Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: XvI7IRiX9IbWm3gf/YB0HDsQaKOLkzOVgMzoUGgl0T0=
Subject key identifier: 36:DA:FD:71:22:3A:91:61:B1:F3:6B:35:A5:31:09:B0:5C:DF:45:BF
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 019DA378F8A164EC99EF20627FF36DEECD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0FC0
Signing time: Sun 19 Apr 2026 02:01:47 +0000
Manifest this update: Sun 19 Apr 2026 02:01:47 +0000
Manifest next update: Mon 20 Apr 2026 02:01:47 +0000
Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: kq6vBuyZrrLxc9hp5eUkCzPHN5K3tiQ8n00IxUrXbdc=)
2: foPJ5M9ZOVkGAWVnVqDC4Cs4-NU.roa (hash: 1DlyQW+RNTimUxXGNa+g3AQuv/uMpZoTB33IBxZu3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:f8:a1:64:ec:99:ef:20:62:7f:f3:6d:ee:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Apr 19 02:01:47 2026 GMT
Not After : Apr 20 02:01:47 2026 GMT
Subject: CN=36dafd71223a9161b1f36b35a53109b05cdf45bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:0a:ba:f7:c7:d9:34:18:8a:04:a1:22:d6:
14:76:77:70:da:47:53:0f:10:95:1f:4e:51:20:a1:
3f:d4:de:69:a2:7a:d3:e5:a0:a2:55:13:5e:88:95:
16:39:e2:5c:3d:3d:54:3b:10:15:11:73:9d:90:7e:
0b:a5:99:08:c9:80:9e:5f:d0:58:54:d7:6e:65:02:
e7:a2:12:12:39:7f:f5:96:1f:93:6b:bd:c7:4d:56:
61:48:6d:11:3e:89:03:33:12:38:7e:e5:51:db:f5:
b1:0a:dd:b0:7e:05:fa:fa:5d:56:04:07:f0:45:90:
22:e6:0c:53:d1:97:bb:45:46:76:fc:11:06:94:66:
11:5c:a2:78:92:4c:63:68:e8:0f:52:fd:ff:45:d9:
78:f5:19:5e:7c:09:65:c8:bf:54:53:21:47:19:fd:
c0:7f:c0:55:02:23:19:14:4e:49:a8:10:bc:1c:a1:
4d:bf:10:f0:fa:55:ca:71:a8:34:4f:d1:30:bf:19:
ea:9b:9d:be:94:4a:6e:fa:63:10:3d:92:b4:4a:e7:
8c:19:1b:fa:bd:28:2d:df:d2:37:6e:5f:cf:32:f6:
5d:f8:a0:26:f8:ad:e1:3e:f3:3f:de:07:3e:04:fa:
ae:68:11:b4:a6:0e:b4:8f:73:00:2a:3c:c3:a7:93:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:FD:71:22:3A:91:61:B1:F3:6B:35:A5:31:09:B0:5C:DF:45:BF
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6f:a9:37:3f:21:6d:64:f6:fe:ef:fb:03:06:fc:66:c3:8e:
81:81:98:a4:ea:ff:e8:f8:b4:ef:24:05:b4:5d:c1:c4:f5:a7:
93:55:83:73:98:af:ea:c8:fa:2a:d0:31:26:2b:04:90:ea:65:
c2:9e:7a:6b:ae:4c:ad:4a:50:d1:23:77:1e:f6:49:37:d3:21:
e1:bb:6c:cb:65:74:01:ff:9c:d4:16:3f:4d:bd:7d:4c:60:4e:
f1:e4:25:29:f1:d7:c4:f9:9c:2e:35:65:95:70:67:50:30:eb:
51:d4:30:19:3b:5e:9d:60:9c:2d:3a:f1:4f:f6:65:fa:be:cc:
17:c6:2b:06:7b:89:74:f9:4e:9c:65:78:55:b8:82:25:c7:45:
07:fd:cf:6c:b8:8d:b9:e3:c1:f6:07:6a:03:df:0e:5a:27:30:
6d:27:af:4d:c4:55:03:25:83:03:c5:0f:e3:27:74:c2:e8:f6:
75:7e:d4:dc:1f:d0:10:3c:89:8f:7c:25:29:a2:3d:9f:22:9b:
cd:8b:73:f7:98:5c:ae:e9:49:6c:7b:e0:a3:47:27:ec:cf:4b:
0f:b4:40:89:4b:27:f7:bb:91:6a:43:1d:fb:11:18:ee:cb:5a:
4d:ac:7d:92:b0:77:e2:9d:e6:5a:13:21:57:36:b2:7f:df:4c:
2a:09:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:49 2026 by rpki-client