Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: 6wIaI/yONk82twbjzvVQOuKFxA8ZbtaMVVugaX0kr/I=
Subject key identifier: AB:1E:02:B4:11:AF:6C:7B:9D:7E:3C:A0:63:52:0B:84:67:85:08:CB
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019D9962E6A3A3CBFD4838CAC11797D5B141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: lhiFkx+deU0+IjZpwy+a6Ivr5fqftfFCCci+FfZJVnU=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e6:a3:a3:cb:fd:48:38:ca:c1:17:97:d5:b1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=ab1e02b411af6c7b9d7e3ca063520b84678508cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:5f:32:ec:10:0e:84:c9:90:73:a7:c9:ff:
c3:eb:9d:2d:2c:ca:df:42:44:b7:2d:23:9d:fc:1e:
a4:fb:b9:2b:12:44:8c:03:2e:16:f0:e8:eb:49:55:
46:36:74:37:ae:a4:97:24:c1:58:e1:14:cb:3c:3a:
d7:7a:29:62:78:a2:9b:c7:ba:cd:5f:14:1b:69:0c:
93:57:0a:ef:10:ab:c5:21:ca:53:0f:0a:57:68:5d:
55:40:38:e8:b9:de:54:f3:20:f5:ce:11:ab:4f:e4:
1d:6d:f6:96:73:3e:33:cf:00:a8:2c:1a:ba:b2:37:
d1:f7:ce:fd:c8:52:a8:32:08:d3:a1:9b:ff:d8:d6:
b2:b6:6d:95:29:bc:0b:2a:35:cb:f9:88:a3:a5:cc:
60:a9:12:46:da:15:5a:e4:91:d7:d1:57:9a:eb:68:
5b:62:41:0e:b0:e4:18:70:bb:8d:f3:50:90:73:60:
e5:54:ef:56:f3:44:43:a8:b1:ed:9b:d9:64:d2:00:
a8:c0:89:56:b9:68:a5:d1:cd:df:c5:94:21:43:79:
8b:3f:1b:90:01:d5:88:46:bf:c8:b6:76:d5:94:aa:
5a:e4:77:c0:9a:eb:43:5b:2d:3a:c8:7e:ff:f4:05:
f6:1c:e6:c8:b9:05:dc:f2:9a:c7:18:24:9d:92:18:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:02:B4:11:AF:6C:7B:9D:7E:3C:A0:63:52:0B:84:67:85:08:CB
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:a0:6d:eb:a4:f1:22:53:fe:1a:49:2c:db:36:c0:6e:ba:
90:af:a0:1d:ee:0c:09:e4:38:4e:64:be:eb:68:cb:50:89:28:
30:57:b3:4b:fb:54:ec:29:5d:c2:73:42:9b:21:32:39:34:7c:
c6:7c:df:f5:09:a7:23:c5:6a:1e:b3:76:16:2a:a0:1e:f1:77:
75:a5:51:63:b2:57:a4:90:29:8c:dd:87:e1:59:62:a7:ea:9b:
db:f0:bd:ef:70:7f:a5:61:38:10:9d:86:fe:f5:66:20:16:6e:
e0:28:c6:67:7a:f5:9b:59:51:b9:25:ad:63:5e:ee:09:a4:08:
12:80:65:21:d8:eb:b0:57:0d:48:14:f7:24:96:8e:f8:b7:92:
f0:a1:ec:dc:6f:c1:bd:ef:f8:94:f5:00:b0:83:07:a2:05:f4:
3f:e0:51:d9:e9:ed:52:16:22:37:5b:6b:f0:f4:3d:c1:f4:4d:
a9:6c:f1:e0:7f:ff:05:cd:24:d2:6f:80:34:2d:e4:90:b0:ec:
7c:14:06:90:07:f2:3c:e5:55:3a:ae:99:d3:71:0d:02:69:a7:
2c:31:eb:75:6c:b5:cd:52:75:68:68:c1:3f:8b:61:b9:3c:24:
ae:9b:d1:3a:46:19:7d:b8:6e:37:ed:34:19:e8:57:cb:bf:5b:
19:f8:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:29 2026 by rpki-client