Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 7eYgIaJ0OmPAE6OwQG0Ez0EPPHHjjXO3uvPOaHPNAvg=
Subject key identifier: 63:32:1B:C1:BC:6F:A2:92:30:2E:A4:BD:6F:8A:6C:15:94:59:15:0D
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019D9B50891404F3EA7BB4C50D579FCAF993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1328
Signing time: Fri 17 Apr 2026 12:00:39 +0000
Manifest this update: Fri 17 Apr 2026 12:00:39 +0000
Manifest next update: Sat 18 Apr 2026 12:00:39 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: wJ3w7xdYRDlaCnwX02MAfJXrA/3d5m428MxPa+FODF8=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:89:14:04:f3:ea:7b:b4:c5:0d:57:9f:ca:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Apr 17 12:00:39 2026 GMT
Not After : Apr 18 12:00:39 2026 GMT
Subject: CN=63321bc1bc6fa292302ea4bd6f8a6c159459150d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:67:cb:a1:46:6f:d5:de:b5:43:2c:cb:d1:
4e:59:25:8a:01:59:ed:ea:9f:24:a2:f5:7b:a9:72:
e8:30:73:4d:da:86:f3:d5:80:16:ad:c3:88:45:60:
77:71:d0:ce:96:a3:9f:35:3d:cc:8e:e1:88:3e:fa:
14:5d:1e:d6:27:4f:f1:17:01:1a:70:10:9a:e8:3d:
9c:67:1b:11:0e:f4:0e:7b:41:6c:cc:cd:98:3b:7e:
68:05:d6:56:dd:37:80:ed:41:e2:66:bf:04:94:41:
5d:60:c7:8f:6a:eb:54:86:97:23:a5:2d:f1:a8:1f:
51:20:03:5e:5e:cf:d8:81:be:db:e9:8c:97:8e:9f:
93:29:0e:67:35:9b:39:24:af:c1:38:ab:19:b6:f3:
dc:a4:d4:ec:b2:83:1d:d1:3b:84:f3:4c:df:8b:8d:
a8:73:bf:9f:bb:16:88:99:e6:e6:f2:59:57:f9:d9:
71:aa:ca:78:c3:f2:98:6b:dd:99:05:2a:3c:45:1b:
cb:5d:e6:14:33:fa:26:85:16:3a:83:7a:eb:ba:58:
9f:b6:34:63:40:cb:23:de:5a:d9:d7:58:8a:21:6d:
26:f1:0b:2e:37:ea:c7:f7:95:01:8e:db:7b:65:c3:
a5:32:4f:ee:64:12:ed:8a:8e:e0:fa:87:9f:f8:2b:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:1B:C1:BC:6F:A2:92:30:2E:A4:BD:6F:8A:6C:15:94:59:15:0D
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ca:40:87:96:42:b1:60:3a:93:80:00:09:d5:42:06:34:1f:
81:9b:1e:96:62:f7:32:1f:3d:23:89:4c:d2:7e:92:09:01:49:
8e:5b:c5:a0:e4:7b:1d:0a:c7:4c:7e:fc:fb:fe:1e:c7:de:8d:
75:3b:05:84:a5:6e:aa:12:7b:c4:42:fb:3e:ea:ad:5d:3d:d0:
ca:38:4f:22:4f:d0:11:b1:82:cc:b5:d3:9f:cf:0b:65:82:0e:
de:05:a7:da:cf:c7:3b:a2:d9:4f:54:8f:c5:49:5d:76:2a:06:
63:9f:ae:1b:6c:b4:2c:34:01:cf:1a:49:03:f4:5b:96:ca:3e:
a1:e2:38:cc:30:ba:c8:6b:83:db:47:a3:76:b7:99:82:e7:af:
fe:7f:ed:de:4d:db:83:a0:09:1f:75:0f:01:90:8b:4f:57:37:
71:91:bd:da:b5:1e:c4:0c:3e:05:c8:98:92:a8:16:e3:8c:0c:
c2:35:01:3f:3c:bb:3a:0b:c5:00:1b:db:d1:6e:6e:9c:f8:2a:
0f:03:e6:17:57:de:44:4a:64:49:eb:19:0a:e0:f2:13:6c:e6:
e4:ba:19:c1:b9:b9:47:53:52:84:48:c9:d7:37:a2:39:27:0e:
ce:5d:1c:29:e0:60:f4:27:7e:40:81:ef:0c:f8:28:e0:f6:e7:
22:63:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:26 2026 by rpki-client