Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: gCaDBqpHEJ/w6s+ANkpjUwgof1eCh6leS+QN01R4oqY=
Subject key identifier: AC:19:BD:1F:E3:72:A1:3A:7B:92:70:83:CF:28:44:87:F3:7D:3C:57
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 019D97E1FD66A8D206A2E2EE7C7690B89FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 0BB3
Signing time: Thu 16 Apr 2026 20:01:03 +0000
Manifest this update: Thu 16 Apr 2026 20:01:03 +0000
Manifest next update: Fri 17 Apr 2026 20:01:03 +0000
Files and hashes: 1: dOj9E6FS6DEoaUcEFe4gpHgcFuo.roa (hash: dnfO9626LH91ChjEi8apYPGETS9gQAIqmrEgki3RmE4=)
2: s8k12EMWos9WpllXttebevgRpwc.crl (hash: x9oBLwdxFL+C4PNrht5OL8UqWREzh7/DUZwlrN+AFCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fd:66:a8:d2:06:a2:e2:ee:7c:76:90:b8:9f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Apr 16 20:01:03 2026 GMT
Not After : Apr 17 20:01:03 2026 GMT
Subject: CN=ac19bd1fe372a13a7b927083cf284487f37d3c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:b6:47:2b:7a:1b:69:6d:c0:0f:57:e5:85:
54:14:56:df:b6:42:a8:96:95:7b:ac:c1:74:3c:7f:
2b:96:cb:c3:17:39:d5:49:20:43:d0:5e:02:2e:50:
09:3c:46:cd:89:74:f5:fd:83:60:02:25:2c:8d:d2:
a9:74:52:8d:7e:d6:54:a8:8e:5d:d0:64:85:40:dc:
94:05:71:83:88:85:c6:97:9e:7d:44:1a:50:6a:b9:
7b:1a:91:7c:8e:0d:c2:8f:e4:91:0f:83:68:7d:a2:
b7:e2:cc:1b:be:06:8f:bf:3b:20:fa:64:39:48:02:
16:7d:4e:35:dd:ca:87:57:fa:c0:54:5c:07:91:64:
a7:de:be:25:e8:ea:44:f4:60:03:ca:9c:f9:1d:42:
a5:d8:b7:e4:f3:01:d2:52:b5:ae:b9:99:5d:9b:0b:
e3:75:d9:17:5f:ad:8a:b9:3e:3a:b6:a3:53:b9:f4:
de:64:e4:ac:f2:35:29:49:aa:49:b3:f5:d3:19:34:
fc:71:81:7d:20:04:72:3a:4e:b8:29:cc:c2:4f:28:
67:3a:ef:2c:9a:03:ba:83:34:b2:60:17:60:13:a1:
ce:11:07:1f:85:06:82:8e:8c:18:32:d0:41:c8:5e:
f2:03:44:b6:38:86:ff:4c:ee:2d:d3:1b:cf:21:a2:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:BD:1F:E3:72:A1:3A:7B:92:70:83:CF:28:44:87:F3:7D:3C:57
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:20:d4:a7:c1:a2:55:7f:91:63:79:fb:8c:6a:31:5c:21:57:
24:c1:82:30:32:a3:59:4c:fc:45:a3:63:82:e4:71:83:c1:fa:
3f:c8:e6:20:c7:a4:08:c9:de:94:f8:52:f9:45:bd:fb:7d:5d:
ac:00:17:25:9f:f1:9a:b1:31:42:c5:ba:a8:7e:39:59:a6:15:
3f:66:1c:f8:a1:6a:d6:f4:92:ec:12:c5:7c:84:2b:85:eb:c9:
b6:af:d7:30:6c:d1:e6:3a:ad:cb:51:16:36:cf:6a:b2:a3:8b:
d3:66:57:e1:8e:ac:8c:a1:a7:51:17:7e:58:48:fa:bd:f5:30:
5b:e2:48:fc:cf:ea:b1:d2:7f:ba:f3:49:9c:f4:aa:c9:9e:e8:
f7:e5:e4:a4:e9:3b:c1:46:89:e3:7a:01:e8:6d:3a:3f:21:b6:
32:4d:b5:b1:ab:64:c4:b7:34:aa:72:63:21:bf:e6:90:17:2a:
66:77:a6:78:c5:cc:02:76:51:dc:e0:88:0f:df:3c:15:dc:c3:
ee:14:cc:96:d5:29:8b:a9:3a:62:ee:18:fb:10:94:3c:11:4a:
d4:0c:05:fe:b6:75:54:25:dd:f1:c7:7d:7d:95:3d:83:e8:6b:
36:e5:a0:66:f2:7e:8a:68:ec:3a:a4:ec:4d:f8:22:23:c4:c9:
fe:1b:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:41 2026 by rpki-client