Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 0bS3k9lQa6ygGuSp1BqsQR0WjKDBpuF0jPpziD21y1E=
Subject key identifier: 69:2E:C1:1D:10:2B:47:D5:85:E5:09:BA:DF:48:6B:40:B8:AA:41:88
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019D99D0536D988CDB446F71DFC94600C2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0FB9
Signing time: Fri 17 Apr 2026 05:00:59 +0000
Manifest this update: Fri 17 Apr 2026 05:00:59 +0000
Manifest next update: Sat 18 Apr 2026 05:00:59 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: jTxwgP7n3hFO7hrdyBvUZGHw/coCmlcSuoEqfLcmT6g=)
2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:53:6d:98:8c:db:44:6f:71:df:c9:46:00:c2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Apr 17 05:00:59 2026 GMT
Not After : Apr 18 05:00:59 2026 GMT
Subject: CN=692ec11d102b47d585e509badf486b40b8aa4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:ed:3a:bb:ad:29:a5:52:02:b7:35:20:3a:
f3:9c:67:ca:03:ec:e3:4a:7e:b6:43:76:a2:bf:ef:
c9:e2:b1:af:f2:14:29:ba:2c:c1:c7:32:c1:e4:99:
d9:2b:ca:c7:c5:84:dd:04:5a:7e:1b:86:1d:dc:a4:
8c:57:c1:5f:43:d9:13:6b:6a:cb:90:72:ab:07:28:
53:07:df:43:82:30:16:2a:2a:6f:2b:2c:3e:60:a6:
01:02:77:e0:90:59:68:42:78:77:4b:1a:b0:6f:40:
46:68:0a:c2:c5:44:00:40:63:d1:bf:7d:14:6a:2a:
0d:24:25:42:fa:05:64:d5:b9:0f:45:2d:53:98:bb:
50:6c:b3:93:99:76:a1:b6:0b:c3:79:67:3f:0f:57:
a1:ba:1e:f0:25:46:2f:5b:72:0e:5b:05:37:e3:e1:
87:2c:85:be:3f:f9:e6:a7:82:8d:09:49:bb:83:5d:
f2:35:fb:73:76:01:73:92:06:9a:4d:20:9d:5a:c5:
fe:a1:c8:df:2f:de:58:26:86:ad:8e:52:44:10:a5:
0c:fc:5d:ab:ca:cb:f2:7e:63:57:24:4c:47:72:f7:
ae:fb:b6:f6:f3:72:a2:69:0c:ea:60:74:67:24:60:
27:ad:6b:1d:67:30:60:6f:b0:55:25:ca:90:13:4e:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2E:C1:1D:10:2B:47:D5:85:E5:09:BA:DF:48:6B:40:B8:AA:41:88
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:b7:2a:7e:4f:4b:a9:87:78:92:40:94:fb:c6:d4:b9:29:
a2:39:94:bb:92:a5:fc:39:16:e4:73:0b:3d:46:8f:64:c3:3b:
b3:7d:4f:91:f6:4f:0d:81:87:bb:aa:7c:2c:3f:af:90:bc:ea:
9e:ee:ac:06:0d:55:f9:7f:d4:d6:b7:b2:86:14:95:ad:0c:33:
0d:f0:04:ab:0e:c4:26:b9:db:ed:33:8f:b9:27:3a:22:54:b9:
5d:21:bd:fc:82:1b:16:c9:38:e9:dd:e0:96:1f:45:b0:90:5f:
09:d7:37:ac:47:e6:da:4d:12:9e:72:d7:7a:dc:f4:eb:f6:07:
60:95:0c:a5:fe:af:0e:3f:6a:85:25:dd:ab:1c:aa:d0:78:6a:
70:9f:b6:ec:42:47:6f:d8:e1:25:f5:63:58:2a:67:1e:2a:a0:
fc:cf:e5:7a:96:0b:9b:dd:ce:c4:95:91:8a:8f:6e:0b:a2:e6:
ee:74:a8:dc:50:62:d4:42:91:f1:1f:1c:2c:39:60:c9:ff:c1:
9c:a9:a0:d5:43:63:d7:0e:27:ca:51:92:99:45:49:c6:f5:5e:
63:0c:be:9e:59:f2:da:04:37:9c:31:db:f0:ee:45:02:a2:8b:
dd:9a:b3:ce:8a:ed:42:f0:2b:f3:52:03:42:06:c4:ee:53:74:
56:c2:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:43 2026 by rpki-client