Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: eAktmrI65Byjfa182j+Rl5zzy01KCxopD3FH35YAbGM=
Subject key identifier: 90:04:34:AC:B2:86:36:35:43:00:9C:D3:62:2F:B6:53:0F:7E:00:9C
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 019D9C2D235ED022B92DACA82901D6F1D461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 1558
Signing time: Fri 17 Apr 2026 16:01:36 +0000
Manifest this update: Fri 17 Apr 2026 16:01:36 +0000
Manifest next update: Sat 18 Apr 2026 16:01:36 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: xg59lOeqr5rtI//t4ziFTDDsLgO3dh36OazqPTcCZNs=)
2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:23:5e:d0:22:b9:2d:ac:a8:29:01:d6:f1:d4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Apr 17 16:01:36 2026 GMT
Not After : Apr 18 16:01:36 2026 GMT
Subject: CN=900434acb286363543009cd3622fb6530f7e009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:b7:21:a7:a9:fb:c6:4e:97:2a:c5:c2:a8:
84:63:15:6e:91:35:ed:ea:2a:cc:38:60:52:30:78:
ab:c3:91:e8:43:6b:2a:fc:70:7d:02:54:ff:17:c9:
cf:ad:c7:f6:78:57:36:3c:8f:74:e2:fb:0e:18:53:
96:db:91:8e:72:0c:93:c9:40:19:6c:14:a6:cb:2c:
b7:5c:05:90:d1:e4:ff:fd:bc:21:44:56:64:5b:db:
71:69:fd:1a:1d:55:e8:a4:a1:31:13:c2:83:19:69:
91:cc:0b:eb:3f:99:c3:1c:f6:ff:c0:a1:2f:1e:dc:
9e:d3:b4:8a:d8:00:47:f9:6e:78:28:71:77:b7:23:
22:39:d9:02:f5:74:75:a9:b3:be:76:05:18:7a:74:
81:48:b6:fe:9d:50:d6:f3:be:24:ee:6e:b2:61:be:
81:8a:a2:45:20:1e:67:15:8b:6f:43:a1:1e:ec:c5:
dc:ee:52:1e:3b:97:58:70:77:0a:23:ac:4e:64:03:
5c:b1:4f:9e:8b:34:8d:e2:66:93:b0:42:65:69:24:
bc:0e:a1:c1:32:0a:46:72:d8:7a:fa:d6:06:ab:30:
87:66:5b:fc:7d:ef:3b:13:0d:37:ac:9c:12:cd:d4:
c8:4c:98:b5:78:01:ff:4e:c5:d6:2f:10:a1:5c:af:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:34:AC:B2:86:36:35:43:00:9C:D3:62:2F:B6:53:0F:7E:00:9C
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ac:64:c3:11:d8:d5:c3:91:b0:1f:90:81:c8:ca:be:d4:7f:
57:e1:af:3c:1e:06:f0:16:47:ae:b8:ae:d5:d3:25:16:56:ac:
e1:e8:29:d0:3c:25:76:65:df:26:2b:25:87:52:4d:7b:3f:b0:
29:6c:24:fb:7a:23:70:24:ec:3c:1e:42:f7:97:8b:05:57:d2:
cd:30:90:a5:ff:76:50:32:7c:39:da:73:1d:0b:c7:36:14:fd:
aa:16:5f:6b:7d:95:f7:2f:94:d6:33:16:1b:38:c3:f3:23:91:
7d:51:2e:eb:bc:ce:02:36:b9:da:b4:2a:88:5e:5b:59:d5:71:
9b:75:a0:86:57:6f:59:a1:bd:9c:ac:80:8c:64:27:d3:ec:36:
5d:29:b2:87:1d:34:39:0e:3f:95:7a:33:44:9b:14:8b:cc:a5:
45:84:34:7f:01:5f:1f:f7:43:c1:15:2a:dc:cc:6e:72:5e:79:
9c:cc:4b:5b:67:9a:9b:91:af:6d:3b:e2:cc:c0:08:da:e6:af:
14:cf:e6:49:ee:87:69:d0:b4:a5:fb:3c:e2:3a:46:0d:ac:c1:
41:9b:2f:16:30:24:2a:1c:54:2b:a7:33:60:a6:63:05:20:3e:
c8:2e:3d:1c:2f:77:63:5c:1a:c8:be:81:9e:07:3e:e8:1b:40:
67:cb:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:42 2026 by rpki-client