Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: tqRGVlHOnweK2YhO4hmvYgghY54wMlo9K/Of3MI+qBw=
Subject key identifier: 55:4A:B3:C5:E5:84:34:DA:92:75:C6:83:BE:0F:40:F5:E3:C9:16:47
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019D988627F0739173BFDC1703E2FB1418A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0A40
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: JKCQUVWcN61fNkhnciwwJ1EoUF1K4gBrnohLzoz0cKg=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:27:f0:73:91:73:bf:dc:17:03:e2:fb:14:18:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=554ab3c5e58434da9275c683be0f40f5e3c91647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8b:4c:8e:1f:23:aa:18:cc:cd:c8:55:3a:53:
61:27:74:a1:01:d8:13:2f:52:be:eb:a4:55:3e:69:
36:ca:b0:1c:7b:24:c6:70:97:27:55:b3:77:15:7a:
3a:ac:01:16:3f:f0:0e:56:6a:2e:f5:26:32:64:cc:
f7:1b:22:0e:86:ee:c8:c3:f1:19:6e:f5:42:98:68:
17:37:9f:5f:70:0d:c8:16:25:3a:38:8e:53:91:73:
a9:78:53:69:33:51:c5:e3:9e:a4:aa:a0:9c:de:7e:
a2:8c:a0:d6:d5:9e:ac:b7:68:4a:68:80:64:7e:cc:
35:6b:96:06:f1:cf:67:8c:2c:a0:f7:26:04:df:ca:
2c:6f:c4:31:22:cf:55:bd:24:19:d1:ac:ca:b2:a4:
f5:03:94:6e:ca:95:12:14:c1:cf:55:52:22:9f:d7:
79:a6:ae:15:7b:5a:1f:e1:8a:a8:28:8e:4d:3e:2e:
fb:63:8e:ad:c9:9a:f2:30:5d:2c:dd:9d:0f:a6:45:
d3:a0:08:56:49:d4:ca:f6:36:62:a5:36:3d:35:84:
46:d2:7a:aa:70:21:61:2a:d5:74:20:3f:bf:c9:08:
a8:d2:02:66:bc:e0:91:51:50:73:ec:e0:1f:7d:ce:
78:5d:93:e6:86:d3:cb:dd:26:83:0c:5d:6c:5c:68:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:B3:C5:E5:84:34:DA:92:75:C6:83:BE:0F:40:F5:E3:C9:16:47
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e4:55:42:4f:12:e2:e5:a5:89:61:c2:37:a1:30:ae:c9:fe:
74:2f:06:39:fe:35:5c:40:bc:04:9d:cb:d2:29:c6:5c:9d:82:
9e:6d:7d:73:82:1f:49:19:21:57:4c:c7:eb:21:f3:5e:db:39:
a9:a9:02:98:fc:4d:bc:13:b1:7a:84:8e:e2:f3:6b:ac:45:bb:
a0:9e:eb:5a:d1:fd:31:91:5f:6f:93:92:b8:23:88:ae:5f:31:
ac:fb:99:d0:1d:27:1c:d0:34:d5:ab:73:98:b9:00:ea:be:ce:
d7:8c:c2:df:f3:59:4e:52:dd:d5:00:93:ef:1e:87:9e:cc:01:
95:11:63:45:bc:4d:eb:2d:44:6c:c0:d6:69:a3:e7:2c:1f:69:
cc:b3:0e:90:95:8f:9b:20:74:2b:09:fc:f3:20:59:24:3a:df:
f6:9b:42:96:8f:e7:91:5c:bb:a2:aa:0d:83:07:d6:b4:ed:99:
9e:5a:72:78:e1:16:c8:14:ae:3f:6b:dc:3f:9f:28:7e:20:3a:
ed:cc:9e:96:10:96:3f:e9:a9:4c:e2:1c:fb:53:07:79:2b:c9:
c2:f4:f5:97:32:b7:2d:c9:1a:81:9c:74:f9:43:47:0d:31:bf:
45:a1:89:6d:12:4c:e2:a5:16:63:78:be:d6:17:1e:9e:dd:1f:
a5:4b:f6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhifwc5Fzv9wXA+L7FBiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjYwNDE2MjMwMDIyWhcNMjYwNDE3MjMwMDIyWjAzMTEwLwYDVQQD
Eyg1NTRhYjNjNWU1ODQzNGRhOTI3NWM2ODNiZTBmNDBmNWUzYzkxNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9otMjh8jqhjMzchVOlNhJ3ShAdgT
L1K+66RVPmk2yrAceyTGcJcnVbN3FXo6rAEWP/AOVmou9SYyZMz3GyIOhu7Iw/EZ
bvVCmGgXN59fcA3IFiU6OI5TkXOpeFNpM1HF456kqqCc3n6ijKDW1Z6st2hKaIBk
fsw1a5YG8c9njCyg9yYE38osb8QxIs9VvSQZ0azKsqT1A5RuypUSFMHPVVIin9d5
pq4Ve1of4YqoKI5NPi77Y46tyZryMF0s3Z0PpkXToAhWSdTK9jZipTY9NYRG0nqq
cCFhKtV0ID+/yQio0gJmvOCRUVBz7OAffc54XZPmhtPL3SaDDF1sXGie0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVKs8XlhDTaknXGg74PQPXjyRZHMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuRVQk8S
4uWliWHCN6Ewrsn+dC8GOf41XEC8BJ3L0inGXJ2Cnm19c4IfSRkhV0zH6yHzXts5
qakCmPxNvBOxeoSO4vNrrEW7oJ7rWtH9MZFfb5OSuCOIrl8xrPuZ0B0nHNA01atz
mLkA6r7O14zC3/NZTlLd1QCT7x6HnswBlRFjRbxN6y1EbMDWaaPnLB9pzLMOkJWP
myB0Kwn88yBZJDrf9ptClo/nkVy7oqoNgwfWtO2ZnlpyeOEWyBSuP2vcP58ofiA6
7cyelhCWP+mpTOIc+1MHeSvJwvT1lzK3LckagZx0+UNHDTG/RaGJbRJM4qUWY3i+
1hcent0fpUv2bw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:14 2026 by rpki-client