Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: UWGQsH1pjNOXuoJmpBql4cb32aHSAA0G8AwWOvCSzck=
Subject key identifier: 8A:5F:DB:9E:85:6A:B4:13:0A:12:BD:78:84:C7:BC:43:3B:65:35:35
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019D996202FFA4B1B3A5F8651621F9B43AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 14B6
Signing time: Fri 17 Apr 2026 03:00:30 +0000
Manifest this update: Fri 17 Apr 2026 03:00:30 +0000
Manifest next update: Sat 18 Apr 2026 03:00:30 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: kbyxnOd0lxkhDXcKjwrhccQ80wEMIInjZ0htiQzAdJ8=)
2: 8yFq5eCzFqbUHkppnTImyWd7TQ8.roa (hash: cyxrgjDYi2zADRMcxKZcX9vgUVvbqnmcfKimHV7W0bY=)
3: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
4: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:02:ff:a4:b1:b3:a5:f8:65:16:21:f9:b4:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Apr 17 03:00:30 2026 GMT
Not After : Apr 18 03:00:30 2026 GMT
Subject: CN=8a5fdb9e856ab4130a12bd7884c7bc433b653535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:7a:33:22:6b:63:ed:02:85:f2:8c:bd:a7:
6b:9e:a2:ae:36:e5:c0:ed:7a:a4:2d:85:72:bd:ee:
80:f3:f1:0c:11:3b:56:61:94:85:c1:98:41:d2:da:
ff:4e:9f:05:f4:b0:10:e4:54:61:94:28:c9:38:06:
a2:9d:b7:89:25:88:da:79:69:80:2a:24:97:52:b3:
69:49:55:e6:a1:a4:af:38:6d:ee:0d:77:c4:73:85:
2d:cf:da:7e:1a:88:cb:9f:a2:fa:cc:2e:cd:c5:57:
b1:30:77:73:ee:af:ce:db:83:f0:b3:9a:26:fa:97:
a6:a6:63:39:e3:57:5b:fb:00:de:27:ab:35:73:13:
a5:b2:6d:9c:0e:39:49:78:2e:42:62:8e:bc:0c:c0:
b7:3e:92:4c:ff:7b:08:12:e9:55:e8:d5:3f:b0:85:
4c:a8:f4:82:29:00:4c:53:c3:72:41:15:47:0b:fb:
42:d7:eb:35:d0:33:e5:49:bc:7b:02:d6:e0:2a:ca:
9e:61:44:c5:c2:d5:23:5a:a9:db:fd:ca:40:cb:bf:
7e:30:c2:eb:94:c7:83:c3:9f:4d:07:e4:52:5f:ce:
cd:94:bb:3b:be:81:23:b7:b4:e3:ab:94:fc:b0:dc:
b4:d8:95:96:ea:08:af:29:f2:b4:c0:3a:95:56:01:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:DB:9E:85:6A:B4:13:0A:12:BD:78:84:C7:BC:43:3B:65:35:35
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:55:01:7f:2c:ef:8a:07:74:1a:8a:c5:02:7a:d1:36:8b:
e0:06:d7:04:c3:da:63:a4:17:1b:30:7f:ba:7d:db:ff:34:bb:
83:80:99:37:56:ee:bc:ad:9d:da:0d:d5:8e:45:d6:19:69:d3:
5c:00:b1:3c:dc:35:53:65:01:b8:71:b1:83:19:e3:55:77:76:
ae:4e:f3:af:94:b8:c7:54:16:1f:a1:f3:35:32:bd:75:94:55:
a5:77:e0:ef:2a:26:ac:38:ac:d9:a2:90:29:b6:b7:4c:37:a8:
b7:a2:bd:b3:c8:ad:62:95:cb:f1:5f:16:d8:c0:4e:aa:40:4d:
fd:29:e4:4a:71:49:be:66:2e:be:64:67:c9:c7:5e:aa:4d:dc:
b6:6c:c2:05:0b:5d:6a:a9:e1:e7:16:0c:2b:eb:59:13:58:d1:
32:18:cc:af:b5:72:27:86:fd:6e:a0:c3:dc:fd:4d:55:d3:7e:
3b:b9:80:df:44:7e:f5:1d:48:52:83:e2:f9:fa:0d:8c:36:50:
31:67:2f:ce:77:a3:1d:2d:0b:14:04:af:cc:2f:e1:47:a7:8b:
e5:33:43:be:1a:00:90:97:41:e9:2b:7a:0a:8e:6c:aa:50:46:
08:a4:d7:9f:f0:f3:01:14:4f:a6:e7:45:6f:f0:1b:3d:0a:82:
03:36:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:04 2026 by rpki-client