Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier: plVw+pWEiLqCh18rOVX86ZjRsXtwUcOnSGaJ/6LgpeM=
Subject key identifier: D2:27:7D:41:88:8F:56:27:8D:F8:90:E7:06:C5:55:18:26:67:DA:84
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial: 019D9A3EE39DF55A15191F55DFC23E51168C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number: 1879
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: NftG3fA2jMAi6nKNSyV0OG9Tzlj0Wk9dhlwOU1sYL8I=)
3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e3:9d:f5:5a:15:19:1f:55:df:c2:3e:51:16:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=d2277d41888f56278df890e706c555182667da84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:85:5e:4d:d7:6b:be:a0:85:fe:35:f8:de:
2f:10:b6:f4:e4:42:9d:74:fa:d6:d9:75:4b:6c:52:
23:be:d3:77:ed:5a:b1:4c:02:26:db:0b:a4:46:6b:
82:df:0a:86:42:ef:fa:cd:28:a5:1a:d5:aa:57:d3:
03:b0:bf:e8:77:44:b8:26:03:f5:12:f9:03:05:a6:
c3:81:5e:00:28:b7:9e:fd:de:4f:10:9d:2d:32:b4:
fb:a7:c3:6a:38:db:4e:63:f8:39:45:c6:20:06:a4:
6d:62:5d:e4:85:d5:0a:3d:18:86:41:85:fd:12:d4:
62:b5:b5:68:dc:28:56:79:7a:43:e9:51:a6:11:7a:
b7:5d:37:03:18:6b:03:ba:c5:18:3d:16:1d:4b:1d:
59:00:4b:55:ca:33:f5:8f:db:66:9a:c9:fb:90:49:
5f:95:3c:c8:34:bb:e6:42:ba:af:4e:ea:74:38:21:
bf:f0:e7:f5:b4:aa:91:2d:20:54:48:b9:fc:ee:8f:
3b:fe:38:6c:97:b1:e3:c5:53:83:70:e2:4c:1d:24:
f3:81:1e:68:60:9f:11:57:68:41:84:fd:e5:4f:00:
7a:00:c2:57:1c:c3:c5:94:6a:c7:3f:2b:29:1c:e9:
84:89:84:ea:cb:2c:d1:36:04:28:a5:6d:3d:72:91:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:7D:41:88:8F:56:27:8D:F8:90:E7:06:C5:55:18:26:67:DA:84
X509v3 Authority Key Identifier:
keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:19:cd:90:1b:eb:61:3d:60:80:6f:7f:8e:4d:d4:ed:30:37:
4b:bd:93:49:31:cb:c7:af:ed:25:37:56:b9:b5:73:27:bd:51:
a7:d7:e8:61:7c:69:2e:6c:03:60:cc:38:ce:8b:e4:39:f2:f9:
8a:e2:d6:d2:e1:97:fe:ad:c8:1c:b2:e8:56:ad:c1:5a:d0:71:
70:61:73:47:95:01:5c:cd:88:66:2d:eb:0d:8a:ea:5a:ba:90:
67:de:fb:db:a9:73:b0:09:d6:bb:da:f0:cc:0f:17:cd:b4:31:
7a:78:65:b2:77:03:b0:90:39:52:c9:a6:5a:30:93:f2:01:cf:
c0:69:f6:ec:db:94:0a:f8:44:02:5c:14:25:0a:29:87:3c:c8:
1f:f9:d9:82:35:62:af:23:be:01:11:3e:8f:8c:59:b1:00:67:
f3:89:c4:6e:e8:23:8a:a0:b9:81:ae:96:02:a3:67:84:cd:35:
3f:e2:a2:14:28:63:48:5a:4f:90:34:76:34:bd:33:74:b8:6b:
e8:37:85:5b:45:7b:13:89:f6:12:3c:cb:4d:3d:03:07:f0:49:
a7:34:46:9d:1b:d5:a1:16:5b:48:0a:9a:86:fd:96:84:8b:d1:
b3:02:7c:0e:4b:52:80:69:90:bc:98:87:e8:ab:20:0a:77:a8:
c3:28:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:09 2026 by rpki-client