Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: JhuhnpYL2DhPA/VV7SNWK0pfOuvmV+g8gGN8GGtvTuc=
Subject key identifier: BB:DE:39:58:B8:0C:84:67:9A:33:58:DC:FF:A2:C5:80:3F:33:C8:3E
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019D9BF519890AA0A0AAED10461C4276B8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 15:00:24 +0000
Manifest this update: Fri 17 Apr 2026 15:00:24 +0000
Manifest next update: Sat 18 Apr 2026 15:00:24 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: 1z4csUxCHrhefyx8DPwtxwGmCOZ3mmhcSMtUnEMGM8Q=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:19:89:0a:a0:a0:aa:ed:10:46:1c:42:76:b8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Apr 17 15:00:24 2026 GMT
Not After : Apr 18 15:00:24 2026 GMT
Subject: CN=bbde3958b80c84679a3358dcffa2c5803f33c83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:e7:8b:90:80:b3:80:44:3f:de:58:f7:52:
4e:5e:cb:2b:c0:33:03:3a:7f:bd:d8:59:2f:6b:b3:
33:dd:0e:b7:f4:b1:9a:87:c2:7f:4e:30:bc:ba:ee:
9a:8c:c8:80:7d:16:15:58:44:39:2d:ac:11:3d:23:
fb:6c:34:0f:20:f1:9b:4e:57:d7:fe:40:67:30:db:
94:d5:cb:7a:fc:a7:d2:14:a7:fa:41:4c:49:b2:1b:
01:4b:26:70:1b:1c:be:42:bb:16:e7:46:7e:15:e7:
e0:39:fa:a2:e6:f3:f0:3f:84:8c:19:f3:90:fa:e5:
1c:d7:bd:26:4e:ed:94:8b:8f:3b:9a:d1:69:ac:c2:
7d:88:74:e5:c8:08:9a:6d:85:ca:f4:51:fb:56:98:
50:be:ed:25:5a:37:5a:32:29:b0:7b:79:44:3b:18:
ca:50:46:0a:53:fa:eb:2b:47:47:18:64:16:d8:c5:
9a:95:51:e6:e4:a9:5d:fc:a7:78:a9:18:fd:a0:e3:
f1:6d:dc:b4:60:a4:b3:41:ba:96:4b:7e:f9:9b:87:
d6:24:ed:dc:c8:97:10:b2:99:f9:f7:ac:c4:28:48:
62:de:e6:15:f3:ad:af:aa:03:0d:ed:37:36:06:4c:
ae:89:04:1b:bf:b0:93:97:16:d3:8b:13:38:e7:bb:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:39:58:B8:0C:84:67:9A:33:58:DC:FF:A2:C5:80:3F:33:C8:3E
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:aa:9f:c2:66:9c:84:38:01:31:c3:57:87:61:8a:e8:9b:
db:dc:0f:ef:e2:cc:f3:30:5b:4a:44:08:67:54:41:b0:df:ac:
97:41:2d:ba:c3:ab:1d:66:14:47:0c:a9:34:f0:09:da:7d:9e:
15:1b:15:94:bd:05:a4:eb:98:df:14:1b:d7:4c:4a:15:e9:1b:
56:ae:9a:52:6d:5d:4c:0c:cf:2e:da:ef:40:27:42:37:44:dc:
94:65:2f:e4:cc:05:17:d4:22:73:71:dd:69:6f:f2:28:4b:fe:
1c:88:6f:98:48:f2:db:fa:2d:a1:45:7a:12:fd:58:87:7b:0d:
ec:68:0d:d7:dc:c7:fb:08:18:83:28:95:64:0a:20:ce:4d:ed:
dc:9a:53:17:ce:f1:8c:42:aa:6c:f5:dc:25:4e:e9:e7:38:bd:
4b:97:0c:6d:79:b6:ae:62:1c:b6:65:d4:74:4b:78:ec:96:95:
06:c2:82:36:f4:b5:e8:c6:0a:ff:d5:48:72:a1:6b:b4:a5:a6:
ce:49:aa:62:36:5c:b1:ba:e7:bc:00:2b:4f:f8:41:08:b9:02:
60:89:c6:14:5a:6d:b6:bc:5f:5d:c9:91:21:35:e0:84:03:c4:
99:94:d4:af:1c:13:bd:9e:79:a7:37:e5:ca:04:a7:ae:79:aa:
be:3e:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:25 2026 by rpki-client