Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: I1apuSQhlAQI4ZHecVeAOro72MtzCSaU8JEaoCGDTes=
Subject key identifier: F0:38:A3:A4:1D:FB:9A:EE:76:32:CA:BB:16:BD:10:AC:2C:D6:75:0D
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 019DA48A5CECD6F50A5FAEDBDF2DEF161EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 07:00:24 +0000
Manifest this update: Sun 19 Apr 2026 07:00:24 +0000
Manifest next update: Mon 20 Apr 2026 07:00:24 +0000
Files and hashes: 1: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: UFBSYyH2d5H2yDC6XCo3QyVH08qibUMgIvSEERJI8M8=)
2: iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (hash: FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:5c:ec:d6:f5:0a:5f:ae:db:df:2d:ef:16:1e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Apr 19 07:00:24 2026 GMT
Not After : Apr 20 07:00:24 2026 GMT
Subject: CN=f038a3a41dfb9aee7632cabb16bd10ac2cd6750d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:d7:de:39:50:ed:d0:6b:a1:2a:f4:f8:98:
ce:06:8b:17:a8:f4:69:d7:64:35:78:73:20:98:44:
9f:75:e1:e3:6e:a0:04:36:be:eb:cc:57:7e:4d:43:
f0:6e:b3:b8:7d:d7:5c:4b:2d:da:27:eb:3e:f8:b0:
26:b1:92:76:cb:b9:e3:1a:52:0b:ed:54:a4:e8:00:
a3:c1:36:b9:35:5e:9a:c5:27:bd:39:96:52:44:cb:
bc:50:ac:c9:6b:99:67:02:17:13:38:44:ae:38:98:
33:c4:50:a1:ee:12:86:c8:7f:fb:3a:53:22:9c:7b:
fc:11:62:75:e3:f7:10:38:ca:89:0f:cf:79:63:e3:
ef:ff:d7:a5:44:4e:e9:9f:13:38:e4:78:d8:4c:15:
68:15:d1:7c:c0:0b:2c:94:92:c6:7a:95:08:54:48:
cc:bf:ae:f8:7c:2a:20:55:9f:1b:b1:da:e8:fb:be:
9e:c7:89:01:b4:37:09:a3:a0:e8:dc:c4:f8:fa:9f:
9f:ca:02:2f:9f:90:79:e9:9d:83:86:5c:f9:ec:75:
ea:2b:67:f3:a5:20:4b:af:ea:eb:a1:80:5f:68:e5:
89:79:21:9f:cb:21:fc:30:e7:65:37:66:f3:66:9d:
3f:60:d7:09:ec:34:2b:50:ea:db:0a:e6:e1:81:b3:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:A3:A4:1D:FB:9A:EE:76:32:CA:BB:16:BD:10:AC:2C:D6:75:0D
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:69:74:52:87:de:57:cf:ae:af:3a:0a:2b:25:66:1f:42:
4c:4c:c6:9d:1e:71:88:26:22:b5:99:7d:d0:03:8a:1a:50:ec:
0c:d3:94:21:7a:a8:1e:3c:30:11:14:11:09:8c:72:4d:02:ec:
32:8f:6b:88:80:0d:65:3f:ee:dc:f4:08:e0:4b:70:ba:6d:60:
08:8d:54:cf:f4:6e:1a:eb:9c:33:f0:9e:ff:9b:15:d5:03:ac:
98:34:ce:40:c8:c3:c4:d7:38:97:0b:22:c8:df:eb:c4:b6:4d:
78:cd:cb:98:60:06:fb:53:41:a3:eb:f8:50:99:35:9a:b6:03:
a2:5a:01:e4:b7:7a:51:1d:4b:62:d1:c0:24:2a:1f:fa:20:36:
e3:b3:19:78:d9:c7:95:b0:69:8b:81:8b:ee:6e:a1:5e:64:3a:
b0:f1:da:47:c9:6e:c0:95:09:3e:ac:04:57:14:3e:86:00:2c:
59:fa:33:02:8f:d6:ad:81:4d:ec:f6:6e:c1:3d:e4:f3:6d:2a:
ef:78:4c:e2:64:f1:5d:24:d8:e2:71:f9:e2:06:ac:29:11:37:
3c:86:d1:4b:e7:9d:33:1b:4d:2c:78:26:fc:c1:24:46:f2:04:
cc:38:5a:a3:fe:7e:78:27:4d:c0:24:a2:9d:11:18:37:ee:b9:
a5:54:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:43 2026 by rpki-client