Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: 163nsGF/H1aXeN1VK+ETq+1uQN83InTwG7GYoDANXmQ=
Subject key identifier: 24:8C:87:BB:7C:27:4F:6D:91:C0:83:9B:E8:02:97:70:2B:85:E0:A4
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019D98F405C7DC1F2D2C9DE76C574CCA5C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: 23rzZqI3kLBgv76H+4gLjAMLccAPcbEt3f/bmbQpIUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:05:c7:dc:1f:2d:2c:9d:e7:6c:57:4c:ca:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=248c87bb7c274f6d91c0839be80297702b85e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:7b:0f:83:2d:54:a4:95:e6:64:31:55:16:
bb:86:1a:5f:4d:5a:e6:01:b5:d8:fe:61:dc:2c:6b:
fb:ef:19:d9:41:b8:31:98:a4:76:24:e0:56:62:d1:
cc:96:4a:4d:f4:10:34:84:e0:3c:97:c6:67:ca:0a:
fe:71:2d:26:82:f6:55:20:9d:87:c2:97:0e:e2:df:
e8:75:49:d5:5f:92:a7:d2:26:0c:41:9c:3e:11:2d:
c0:77:60:e8:a3:52:ad:b0:a1:53:18:a0:b4:04:6b:
f4:05:0a:43:89:6e:1a:8e:00:dc:d5:34:84:53:cc:
79:75:3a:7c:90:13:83:3c:f8:e4:6d:ad:eb:ed:f3:
34:27:3a:8d:28:e0:6d:be:38:8f:8a:de:31:bd:53:
d8:5b:2d:e3:75:9c:4f:ea:11:3c:88:c2:c8:2e:0a:
bc:3a:5a:2c:31:a1:a5:da:ad:3a:79:e2:ed:ec:61:
34:5a:e7:3d:a5:fd:21:8f:19:50:6c:bc:53:ce:6e:
39:2e:5d:cf:c8:44:88:50:ff:1d:4f:d2:c0:3e:fb:
4e:ea:9c:0e:2b:47:08:a3:a4:ca:c9:9c:c8:76:eb:
2f:97:bc:81:5b:ca:57:db:cc:6d:02:36:1b:0b:d0:
25:57:99:b0:35:8a:9e:b4:6a:21:4d:a2:cc:43:54:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:87:BB:7C:27:4F:6D:91:C0:83:9B:E8:02:97:70:2B:85:E0:A4
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:20:fb:f0:ad:50:a6:62:58:5f:3b:55:56:ff:3a:c2:c5:01:
70:d1:96:55:db:66:14:89:3a:16:d5:40:49:8c:a0:70:f3:6e:
05:42:43:e6:ac:05:dc:38:c3:20:62:8a:09:dc:36:58:11:d1:
8c:16:27:46:41:55:fd:cb:b1:d5:5d:a4:92:9a:aa:18:7a:bb:
36:cd:82:1b:87:45:4a:7e:6a:cf:d5:65:b8:6e:ba:65:75:a9:
9d:bf:db:3e:22:92:f9:02:bd:00:ac:4e:47:b7:eb:22:bb:33:
bb:88:c7:79:c4:35:c1:f8:83:f1:7c:41:63:22:a2:53:60:79:
ce:54:fc:02:1e:b2:92:df:5f:de:c8:b6:36:2e:33:59:f3:5a:
bc:54:f9:06:b7:30:32:b8:15:d4:9a:d8:d5:0a:8e:6c:2c:4f:
9e:3d:16:7e:85:9b:61:ee:97:41:4f:61:9b:27:1b:41:70:cd:
6d:75:cd:65:c0:80:22:94:d2:49:8d:4a:1e:8a:a8:98:bc:eb:
99:7e:e9:53:30:d4:cf:56:5a:c9:91:b1:4b:d6:53:fe:27:d8:
b6:4a:a0:1d:aa:7e:b7:51:03:2a:4a:db:83:df:70:46:9a:7f:
19:48:9a:84:a1:95:f7:de:65:5c:f9:c6:50:28:48:6a:cf:24:
00:cc:0c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:20 2026 by rpki-client