Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: Ls+SSc/j+Vc4umurDpc1GhScmHuLfe8TklJKYcihbaE=
Subject key identifier: 3C:A5:BC:B9:77:B3:D8:12:F7:93:D6:B5:8C:8D:C7:95:98:95:97:7F
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 019D98BD97B939567C44A0321111DF3A3B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: 025B
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: b56cB+L1HLQdWNudcHdhc5u5PrqxB6ghrL/lT8LVzpw=)
2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
3: dHpkVz1qG-AF-2ObL_WKlgFCa5A.roa (hash: pDto/Hqi4osJfNZa1fOxjtdmxoHJy3MfMIgMhgvqHY8=)
4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:97:b9:39:56:7c:44:a0:32:11:11:df:3a:3b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=3ca5bcb977b3d812f793d6b58c8dc7959895977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:a1:12:4c:07:2d:b3:cf:5e:1a:45:fa:ba:
0a:cc:f2:13:92:d1:8a:d2:89:cd:dc:21:e7:f1:24:
26:73:9b:1f:7a:60:3a:dc:51:e0:11:ca:09:09:16:
db:79:b9:71:d6:d1:0a:af:80:d6:0c:db:88:3b:ea:
e5:2e:cc:e3:0d:05:e1:d8:f6:4a:88:26:ad:8a:20:
c7:d3:df:36:e4:86:b0:43:c4:cb:77:b3:4e:8f:8b:
bb:d2:5d:28:65:c3:30:2d:ec:f2:87:a5:bf:ce:46:
a6:ab:2c:4a:10:25:a9:0b:99:85:15:75:0d:02:35:
f1:e3:ff:78:65:a7:81:38:4d:8c:61:38:d3:16:94:
8d:49:50:8f:a2:f6:4f:45:8e:1f:f6:4a:2a:83:91:
b9:f5:3d:b6:8e:ee:9a:12:ef:a1:77:e3:e7:18:4f:
a9:3b:f5:4b:4d:61:57:7e:7f:ad:06:e7:9a:4b:a1:
90:d9:18:48:bf:a6:98:47:4d:a0:3f:7e:2a:dd:60:
08:a9:dd:48:3f:e9:fa:2d:5b:fa:44:22:51:c4:be:
b9:6d:9e:59:a1:eb:5f:c5:c4:2b:ed:93:48:b0:55:
ca:00:f0:de:39:4a:ea:12:cc:fe:57:e2:aa:f2:20:
12:6a:f3:44:8f:4e:bf:d2:5c:68:4b:95:8f:6b:66:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A5:BC:B9:77:B3:D8:12:F7:93:D6:B5:8C:8D:C7:95:98:95:97:7F
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:34:79:17:20:d6:d8:1e:50:2c:e4:7c:29:6c:09:08:68:
5e:6f:8c:44:6b:d1:ea:0d:6d:56:6c:e3:76:d5:2f:a6:39:43:
4d:a3:de:30:04:c1:17:9b:8f:86:10:ae:fb:10:89:23:6a:40:
ac:01:a8:aa:64:d5:f3:39:d1:f1:34:83:6a:2e:ab:3a:89:fa:
01:05:41:c9:57:f1:bc:5f:f4:ee:de:76:21:7e:77:84:9f:c6:
10:d4:ef:78:31:9f:85:ad:07:75:b5:ff:5e:ed:63:35:22:0b:
85:7a:9e:5a:06:9c:c9:6e:f1:56:e9:47:ac:f4:4b:1e:e2:49:
8b:a5:88:26:2d:b9:8d:77:ac:a4:e3:71:72:c9:e0:58:7f:c1:
8b:aa:85:0e:e3:1b:c2:6e:01:16:ce:49:85:00:98:59:7d:f3:
4c:62:91:bd:85:e5:47:4b:12:3d:ba:4f:c5:f7:e9:15:12:18:
eb:46:ec:a4:e7:02:13:70:0d:2e:23:34:c8:b2:9f:53:77:14:
97:d3:a9:45:b1:d7:53:c8:2b:c2:07:ea:89:22:75:69:8c:b9:
cd:3a:85:00:12:a7:86:68:ee:3e:4a:de:9f:a5:e3:d4:f1:8b:
e6:47:5b:c8:ba:1a:39:4c:b5:84:e6:6d:28:47:ed:cf:2e:67:
0b:94:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:10 2026 by rpki-client