Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: H3yhMvWc9XLBijerHgK16guyt7giL8jI02JVVkJS+5w=
Subject key identifier: A5:66:82:05:91:EE:36:1F:96:42:BA:9E:0B:64:89:5C:33:3C:37:AD
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019D9C631B85B99D3F93C9E06150B4716587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 02EE
Signing time: Fri 17 Apr 2026 17:00:33 +0000
Manifest this update: Fri 17 Apr 2026 17:00:33 +0000
Manifest next update: Sat 18 Apr 2026 17:00:33 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: N6lSrOm462+NBWjZMLrlPnYdP4s+6PJbVKRbKR7zpuQ=)
2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:1b:85:b9:9d:3f:93:c9:e0:61:50:b4:71:65:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Apr 17 17:00:33 2026 GMT
Not After : Apr 18 17:00:33 2026 GMT
Subject: CN=a566820591ee361f9642ba9e0b64895c333c37ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:08:d2:03:8c:5e:16:fb:16:aa:b6:31:8c:
2b:75:7e:db:6b:8d:6f:c1:7f:f5:1b:e4:e0:a8:b6:
2a:5f:62:1f:a8:f2:7b:ca:46:1e:32:e4:d4:e2:54:
23:04:f5:e4:98:49:26:72:20:16:32:3b:1e:1d:5b:
10:61:16:d9:52:da:d7:4e:8d:5f:11:96:39:9e:86:
ae:7a:e9:ff:e2:5c:0f:89:b0:11:c6:79:7e:bb:de:
66:39:ca:82:cb:05:99:22:c3:6a:84:fa:90:2a:31:
2f:64:ca:fd:b3:d6:96:2b:97:9e:9b:d6:a6:2a:8c:
61:76:3b:07:8c:8a:b7:85:7a:3e:fc:f8:ad:38:4d:
c8:c8:bc:15:b7:61:b0:4e:17:c1:71:c2:3c:e5:96:
59:37:a4:b7:da:9f:07:32:53:b6:b0:b0:f6:4b:80:
33:31:ab:41:20:62:72:03:20:26:76:6f:32:3e:1d:
10:b7:7a:46:be:89:5c:77:4f:67:70:69:ed:1c:1d:
8b:9f:cc:bd:37:b7:05:c3:60:e9:58:1f:92:f6:12:
a6:60:95:4b:20:ca:9e:26:22:f4:a9:72:56:43:10:
52:61:e4:b3:0a:c6:ca:a5:c8:b3:82:94:f6:99:ea:
15:af:db:bc:fa:21:fa:8f:0f:5e:10:94:8a:69:9c:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:82:05:91:EE:36:1F:96:42:BA:9E:0B:64:89:5C:33:3C:37:AD
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a1:e4:99:e8:b6:c7:89:ca:3b:65:22:89:75:d9:e9:78:b5:
01:ad:2b:be:4e:62:a9:90:19:44:38:05:83:f8:30:49:df:a1:
85:95:a3:f4:62:c3:19:1e:e3:7c:36:2a:d6:7e:47:1c:66:dd:
6f:1f:c4:20:b2:3a:ad:86:cd:2d:71:ff:7f:d8:c9:0b:26:53:
8f:65:c1:4d:cd:44:ce:b4:3d:4f:c3:03:bc:52:5b:c0:d3:b7:
e3:29:a4:54:d5:36:5e:26:96:4c:12:c4:97:a2:30:7b:1d:31:
2d:b6:26:bd:de:8f:e2:4c:b5:0c:0d:a8:ae:1b:0a:cb:27:18:
f3:35:49:79:10:14:ac:ce:dc:7c:b3:69:aa:b2:dc:ac:d0:46:
d8:23:d5:65:6b:ba:2b:9c:1d:fd:ac:c3:1f:a2:d3:8f:2f:fe:
3f:e2:73:8d:da:53:f5:ee:a0:82:50:fb:bb:84:5f:f3:02:95:
d3:e0:72:99:1a:05:19:ff:63:01:59:29:47:24:ec:a5:63:cf:
77:62:60:62:a6:39:93:5e:48:49:6a:e3:89:41:d3:c9:2c:54:
55:38:1c:f0:66:3d:3f:36:7a:9d:4d:2d:82:0f:f6:6b:b9:df:
91:47:37:90:48:1c:c6:26:ef:15:21:cc:e5:21:08:e2:98:55:
46:37:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:06 2026 by rpki-client