Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: L804GlU9YW7+oCkfFgF/CvS9M27J+IqTLUkbGBzq8iM=
Subject key identifier: EE:72:67:D3:2D:77:B3:E2:1A:BB:09:76:82:68:B9:E3:1A:61:80:DB
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 019D9AE3260928154E3BEC7854FEB8063D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0581
Signing time: Fri 17 Apr 2026 10:01:10 +0000
Manifest this update: Fri 17 Apr 2026 10:01:10 +0000
Manifest next update: Sat 18 Apr 2026 10:01:10 +0000
Files and hashes: 1: 0tKNTcvutgmi05GASWx0PEyILOY.roa (hash: k6mCxAxzoTinU1/sVxlPB9SrgDwj5jJNmOfkRFaU9RA=)
2: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: LzwUdme2cuTnW64+GADV2iTOcJAP1w32VeAjTTPxong=)
3: yrmrEDHLdh4dBGFaTpIBDSACdaQ.roa (hash: hNsr3+1Zh+bCK1vX9YSv52aqxq01DCYHfc2YnV/y8Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:26:09:28:15:4e:3b:ec:78:54:fe:b8:06:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Apr 17 10:01:10 2026 GMT
Not After : Apr 18 10:01:10 2026 GMT
Subject: CN=ee7267d32d77b3e21abb09768268b9e31a6180db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:81:e2:17:02:bb:df:43:f0:b1:69:a1:8e:
be:f3:c7:34:6f:b9:ad:99:98:64:68:37:39:ee:9a:
89:56:ff:15:67:8b:23:99:c7:b1:a4:3d:5a:fc:ec:
ce:34:eb:e0:28:a8:c9:ac:18:e8:75:41:11:18:f1:
ca:d1:18:25:b4:41:1f:7a:da:64:13:93:c7:ea:89:
ba:cb:bd:a5:37:0f:36:a3:dc:e7:20:d0:50:e8:cd:
89:f6:3e:88:e5:87:4c:c2:c4:d9:5c:42:43:36:87:
0a:d2:75:9d:04:8d:00:3b:e8:db:85:f9:f0:50:5a:
49:0b:a5:87:f1:04:ef:7e:14:0d:fb:0a:ab:d0:5c:
84:f5:7e:78:b4:ef:10:39:83:b0:4e:09:f6:65:fb:
3a:e5:7c:99:73:68:1c:89:a3:cb:a5:b2:f4:b1:cc:
54:ff:0c:bb:c9:d4:61:fb:ed:88:36:09:97:e8:af:
3d:e3:52:a8:96:38:8f:4b:7e:c9:7f:34:b7:d4:09:
3f:9d:39:72:37:df:2d:c2:78:93:9b:48:0b:5d:5d:
a6:bc:7f:4f:bb:55:55:2e:cd:95:08:37:dc:df:e0:
0d:b9:47:4b:1b:90:8f:50:fe:3a:44:32:77:b1:d7:
ec:be:3f:77:f7:fe:39:20:bb:f1:b8:78:b0:57:c6:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:67:D3:2D:77:B3:E2:1A:BB:09:76:82:68:B9:E3:1A:61:80:DB
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b3:4e:75:98:81:a1:b3:a7:8c:43:b8:ff:21:fb:b0:f9:39:
ff:38:63:d8:e8:02:78:fd:b2:1a:6e:2c:a6:b0:5d:35:12:8b:
d7:61:42:37:4c:76:5c:de:0a:bc:f0:27:f3:fc:0d:61:97:41:
d9:c4:68:24:3d:be:f1:d5:4c:a6:37:a8:bd:90:7b:af:dc:d9:
c0:3d:bf:68:91:88:d8:ae:ba:6a:ec:9f:2e:34:1d:7e:30:01:
73:78:c6:fb:ca:36:85:6d:67:91:90:82:48:60:af:fa:3c:8b:
f0:ec:fc:87:4d:98:70:98:96:9e:68:46:1d:3e:6f:89:0f:7a:
f2:82:d6:8b:99:2b:c7:73:72:e8:60:c4:46:f4:8b:d4:29:8b:
4a:b2:c5:6d:46:9a:58:67:57:7f:79:cc:99:0e:23:a3:4d:cd:
3c:08:3b:67:15:b0:bd:c8:45:d9:47:2a:73:ae:ed:07:89:52:
3b:b1:c7:ea:1f:ff:61:4c:3d:a0:8b:45:82:04:a5:f9:01:98:
55:13:a2:57:76:53:51:e3:dd:01:1b:8c:07:f1:fd:0d:81:b2:
53:5c:69:80:67:ed:5a:1b:07:1a:f0:18:6f:2f:8f:89:5d:dd:
dd:68:d6:02:88:ac:dd:c9:d2:28:26:e5:a0:99:cb:9d:8b:c0:
45:b6:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:42 2026 by rpki-client