Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: xZ58r89rrvr6yn8TzmNN1hq20WDF4/MBoFdXqgLfubI=
Subject key identifier: 66:E1:32:96:75:C8:8D:DC:18:F0:D3:5C:51:BF:58:0F:DE:97:4D:F7
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 019DA3E64DFA39F584153EC9071DF0EC7FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 11DE
Signing time: Sun 19 Apr 2026 04:01:12 +0000
Manifest this update: Sun 19 Apr 2026 04:01:12 +0000
Manifest next update: Mon 20 Apr 2026 04:01:12 +0000
Files and hashes: 1: bgpnt5ibenfPpBkC5ed1S0aPSHU.roa (hash: S5fBLUnI7/aLMxt/ortotYg/YTHmJIqk2MiL/kErwvI=)
2: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: l38CkrHF9z3od2cfh6keDyLH/FEuP9fcvwwnJXkgbxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4d:fa:39:f5:84:15:3e:c9:07:1d:f0:ec:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Apr 19 04:01:12 2026 GMT
Not After : Apr 20 04:01:12 2026 GMT
Subject: CN=66e1329675c88ddc18f0d35c51bf580fde974df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:35:9c:3d:b8:00:18:70:d6:0c:d7:97:1b:
00:3c:d1:25:8c:97:1c:db:cd:aa:52:9b:6c:31:4c:
8d:ef:c8:b7:3a:e7:27:c9:30:3d:f5:d4:6a:90:68:
5b:93:27:2b:c2:d9:9a:b1:41:33:0d:0d:bb:27:cd:
64:35:2b:12:35:a2:4a:d3:e3:82:b5:1e:ed:eb:9f:
5c:d7:27:0e:ae:70:6c:8a:34:6d:61:39:ce:8a:45:
d8:22:f4:1a:b3:cc:65:9a:b4:c3:85:a5:c2:3d:df:
04:83:18:5b:66:6a:79:6e:72:2a:1d:6f:be:93:d9:
94:f6:5e:72:90:02:74:b3:e8:64:da:89:c2:20:97:
06:09:fe:c0:ce:ba:6a:8a:5e:bd:27:58:24:48:44:
63:ef:72:47:d0:06:4a:de:0d:e2:9e:39:64:39:ca:
82:6e:dd:e7:1f:5d:74:c1:e4:98:fd:af:a5:f8:93:
7e:d8:51:c1:ea:63:18:1d:83:20:a2:9b:77:66:4f:
3e:ee:a7:8f:b2:e6:37:08:f2:b5:e0:4f:ff:c8:3f:
d0:aa:46:5a:bf:78:8f:b9:e7:2b:05:b1:db:b9:93:
de:c7:dc:2f:7a:56:4d:d0:19:52:a6:0a:05:d3:97:
d6:1a:54:c2:28:03:07:26:ab:41:93:b6:20:6d:d8:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:32:96:75:C8:8D:DC:18:F0:D3:5C:51:BF:58:0F:DE:97:4D:F7
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:83:fa:81:39:a1:63:1c:c9:30:04:18:1c:58:8c:6b:5f:
7a:31:fa:00:12:17:94:04:b1:e8:61:cb:95:65:0c:91:99:4f:
d9:b7:db:e2:ad:97:fa:cd:87:d0:6a:f6:d6:89:64:4d:26:55:
f1:56:ee:da:a6:bd:5e:37:5c:dd:bd:91:37:6c:55:32:f0:dd:
f5:37:95:e1:92:e6:67:28:4d:6c:ca:a2:ab:4b:a2:74:aa:ba:
ee:54:a6:54:24:a3:73:2c:38:dc:1c:e8:8b:7a:09:e6:fe:2d:
27:ab:ff:1b:32:a1:dd:4a:17:e7:ce:ea:6e:d3:d7:73:a2:c2:
14:28:fb:ab:ac:a1:82:c0:0b:06:57:0f:ce:2e:d3:a4:d6:9a:
80:20:82:44:6e:87:95:c9:8e:85:70:b1:c1:6c:93:39:53:d1:
b9:c7:97:15:45:8d:36:6c:15:2a:73:11:87:3a:0a:4d:32:d7:
19:af:95:f3:c1:30:51:4f:8f:20:e2:50:cf:63:1a:f6:ce:8c:
5a:24:60:22:7b:56:55:11:8b:72:2e:ab:90:43:83:a4:b0:f9:
6e:cf:60:c3:3e:21:db:13:e3:41:ef:c3:b1:17:43:ff:07:d7:
c4:fb:72:3d:05:53:89:a7:cb:9a:a5:d3:44:7f:fe:aa:e1:cb:
f5:b4:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:11 2026 by rpki-client