Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: lFL3kohrhrvE4UnTIQvkZfnjeztOtRiDTG8npqcXzFs=
Subject key identifier: D6:D8:4C:E1:3E:4E:47:0C:06:A8:E2:7F:1A:C9:4B:24:86:19:BC:5F
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019D9C2C68DC22080CF6DD869C005E88CC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 08C4
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: Y8lgJ+lXKCctBRbTPhBCvnLVW99bwTsv5ukXLXQojlQ=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:68:dc:22:08:0c:f6:dd:86:9c:00:5e:88:cc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=d6d84ce13e4e470c06a8e27f1ac94b248619bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:78:7f:54:8c:09:60:66:dc:57:10:20:b9:
05:f5:2d:d5:ce:37:5e:f6:9e:e0:c1:b1:cc:81:cc:
68:3f:97:de:4e:f6:08:7f:ce:13:b0:b4:8d:1d:12:
ef:b3:b4:ef:63:e0:6b:30:c9:6a:e6:4c:32:cb:7c:
54:19:35:4e:3e:50:2e:34:c9:02:cb:e9:ea:10:10:
cb:27:fe:62:93:b4:45:53:9e:83:37:db:56:cf:c3:
80:a0:43:c4:c4:3c:e3:29:45:71:f6:64:fe:de:c2:
63:8a:19:00:e5:eb:43:c6:12:67:24:34:4f:b4:53:
cf:f4:be:eb:e4:c4:80:4f:46:c6:c3:62:db:7b:5f:
c6:d0:b5:8b:d3:42:52:ad:8b:b8:3d:bb:e4:a5:25:
2b:a1:dd:14:eb:95:e3:c9:32:d0:e7:de:93:4b:72:
5e:c4:10:ef:a3:fa:79:68:00:71:04:73:40:7f:bc:
51:6a:ab:8e:dd:7e:0e:da:45:55:9f:da:ae:04:1c:
cc:b4:5c:a4:2f:1e:6b:4f:cb:0e:ff:96:cc:b9:00:
5d:7d:20:16:69:0c:e0:6b:c2:69:81:29:23:11:cf:
9b:a1:10:63:12:ec:36:7e:0d:7b:62:57:95:b4:e3:
3a:30:ad:fe:b5:74:d5:3d:8d:96:18:1a:29:e9:60:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:4C:E1:3E:4E:47:0C:06:A8:E2:7F:1A:C9:4B:24:86:19:BC:5F
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0f:74:af:4a:85:1d:1a:bc:ef:00:4e:46:7e:aa:10:89:7f:
54:9a:71:46:4d:d5:f9:9e:b1:e7:69:6b:0e:14:06:03:19:eb:
6b:bb:86:ba:3b:09:4c:b7:ce:bb:49:b9:7c:b1:bc:a4:7d:d9:
f5:6b:9e:11:c0:1b:4f:36:c4:1d:6d:a1:1d:f4:ba:ea:ab:c9:
10:3a:d1:34:26:56:c0:26:fd:a4:6d:c6:65:76:14:04:67:0d:
94:12:d5:d3:b8:d4:e6:34:e8:99:0d:31:65:23:b7:03:15:77:
de:4b:71:a9:4c:d6:04:5f:eb:74:d0:81:a5:28:b3:2b:68:26:
19:f9:ae:4f:f9:05:48:63:6f:dc:9b:c1:0a:1b:66:ed:ec:51:
d9:5d:a4:dd:cf:e5:bf:15:12:1f:21:44:99:5b:78:d5:e9:35:
1e:3f:6d:59:f2:5e:d2:bb:27:49:c0:1c:ee:e8:f1:fe:fb:22:
01:30:d0:50:b5:bb:54:00:6d:85:fb:25:e5:a9:e2:6d:a5:67:
a8:f7:81:62:51:ad:6a:64:5c:17:70:34:3a:7f:b0:a2:60:99:
45:22:5f:39:62:89:2a:16:8a:65:9d:1b:af:88:e5:60:dc:2a:
d5:a1:31:da:56:4c:ee:d4:98:ca:89:ee:41:5d:9b:be:82:c4:
f4:fc:93:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLGjcIggM9t2GnABeiMyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm
OTgxYTgwHhcNMjYwNDE3MTYwMDQ5WhcNMjYwNDE4MTYwMDQ5WjAzMTEwLwYDVQQD
EyhkNmQ4NGNlMTNlNGU0NzBjMDZhOGUyN2YxYWM5NGIyNDg2MTliYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjet4f1SMCWBm3FcQILkF9S3Vzjde
9p7gwbHMgcxoP5feTvYIf84TsLSNHRLvs7TvY+BrMMlq5kwyy3xUGTVOPlAuNMkC
y+nqEBDLJ/5ik7RFU56DN9tWz8OAoEPExDzjKUVx9mT+3sJjihkA5etDxhJnJDRP
tFPP9L7r5MSAT0bGw2Lbe1/G0LWL00JSrYu4PbvkpSUrod0U65XjyTLQ596TS3Je
xBDvo/p5aABxBHNAf7xRaquO3X4O2kVVn9quBBzMtFykLx5rT8sO/5bMuQBdfSAW
aQzga8JpgSkjEc+boRBjEuw2fg17YleVtOM6MK3+tXTVPY2WGBop6WDpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbYTOE+TkcMBqjifxrJSySGGbxfMB8GA1UdIwQY
MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt
ZjA3YTIxOGUxY2M3LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3
LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg90r0qF
HRq87wBORn6qEIl/VJpxRk3V+Z6x52lrDhQGAxnra7uGujsJTLfOu0m5fLG8pH3Z
9WueEcAbTzbEHW2hHfS66qvJEDrRNCZWwCb9pG3GZXYUBGcNlBLV07jU5jTomQ0x
ZSO3AxV33ktxqUzWBF/rdNCBpSizK2gmGfmuT/kFSGNv3JvBChtm7exR2V2k3c/l
vxUSHyFEmVt41ek1Hj9tWfJe0rsnScAc7ujx/vsiATDQULW7VABthfsl5anibaVn
qPeBYlGtamRcF3A0On+womCZRSJfOWKJKhaKZZ0br4jlYNwq1aEx2lZM7tSYyonu
QV2bvoLE9PyTNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:27:03 2026 by rpki-client