Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier: FrSpnqlfNWXPcDckaUJflQ9qQsE1H9+Ah5rjTD/xv9s=
Subject key identifier: D3:43:A9:08:29:44:8A:FA:CE:BB:59:F2:AF:01:DB:0F:B9:8A:32:42
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 019D98BD698F76791724B3BA6845AAC9A616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:43 +0000
Manifest this update: Fri 17 Apr 2026 00:00:43 +0000
Manifest next update: Sat 18 Apr 2026 00:00:43 +0000
Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: dJdjOdvNqDeJ4St3AeaH0l6xiivMdH4aMpDdrAg9Meg=)
2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:69:8f:76:79:17:24:b3:ba:68:45:aa:c9:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Apr 17 00:00:43 2026 GMT
Not After : Apr 18 00:00:43 2026 GMT
Subject: CN=d343a90829448afacebb59f2af01db0fb98a3242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:e6:9c:e6:05:d7:08:a8:1a:fd:de:80:82:
0f:07:87:fb:c1:31:79:82:63:da:78:bf:5b:fc:1d:
4a:db:d5:e5:85:20:a1:48:97:06:bc:f0:57:01:45:
69:0d:2b:13:d2:39:1e:36:52:ec:ea:f8:e0:65:0f:
cf:f9:81:8a:25:1a:62:fc:a2:b6:88:77:50:13:1e:
a4:bf:0d:2c:08:59:c2:fb:14:1b:34:6d:40:0d:4f:
80:45:92:37:35:85:18:07:3a:f6:b1:24:ff:38:a5:
01:c0:93:54:71:4e:bd:25:50:90:09:e3:40:39:13:
14:2f:9b:08:4a:2c:62:ca:e5:7e:11:24:ce:bb:b3:
de:17:c4:60:30:59:5b:29:14:f9:85:05:b1:68:8e:
4b:59:00:14:ef:f2:78:76:0b:cf:f0:c9:06:c0:9e:
c1:55:1d:ca:1c:d9:46:85:ab:c4:69:f6:85:c5:55:
1a:c1:cf:fc:8f:69:9f:ec:59:ed:26:51:35:b5:6d:
47:67:1d:dd:0d:cf:da:16:85:d1:6d:fb:6d:17:d8:
71:07:3f:c9:5f:9a:54:61:90:fd:4e:44:45:a2:58:
74:fc:47:4c:49:f6:6f:ec:c7:be:8d:9f:c6:d4:6c:
dc:30:17:6e:c8:29:23:ee:ca:1d:7b:23:ad:89:23:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:43:A9:08:29:44:8A:FA:CE:BB:59:F2:AF:01:DB:0F:B9:8A:32:42
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:23:2d:de:a2:33:50:cd:66:df:f0:ce:bb:ac:cb:d3:b8:
c8:98:38:31:c3:73:30:e5:f1:95:51:0a:fe:f8:cb:af:6b:3b:
11:44:b3:58:66:10:e1:48:a0:2a:ab:e9:87:c0:86:17:23:17:
f7:db:e2:d3:1c:0f:da:fd:f5:af:9e:d2:c8:0d:2e:25:62:47:
46:cb:2e:d9:ea:78:36:0c:45:89:ba:8f:96:6a:d2:a9:b6:66:
87:a2:64:6e:18:ca:c7:60:66:f1:1c:52:e3:13:15:73:53:d5:
08:5d:cf:60:06:db:26:cf:91:32:0c:fd:54:b1:b9:65:73:28:
8f:9c:58:ae:6f:f0:88:0f:d9:3a:cb:f2:1f:75:53:92:29:43:
3b:bb:e9:bf:ed:2d:99:1c:9b:5b:eb:b6:e4:79:9a:52:6f:cd:
13:65:3e:56:54:3c:fa:1c:29:0e:f7:3e:10:9f:56:e7:cb:f6:
38:89:e9:71:28:91:2f:93:20:90:8e:24:a3:97:0b:0f:f5:79:
66:0f:c8:91:a2:0d:fd:20:dd:2a:91:92:ce:74:90:13:17:1f:
3e:4e:e4:15:e9:18:f4:bd:8f:71:42:7b:4f:f6:11:e6:01:74:
de:11:88:20:1c:23:f5:ca:b0:a4:f5:af:31:fc:43:bb:52:d1:
f9:c0:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:29 2026 by rpki-client