Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: lkNd8bLKc10/0WMsdeL82z6f68FsQPoh01k1bk6P1bs=
Subject key identifier: 16:93:8C:52:60:32:98:FB:7D:A6:A1:8C:51:BA:B9:C4:A7:FA:4B:27
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 019D9AE2A08CF68445DBB0E3FA3F0AC06A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 0AE2
Signing time: Fri 17 Apr 2026 10:00:36 +0000
Manifest this update: Fri 17 Apr 2026 10:00:36 +0000
Manifest next update: Sat 18 Apr 2026 10:00:36 +0000
Files and hashes: 1: HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa (hash: rD8uKvcs46K8PbUVJgx0QG2NecMmJWf53Xg6anGyvsM=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: syrUDjbet6/CtHIyPDa4yb9vMjmhZOoxRSZeHL+5sgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a0:8c:f6:84:45:db:b0:e3:fa:3f:0a:c0:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Apr 17 10:00:36 2026 GMT
Not After : Apr 18 10:00:36 2026 GMT
Subject: CN=16938c52603298fb7da6a18c51bab9c4a7fa4b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:8c:90:20:51:73:26:72:f8:22:d5:6a:4d:
d1:9b:e3:35:21:24:8f:96:1b:a8:8c:77:59:35:e0:
69:e9:18:35:d4:81:cf:86:f8:f8:cf:b9:fc:55:ea:
a6:fa:57:43:da:8f:02:1e:68:20:cf:89:8b:6b:04:
d0:54:e6:02:2b:ee:45:3e:51:67:3a:99:72:27:5b:
87:18:40:f8:9f:20:1d:96:21:c3:db:3d:88:a1:41:
95:25:f4:8f:2a:14:69:77:92:8c:bb:71:b2:e2:0e:
ca:1b:bf:94:ad:30:f9:bd:d1:cb:b3:23:c2:9e:ae:
d8:53:cc:b5:55:26:e7:8b:f7:50:72:57:b2:22:40:
97:64:32:60:4c:b0:84:1c:90:72:a5:7c:d7:85:8a:
db:f5:2a:34:c7:63:1e:10:35:37:16:5e:f8:3d:55:
9c:3b:1f:58:9e:5a:ee:5b:32:a4:8b:44:98:45:29:
66:38:b6:b0:36:09:62:91:cc:e3:dc:b7:82:62:86:
d4:83:9c:a1:6c:b1:57:22:d7:27:d0:94:d1:ed:d2:
21:1d:a8:dd:c6:2f:5f:00:31:e6:52:42:9b:a0:67:
de:52:ab:ba:e3:2f:86:0e:6e:ff:c7:e8:47:b2:37:
76:50:cf:9a:f6:50:ca:56:ce:cf:80:d5:c4:8b:74:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:8C:52:60:32:98:FB:7D:A6:A1:8C:51:BA:B9:C4:A7:FA:4B:27
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c6:05:11:b5:61:58:99:5b:b2:56:78:db:dd:28:84:50:d9:
63:d2:39:53:d2:ca:42:d0:91:c8:b2:7b:b1:99:18:8e:f6:b8:
2c:18:48:fd:36:80:08:58:75:0a:ec:0c:4e:3b:ce:eb:dd:44:
f4:40:3b:ef:a8:05:19:24:05:1d:83:b2:dc:ca:9e:79:1f:41:
b8:28:f2:39:e4:44:fa:7e:13:a7:fc:24:ca:14:70:a1:7b:48:
7c:79:f6:f2:62:c3:24:67:51:40:89:ae:ec:04:db:5b:d6:15:
31:59:e0:08:0e:ce:64:f9:29:5c:ad:27:0e:e8:fc:f9:cb:f4:
79:68:e0:a1:9a:b6:37:8b:0d:a3:e6:33:5b:07:b6:17:64:11:
5c:fb:b5:7f:74:88:c9:56:41:fb:7b:bc:f2:84:b6:48:aa:1c:
b7:27:89:17:cb:81:06:f4:17:b8:9b:47:e7:10:70:bc:09:cf:
c3:1e:66:5a:69:72:18:e1:c6:68:04:6d:54:42:97:c5:78:34:
0a:a5:14:ff:c0:67:c2:91:39:29:69:26:7d:4a:44:8c:95:9a:
fb:95:ea:ea:4a:c8:70:ac:4b:19:8b:2f:dd:19:ce:32:a0:c2:
77:fa:50:28:47:9a:dc:90:16:8c:be:50:3c:d8:bb:ad:ad:a6:
be:a4:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:38 2026 by rpki-client