Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File: ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier: mbL7Dchs2MkHRHvzbtoCcFJxiZl6DZdF85n1N1oq/Eo=
Subject key identifier: 2C:61:EF:DF:F1:76:C8:71:6B:69:0F:A1:30:06:B9:F8:55:DA:87:E1
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 019D9AAC3AC15A82E10C2D80283B71694D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number: 06B8
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: QdViC720LUGk8rbETFc7icn6Tx4.roa (hash: wxpHqs3D6Qy6qVLUeFjXp0nQiZFcnT7PBeNSBBjzhuM=)
2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: WtVGp7bekhaOWi0zwgG0Y+0jfdfy2+3qS+S05YoIEhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3a:c1:5a:82:e1:0c:2d:80:28:3b:71:69:4d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=2c61efdff176c8716b690fa13006b9f855da87e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:29:03:c8:ef:d1:cf:51:9a:e6:27:23:73:
4f:4b:2c:e7:e4:f4:79:85:3a:59:12:26:b4:48:d1:
8a:c3:61:49:1b:68:1f:54:b1:e7:c7:74:1b:78:fb:
e0:3e:0a:0d:2b:14:43:0d:8e:2e:7b:5a:0a:11:70:
a6:b5:ff:0b:1d:a9:40:81:40:8c:77:7a:0c:e7:94:
7d:91:37:e0:83:bb:2b:23:54:ba:eb:ad:c5:62:47:
ca:ad:3f:2c:41:45:62:85:94:4a:3d:ce:22:ca:e1:
ac:04:7d:41:5a:c6:f0:c8:d6:52:98:68:6e:de:33:
b5:c3:08:74:d3:11:5a:4c:53:43:78:6f:92:2c:8c:
97:db:e3:11:c3:67:3b:fb:08:51:5a:94:25:f1:bb:
d2:f3:c2:21:7c:09:e7:8d:8d:b6:92:2a:ad:60:fb:
40:31:5d:22:07:25:a1:8c:fc:bd:89:4d:ab:c9:ee:
ce:34:a3:81:51:8d:eb:5b:9d:8d:ed:c9:fb:7b:83:
83:30:0c:49:5f:76:74:eb:5c:71:39:b0:af:cf:94:
97:91:10:e4:2c:2e:76:9b:9f:c7:ae:4a:20:bd:e4:
c1:97:1d:8e:30:e1:97:6c:83:0b:77:cb:4a:4c:c5:
db:fb:27:b7:82:22:ff:99:3d:a6:c7:41:ee:3b:20:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:EF:DF:F1:76:C8:71:6B:69:0F:A1:30:06:B9:F8:55:DA:87:E1
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:62:53:d5:a3:0f:74:5b:1d:52:62:b5:8f:76:2d:f2:a0:
46:32:91:d9:e2:fa:68:37:3d:fa:f6:ad:29:ea:72:14:45:80:
bf:cc:8a:57:25:88:0b:4a:ca:de:07:d4:f3:22:23:70:05:79:
b6:2b:a9:00:29:96:08:4e:43:b5:7f:5a:a6:37:96:fa:e8:2d:
48:11:45:bb:c7:21:6f:00:39:2e:eb:83:a7:83:2f:4a:b0:08:
eb:80:fd:ab:a4:41:b6:89:13:f9:4b:a0:73:4a:1c:1d:c1:cb:
f9:cf:af:0d:68:5b:72:78:af:09:f4:f1:14:23:45:34:b8:e8:
ee:00:9b:59:28:36:80:05:31:89:28:73:26:2d:43:44:70:8d:
7f:21:6d:64:3b:4d:f1:f6:f2:f8:3f:f3:d0:94:df:62:6a:41:
be:1f:18:14:1e:1e:5e:a6:15:72:46:55:7f:ff:f6:c7:51:13:
c9:28:28:40:11:60:2e:d8:af:dc:31:1e:a5:0e:f2:d5:39:50:
41:cc:5d:6d:7d:21:71:45:cb:42:3b:04:f8:96:61:85:b3:32:
8e:7c:bb:97:c1:68:ea:1a:46:9b:25:de:b3:50:d1:a2:fc:3a:
dd:ef:99:3b:1c:f8:f9:b9:d0:81:d0:9a:3b:15:88:ec:3d:a6:
4e:13:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:49 2026 by rpki-client