Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: OKGt1E37LQv/8yeeG8Husx+fCp8FqWTYNktR3HJJDk0=
Subject key identifier: FF:C2:5D:CA:75:48:5A:15:59:AB:A7:C6:0D:D2:67:BF:FB:F5:F8:02
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019D9BBE756D4A5CBC1960704E7ACA694C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 06C4
Signing time: Fri 17 Apr 2026 14:00:43 +0000
Manifest this update: Fri 17 Apr 2026 14:00:43 +0000
Manifest next update: Sat 18 Apr 2026 14:00:43 +0000
Files and hashes: 1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: McFgEHt9WHK0N0t78D9iRKLEvZ/oczziSTTMi+MljaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:75:6d:4a:5c:bc:19:60:70:4e:7a:ca:69:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Apr 17 14:00:43 2026 GMT
Not After : Apr 18 14:00:43 2026 GMT
Subject: CN=ffc25dca75485a1559aba7c60dd267bffbf5f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:93:db:d2:6c:a3:db:c1:6c:c3:5b:a5:9c:
71:48:10:7f:ea:f7:f5:99:21:49:cf:d8:53:1f:9e:
de:cc:67:d8:34:59:6c:34:df:be:51:df:80:48:61:
d8:e7:90:41:ae:65:bb:4e:0f:4b:a3:7d:55:ab:e6:
a9:4a:84:d3:49:69:a1:be:99:d6:3b:ed:a1:e4:f7:
d9:69:bd:f1:df:b8:82:2a:f1:bc:6e:a9:76:31:6d:
e6:d5:e8:59:77:f9:38:1d:99:60:f3:ae:bb:b7:5f:
9b:8f:89:18:98:61:a4:35:34:d3:0a:2b:8f:2b:e9:
16:e5:16:b2:54:00:c7:77:fa:9c:c2:77:87:c1:44:
78:7d:8e:bc:e2:6f:85:6c:5a:62:dc:b2:42:81:13:
e3:bb:56:76:ff:9a:23:8a:4f:77:12:e5:04:d5:74:
85:40:ac:93:9d:27:64:20:69:38:ed:6e:24:7d:b5:
2f:38:4f:2e:3e:62:b7:7a:a0:3b:bf:3f:6c:9b:56:
35:f8:06:ba:9d:9a:ab:34:97:88:b2:f6:b6:d7:3a:
9f:b0:a5:63:7a:4c:8d:03:53:a5:e4:57:86:e4:31:
4d:0c:2a:5b:85:f7:69:bc:c6:fd:fd:ba:23:26:24:
0b:0b:52:e1:a9:f6:30:a9:16:12:8c:05:e4:17:51:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:5D:CA:75:48:5A:15:59:AB:A7:C6:0D:D2:67:BF:FB:F5:F8:02
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:28:94:f9:95:34:b5:be:31:22:97:85:f0:d1:92:6d:43:24:
50:ef:98:59:4e:49:33:fd:c0:f1:9b:ce:dc:67:09:d9:27:f0:
0c:b4:f2:9f:9a:43:7d:32:02:84:2e:a0:d2:ad:40:d5:5c:e8:
e5:2f:c8:0f:2d:59:35:11:66:b6:ce:7d:0b:68:b1:64:f9:52:
95:f0:9e:93:c1:d1:21:ac:c5:b7:4c:37:d0:e2:e8:a6:d9:f0:
70:3d:fa:b8:44:5c:b5:39:b1:ff:2a:05:c3:27:f7:cd:35:a1:
4b:6d:21:ca:1c:3b:b3:bd:8b:42:be:e6:74:d8:fa:6a:a7:1f:
b4:d5:1c:71:38:af:76:54:43:e9:60:47:e3:f6:9b:b6:b4:3f:
40:4d:76:f2:f2:fe:ae:76:58:b8:44:ea:06:20:e0:64:4e:36:
59:81:40:72:63:6d:3d:83:92:9e:f3:71:3f:62:ab:87:c2:b5:
b3:22:3d:3d:db:c5:3f:1e:8a:7d:7e:7a:21:c6:a1:9f:c6:14:
c1:c4:58:aa:dc:8d:70:eb:74:f4:14:d3:96:0e:0c:3f:80:b3:
40:ae:e7:ce:bd:df:9b:d3:6a:14:66:f7:99:57:ab:c1:a8:af:
63:11:59:76:a9:93:24:a9:b2:55:6d:c2:01:db:2d:bd:e3:67:
9e:1a:f9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvnVtSly8GWBwTnrKaUxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0
YWFjY2MwHhcNMjYwNDE3MTQwMDQzWhcNMjYwNDE4MTQwMDQzWjAzMTEwLwYDVQQD
EyhmZmMyNWRjYTc1NDg1YTE1NTlhYmE3YzYwZGQyNjdiZmZiZjVmODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9taT29Jso9vBbMNbpZxxSBB/6vf1
mSFJz9hTH57ezGfYNFlsNN++Ud+ASGHY55BBrmW7Tg9Lo31Vq+apSoTTSWmhvpnW
O+2h5PfZab3x37iCKvG8bql2MW3m1ehZd/k4HZlg8667t1+bj4kYmGGkNTTTCiuP
K+kW5RayVADHd/qcwneHwUR4fY684m+FbFpi3LJCgRPju1Z2/5ojik93EuUE1XSF
QKyTnSdkIGk47W4kfbUvOE8uPmK3eqA7vz9sm1Y1+Aa6nZqrNJeIsva21zqfsKVj
ekyNA1Ol5FeG5DFNDCpbhfdpvMb9/bojJiQLC1LhqfYwqRYSjAXkF1FVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/CXcp1SFoVWaunxg3SZ7/79fgCMB8GA1UdIwQY
MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt
MDRmYmQ2ODE4OTZhLzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEtMDRmYmQ2ODE4OTZh
LzEvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiiU+ZU0
tb4xIpeF8NGSbUMkUO+YWU5JM/3A8ZvO3GcJ2SfwDLTyn5pDfTIChC6g0q1A1Vzo
5S/IDy1ZNRFmts59C2ixZPlSlfCek8HRIazFt0w30OLoptnwcD36uERctTmx/yoF
wyf3zTWhS20hyhw7s72LQr7mdNj6aqcftNUccTivdlRD6WBH4/abtrQ/QE128vL+
rnZYuETqBiDgZE42WYFAcmNtPYOSnvNxP2Krh8K1syI9PdvFPx6KfX56Icahn8YU
wcRYqtyNcOt09BTTlg4MP4CzQK7nzr3fm9NqFGb3mVerwaivYxFZdqmTJKmyVW3C
AdstveNnnhr5Eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:06 2026 by rpki-client