Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: k2tbPJuUB4zXS7Ve0WPPE9MElF3HMlw3W4l0WngqSMs=
Subject key identifier: E5:11:19:CE:E4:62:06:92:3E:42:C7:23:A8:F9:0A:21:F9:CD:3E:C8
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019D9AE31951BEC9B09BF3AC246C51762946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0983
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: 9h0vsUYFLuYY3hQhbtCtsOerHIrSaRHWWrVpKawL/zY=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:19:51:be:c9:b0:9b:f3:ac:24:6c:51:76:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=e51119cee46206923e42c723a8f90a21f9cd3ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:4f:a5:57:6f:cb:a8:40:85:18:e4:5f:39:
e2:e2:74:ae:7e:3f:2c:31:07:c9:94:5c:10:16:8c:
f8:09:87:3d:cf:8d:ab:45:66:2a:09:6e:99:38:aa:
b8:66:8c:c1:9e:f2:d0:d0:ef:9e:76:7b:08:b9:3a:
11:8a:76:5d:e5:bb:ee:57:81:42:d8:61:cd:69:27:
82:3b:70:57:29:d8:c2:04:04:98:fa:48:a8:48:41:
4a:ca:78:11:b6:48:a8:15:c3:e6:4d:89:f0:03:0a:
45:c0:92:fe:6c:4f:fd:21:85:78:be:0f:06:9c:58:
76:42:d4:38:b6:26:d9:74:1e:76:4a:81:b6:42:d8:
b2:47:f5:e0:a8:7b:6d:92:62:46:ee:97:39:b1:64:
06:59:1f:3c:08:1b:5b:2a:49:d5:8d:76:31:e8:3f:
66:10:8b:60:46:6a:26:0f:10:76:f9:b1:69:40:57:
0f:31:aa:e9:61:b6:07:14:11:16:01:9f:d6:fd:31:
bf:fc:17:af:3a:db:d4:87:2e:f3:17:39:8c:22:fe:
5c:38:4c:56:bf:99:de:75:17:f6:b6:34:c4:ca:33:
f9:32:91:b4:45:3c:0c:fe:39:c2:fe:1a:6c:1e:9c:
08:e4:1d:03:08:50:40:1d:e4:80:62:72:b2:5f:52:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:19:CE:E4:62:06:92:3E:42:C7:23:A8:F9:0A:21:F9:CD:3E:C8
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:3d:f6:48:b6:53:99:39:4c:86:06:5f:47:74:db:d7:83:
cf:8b:a5:2a:fe:ee:f7:07:84:ca:2f:9c:e0:85:65:ff:2c:b4:
c2:d1:65:2d:a5:a9:4f:4d:9a:4d:e1:2e:eb:0e:d5:3f:b1:e5:
b2:96:c5:09:bf:a8:52:10:8d:9b:07:6f:33:05:95:5e:b7:07:
23:da:6e:bc:01:42:64:da:c5:c8:65:2a:db:65:e9:7e:45:c3:
31:ad:72:37:aa:73:c5:4a:b4:c9:c5:e7:ef:b1:ca:26:22:b0:
b0:bd:b2:e1:b8:a4:76:84:44:bc:79:25:cb:f1:a0:99:2c:43:
26:ba:f5:1b:10:ec:a5:03:d1:0e:3b:97:de:c6:71:99:27:8b:
0c:69:26:e7:a0:f1:1a:a8:63:be:d9:c1:f6:c1:15:b6:4b:6f:
13:e3:93:8c:69:90:e0:40:87:41:da:10:9a:3f:35:47:70:e3:
ce:3d:35:0e:7a:4e:8e:09:0e:8d:be:7b:62:d0:90:e6:cc:9e:
a4:41:79:f5:e8:00:40:c1:8a:68:a2:45:99:1e:40:a7:78:19:
07:c5:9d:14:ff:f3:b1:fa:9c:83:c8:7a:98:f1:db:9e:41:80:
ac:56:e1:1f:92:9d:76:0b:8c:ec:de:88:06:d5:96:cc:f1:f1:
e1:00:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:37 2026 by rpki-client