95:13:0e:d7:58:02:88:44:a4:86:
d2:2a:40:8b:1a:7a:e6:83:9e:ec:5c:fa:c4:88:47:
4c:61:a5:f4:1c:93:ef:7a:11:f7:53:ff:3a:7a:c8:
c0:7c:69:8b:bf:58:db:cf:f6:36:8c:c3:19:21:ea:
58:cf:51:49:c3:71:33:ac:a5:44:78:f7:ba:a2:d4:
a9:16:71:d4:3f:bd:e1:3d:9e:83:5f:a3:f5:67:e0:
18:72:23:74:4e:c7:7b:3f:eb:6b:79:65:1c:a4:3c:
bd:24:bc:7b:1e:ec:61:cd:84:d0:04:a1:d2:51:d9:
de:83:6f:eb:47:8d:5f:0f:c9:5f:81:68:47:c7:1f:
d1:70:4e:bb:39:c9:08:26:1a:cf:51:a0:c6:90:58:
8e:47:55:11:15:69:14:5f:29:88:da:c2:ee:5f:ef:
68:a1:cd:ef:22:0c:b2:0d:99:2b:9f:24:de:b9:1f:
dc:a8:22:09:57:c1:68:8f:3f:66:ac:39:d4:41:28:
43:28:fa:62:72:c9:12:eb:5d:a8:b3:ae:a2:83:79:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:B0:66:BB:10:7A:43:73:86:E2:75:C7:6F:1D:29:6C:1F:08:22
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bb:45:9a:7b:06:28:d7:3e:a3:ff:b6:29:bc:f3:9f:c4:56:
6d:8f:cb:2f:1b:90:df:dd:0a:36:1b:ff:4e:6c:df:54:9b:fd:
81:bd:c9:8a:c7:40:92:d3:8d:48:09:50:35:ca:92:eb:99:ef:
70:6c:7c:81:92:a1:9b:c7:3b:1b:f8:67:fc:0b:48:65:a0:63:
b7:99:e2:d8:d9:ab:ad:21:e4:4f:08:42:0a:e9:73:fe:c4:f8:
05:ff:f2:a6:aa:b0:30:86:cc:c8:01:8f:40:d2:bb:d4:e1:1c:
34:d2:da:76:68:d8:0a:a5:3f:e6:9e:8b:82:67:93:40:82:01:
ff:cd:b1:a9:ff:f6:6c:95:e5:ed:ff:a4:8d:ec:da:04:bc:80:
30:b1:71:5e:16:3c:fb:2c:9e:cc:e4:96:7b:a8:52:f2:00:2d:
32:e4:98:88:30:63:53:6e:7b:5b:00:02:14:1c:50:63:94:9f:
49:2f:59:64:b3:8c:b1:38:4c:97:61:f1:36:c7:bb:db:fa:df:
ef:79:b2:0c:2d:e4:f9:00:2a:57:a8:af:22:63:88:25:38:6a:
3d:59:b6:c7:98:e5:14:61:a6:8f:e9:cc:f1:a5:24:61:7d:53:
4c:71:89:69:93:2b:86:ef:0f:eb:3f:dc:21:70:8a:e0:6a:71:
c3:d2:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:55 2026 by rpki-client