Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json)
Hash identifier: 9N4xs/eX1vOxNGcDddRoS8By9CwEjLkG/9XAwmc6hbs=
Subject key identifier: A3:04:6D:09:71:61:69:57:A9:80:6E:DF:1B:6F:A6:7F:48:D8:E1:AB
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial: 019D98F48B4A69CCD752F2A91253D83AE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: 5zhW36lGyfogiaElUfbWbhXt_NE.roa (hash: +j+wJnENL0rL/JlQ6DSpZDDPY7E8b83UH4Sgu3v056w=)
2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: DbHTWucto2bQcicxWhz+Z9e/jYfRYzJuleIW5q2k43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8b:4a:69:cc:d7:52:f2:a9:12:53:d8:3a:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=a3046d0971616957a9806edf1b6fa67f48d8e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:d3:c0:5c:8e:20:87:ba:21:49:dc:e3:5c:
63:e7:e6:1c:11:e9:5c:1f:24:66:33:94:60:ce:9b:
60:bd:e6:d2:75:cf:4b:cc:8f:5d:9d:12:a6:37:73:
11:86:c9:3e:1d:e4:67:d7:f2:32:a2:2e:7d:e6:aa:
49:76:3d:6d:cc:35:46:09:aa:5c:7b:8f:af:15:d0:
b9:d0:55:a4:1c:df:69:2c:42:d8:ae:24:55:87:19:
de:aa:9f:30:8d:d1:1e:a3:80:c7:a8:4a:86:e8:68:
2a:3f:33:d0:47:d9:50:55:8a:a5:ed:83:dd:d7:82:
55:e5:f2:21:af:93:34:21:a4:39:48:d4:1d:28:38:
33:1f:29:58:58:b3:c7:10:00:fb:d6:0d:7d:0e:33:
b6:fd:aa:47:a7:a8:f9:42:91:77:c3:5d:59:56:08:
37:fb:60:75:b5:d3:01:eb:35:76:1b:6c:7e:7f:96:
3b:7a:a4:fa:40:db:e2:8e:86:a5:5a:b6:8c:56:89:
2b:63:95:30:2f:bb:9d:06:77:6e:ea:73:43:50:19:
93:83:8c:1e:b1:53:15:13:1c:0f:61:2a:17:7a:37:
13:91:69:f2:0d:af:25:05:9d:0d:d0:53:85:ed:f6:
16:a1:3a:31:d7:64:51:ed:1d:b1:41:ac:64:8f:e5:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:6D:09:71:61:69:57:A9:80:6E:DF:1B:6F:A6:7F:48:D8:E1:AB
X509v3 Authority Key Identifier:
keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bc:4e:ca:b6:f5:61:69:d1:c7:19:1b:c3:d1:d4:a9:17:69:
b5:39:94:19:17:d3:89:fc:6e:cc:57:46:03:6b:f1:72:e6:28:
c9:36:19:2b:43:37:c6:bf:ec:7d:2f:f2:ce:f5:c7:bf:5d:00:
3d:29:bd:7e:68:d3:8f:69:e4:11:15:11:33:ef:19:cf:3a:a0:
df:5b:88:43:04:08:6b:59:85:92:7e:64:25:4a:08:5b:1a:a6:
e9:a8:cb:98:00:a8:95:40:26:9e:44:8b:51:09:93:f6:a9:b8:
67:2c:a2:21:16:c8:be:ee:49:15:e4:e1:0f:98:c3:5a:ee:bf:
f2:89:ae:27:96:de:b7:7b:91:ed:13:d4:03:73:9d:01:78:2e:
36:39:68:46:b7:95:e2:b4:f8:e9:eb:6a:c0:96:6f:ea:d3:7d:
62:a5:55:50:b8:9a:6d:4c:40:b6:87:ba:d9:3f:40:27:9e:c0:
a4:ea:bd:bf:dc:4d:e6:56:e6:8d:85:9f:48:87:0f:cc:e1:ba:
d6:7a:41:26:b4:e0:cc:e6:67:aa:16:02:f8:47:d3:50:dd:b3:
8b:64:cf:8f:2f:3d:8d:c9:ed:f0:ee:1d:d2:7d:ab:30:cb:0b:
bb:a0:97:f8:4d:a4:0e:21:ec:e7:20:b9:54:3a:69:6b:98:29:
12:b1:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:38 2026 by rpki-client