Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: BYix+5JBSYId5OWnsU7pfLH4I3djbdwvrYYRYAZJztU=
Subject key identifier: 48:94:07:4B:7D:18:63:0A:92:3B:41:D4:BF:04:D8:9F:4F:7A:B5:0B
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019D992AF387C8E9760A9EB305051DD49D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 17AC
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: J9k6DREgmAcRLDfjzAUzv77NFMJ0gbwS459nXRCH7Ro=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f3:87:c8:e9:76:0a:9e:b3:05:05:1d:d4:9d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=4894074b7d18630a923b41d4bf04d89f4f7ab50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:ea:d2:65:5c:5a:d7:f8:5f:5f:50:ab:10:
bd:df:3b:32:83:db:57:c2:16:c9:45:04:f1:1e:7b:
a1:25:8b:97:74:b5:48:e9:d4:e3:1a:6c:60:40:ed:
4e:02:43:c0:41:03:a8:bc:4d:7e:77:6a:da:4a:17:
1b:05:c5:0a:2d:cd:8b:cc:e5:90:36:fa:8a:5f:97:
88:80:87:6a:b3:a1:17:44:89:ac:d0:de:46:5c:bd:
9a:ae:5f:62:45:30:1d:26:5c:d6:54:ea:0e:cd:7c:
ae:03:07:ed:50:cc:02:31:31:f9:57:b4:05:ab:ca:
b2:6e:b8:c6:b5:2b:b0:1f:63:30:e6:a6:64:7d:a6:
ca:56:ce:da:c0:7d:7a:3d:e3:80:fc:8f:55:89:23:
63:9c:ad:df:b1:26:0f:d3:56:49:3d:0a:46:0e:b4:
8b:01:c3:93:9f:2c:2b:a3:b4:c7:94:64:3c:69:3a:
ce:35:2a:e4:2a:9b:ea:6c:d9:48:0a:3a:44:8a:6f:
90:b0:6e:fd:06:17:9b:48:91:de:f3:a6:3f:35:e2:
44:7c:5a:57:96:e4:22:ba:4f:51:1c:6a:87:6f:c7:
f4:48:85:d0:8a:fe:e1:1e:1c:cd:df:b2:ae:bd:2f:
a6:02:05:56:93:7a:8a:55:eb:52:f1:a1:55:cf:a7:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:07:4B:7D:18:63:0A:92:3B:41:D4:BF:04:D8:9F:4F:7A:B5:0B
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:00:4a:6a:db:b1:7e:03:f9:71:6c:86:fc:2d:fa:dc:6d:e0:
bc:5e:a9:69:b3:c9:4f:80:df:bc:fa:f6:cc:54:43:22:d5:ae:
58:e6:88:a4:c9:f4:02:7f:05:46:f3:77:d4:61:4b:45:ef:5a:
21:96:e7:3c:f0:7a:e9:28:13:37:71:00:1c:9b:f3:ea:13:14:
40:23:1f:cf:74:3f:3d:41:e3:14:87:a7:e8:b9:b6:55:23:57:
ef:9a:45:e7:59:f2:5f:4d:82:6c:84:d0:69:87:63:fc:52:6c:
c3:7f:c5:cc:ac:1a:a3:36:01:3e:97:23:bb:46:c8:8d:93:73:
11:77:20:72:e5:21:84:e2:4b:85:3f:fd:76:87:79:26:e2:85:
cc:d7:98:15:05:84:91:12:c2:95:c0:1f:90:99:8c:f4:08:88:
9d:93:68:08:8f:e8:f9:ed:a1:d0:54:71:39:b5:99:1b:04:c0:
00:a9:1f:1d:b4:4e:0e:11:ff:4d:ca:3b:71:81:fc:20:f2:a8:
4d:63:69:18:68:64:6e:bb:32:81:49:e5:f3:61:42:b6:f3:ef:
07:7f:68:37:20:62:b7:75:8d:7e:9f:a1:61:87:05:16:de:7d:
da:8e:fd:dd:b3:3e:4e:33:6a:db:68:72:8b:08:93:71:95:a3:
d0:02:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:16 2026 by rpki-client