Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: GFbE/lUetBT69pziaOGsSaP7ADHh9qNxBqFNIF6fzE4=
Subject key identifier: 8E:E5:D2:C2:86:A9:5D:2F:B1:1C:F2:BE:45:6E:5F:32:B5:5C:C8:A6
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019DA3AEA1A1AF1AB39218404169531468F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0D34
Signing time: Sun 19 Apr 2026 03:00:23 +0000
Manifest this update: Sun 19 Apr 2026 03:00:23 +0000
Manifest next update: Mon 20 Apr 2026 03:00:23 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: 9nUfUJfeIgpp5LAfDyWhsyq4X3BKl+D/vwkM8F20hEQ=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:a1:a1:af:1a:b3:92:18:40:41:69:53:14:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Apr 19 03:00:23 2026 GMT
Not After : Apr 20 03:00:23 2026 GMT
Subject: CN=8ee5d2c286a95d2fb11cf2be456e5f32b55cc8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:8e:e4:fe:a0:3a:af:fa:9e:ab:23:84:5b:
d7:e5:b4:f1:01:5c:84:3b:05:f8:8f:08:78:0f:d9:
7b:1f:40:98:3e:40:f9:1c:9c:80:a4:1b:b0:1e:35:
28:4e:d4:22:ca:87:c9:cb:2d:fd:bc:4e:8b:d0:51:
e8:71:ad:4f:bb:6e:07:90:66:1b:8d:b0:7c:29:17:
10:34:89:35:0a:f1:86:62:7a:9f:28:2e:89:1e:54:
cf:46:2f:cb:9c:32:11:e6:ef:4f:cd:e9:d8:e3:9b:
94:8f:1d:d8:ce:79:23:f4:dd:45:de:01:c3:39:9f:
1c:8b:f1:04:85:42:ed:6d:18:d1:3f:70:9b:5e:f6:
67:a4:73:7b:1b:8e:5d:e7:2f:11:f9:4f:45:25:69:
a2:d7:55:1f:4d:bb:54:a6:c1:d2:08:eb:c7:81:da:
c4:ab:c2:7b:54:e3:65:c6:fa:cd:31:fb:31:b5:8a:
ae:d7:79:6f:f9:78:eb:64:dc:4a:d4:db:e1:02:c4:
2a:96:38:6f:f7:d1:05:16:91:54:f5:01:ca:3e:fc:
b0:59:c7:3a:0d:72:b1:ce:0b:3f:3a:42:4b:4f:82:
ff:a6:48:3d:d5:e7:9e:e3:a2:ff:08:4a:5d:5e:cc:
82:e6:31:14:20:83:d5:1e:15:80:f7:07:de:0f:fe:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:D2:C2:86:A9:5D:2F:B1:1C:F2:BE:45:6E:5F:32:B5:5C:C8:A6
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9c:ee:ec:fe:7f:3b:49:a5:3e:fa:9d:15:42:2d:a0:e9:57:
cf:65:de:12:b1:b5:85:15:4b:9d:00:66:53:eb:9c:15:d9:ea:
94:53:1a:cc:10:19:7a:d2:04:56:db:c6:68:1d:b6:b4:e8:59:
f3:c2:ea:22:ce:38:05:c3:fb:d3:9d:77:9c:77:11:ed:74:01:
0d:39:85:b1:b1:94:fd:82:24:75:69:80:d7:02:7d:18:e8:47:
a2:a3:d9:47:cd:1c:4f:29:33:e7:f9:23:a7:a7:bd:42:75:a8:
ea:16:b2:87:23:de:79:b0:ae:25:3a:be:61:dd:6d:41:cd:30:
e5:6e:af:4a:4a:d8:bf:95:45:e6:1a:c3:25:8a:52:27:bb:49:
df:42:06:b5:fe:66:c2:94:9c:0b:b2:e6:d8:d6:88:b7:29:f7:
e1:13:94:a2:43:03:cf:07:54:85:14:88:1a:7d:ed:da:fa:09:
32:35:ba:44:a6:94:85:27:22:9a:c8:d8:3e:57:51:8c:62:48:
75:19:68:a4:b3:b6:5d:de:67:cf:c8:3e:48:03:ee:53:25:04:
fe:86:f8:39:86:c7:84:22:47:c4:65:cc:1a:45:27:04:86:05:
9f:a5:9b:31:fc:05:c9:04:4f:5e:3a:09:d6:2a:49:cd:8a:c0:
16:d1:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:55 2026 by rpki-client