Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: l1sONzriIFBu7DJ9ceDGyVCJTze23beXpgNRBvVMbU8=
Subject key identifier: 23:67:B7:0F:16:A7:0B:44:BB:1B:A3:1E:AD:B3:2A:5C:D7:EE:A5:CB
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 019D9AE2BED2EDF70D060E9D72526654C097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0EEF
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: KUrezaIOa0fQvFcebA3N93JFuvEBDPuURJCENm2aaGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:be:d2:ed:f7:0d:06:0e:9d:72:52:66:54:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=2367b70f16a70b44bb1ba31eadb32a5cd7eea5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:42:7d:c5:65:62:73:cf:29:c1:1a:83:c4:
cd:f2:62:64:74:62:54:a4:8f:52:9b:4d:19:94:ab:
90:f9:24:6c:0d:0d:b2:10:9d:bd:c3:4b:fe:1d:85:
3f:18:ed:71:a1:c7:5b:42:44:55:c7:0a:37:ad:01:
03:d6:37:d6:0e:e8:dc:d9:5a:a1:02:71:6e:f2:45:
20:5c:79:cf:05:31:c6:6e:ed:10:32:51:f0:8a:f8:
d6:65:81:d3:6b:40:d7:8c:7f:18:ad:34:53:0b:1a:
63:19:d3:61:c9:31:25:47:f7:b9:a3:f0:6d:8f:a0:
68:79:04:23:7c:d1:9c:10:29:61:3f:d2:a9:7f:d8:
62:f5:9b:40:5b:19:6c:bb:da:b1:42:20:e4:79:cb:
e2:fb:0f:37:fd:8a:cb:0b:24:39:1a:9b:1b:7b:e6:
1a:47:4c:91:06:b6:fe:84:a4:32:56:58:38:74:5e:
c2:0a:27:f3:ca:6c:39:64:5c:0b:c1:3b:bf:b9:2e:
24:f1:1c:ba:31:b3:76:35:2e:bc:91:25:56:47:c7:
58:e2:1d:b1:99:dd:a4:1f:1a:35:e1:ea:32:cb:a3:
22:b8:20:d8:d1:04:f7:25:59:6f:7a:5e:e9:a7:e5:
0a:6b:6e:32:53:f4:1c:eb:d9:20:6b:0f:53:a8:cc:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:B7:0F:16:A7:0B:44:BB:1B:A3:1E:AD:B3:2A:5C:D7:EE:A5:CB
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:d1:eb:8c:4e:46:71:bf:f1:f2:33:cb:b0:95:b6:ff:fc:
cb:09:ec:71:31:ce:92:c4:e2:e4:a3:a9:4a:0d:3a:a1:f3:12:
83:94:26:a7:de:ec:48:08:26:29:98:99:5b:d0:4b:5b:30:c1:
72:5a:1b:23:4b:12:66:7c:a1:e3:46:0b:85:2f:cd:47:c1:9e:
db:84:04:53:56:46:12:7c:bc:ae:26:9d:db:4b:4f:8f:76:34:
91:a8:14:21:a2:b6:f5:0a:a9:87:33:60:5b:a1:55:b1:e7:8b:
78:0a:4f:64:9e:82:e9:e3:7c:11:99:86:37:91:65:5d:86:51:
f7:30:ce:a2:ed:c7:ca:7e:8f:cf:f6:c2:cc:2c:27:09:1f:8b:
fd:30:62:7a:98:c1:26:c4:72:f6:af:42:fd:65:67:94:46:ea:
d8:6c:f8:64:73:08:06:ed:dc:b7:4a:05:dd:60:a9:1f:61:be:
f5:21:21:02:79:aa:78:14:bf:bb:f9:44:a7:71:14:b6:c0:43:
09:91:ef:4a:a9:e9:e0:1f:9d:1f:77:f3:b5:46:2f:37:55:f3:
d5:dc:a5:ca:55:8f:4e:c3:b5:e2:a2:19:83:09:11:5b:bc:61:
01:90:77:e8:97:88:42:7e:3b:ec:37:e2:6d:43:3f:e8:05:58:
9e:a2:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:08 2026 by rpki-client