Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: /O+RWtE8hK/eYA8Mr7rb6qz13aW3dtJwHfP024tuLV4=
Subject key identifier: 99:8A:FB:06:3E:02:04:CD:3B:B3:59:B5:7C:B0:5A:8A:A9:7C:17:02
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019D9A06F79184B5642C4FC80EDB00A0FA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0841
Signing time: Fri 17 Apr 2026 06:00:40 +0000
Manifest this update: Fri 17 Apr 2026 06:00:40 +0000
Manifest next update: Sat 18 Apr 2026 06:00:40 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: p1BZQ0IZ1+33zULVMwjApGdMqOb3LAR2BN465kDxC48=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f7:91:84:b5:64:2c:4f:c8:0e:db:00:a0:fa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Apr 17 06:00:40 2026 GMT
Not After : Apr 18 06:00:40 2026 GMT
Subject: CN=998afb063e0204cd3bb359b57cb05a8aa97c1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:81:3c:cd:ac:93:0b:d3:43:b7:3c:75:f3:
99:44:67:fb:98:93:92:a0:cc:c0:12:d9:e1:e1:33:
9d:e8:6b:18:18:4b:22:ea:19:36:85:2e:a7:84:e1:
e6:4b:81:04:4f:45:7c:3c:ff:c5:82:5d:76:a1:f3:
a0:8f:6f:04:7e:f2:ba:79:ee:50:f9:73:9e:1a:50:
86:ca:74:90:40:35:d3:40:8f:fe:d4:e3:ba:fe:6b:
97:54:02:8d:f1:73:eb:42:b6:ca:37:bd:59:32:6f:
ca:80:c6:21:72:80:58:36:80:e7:82:b2:82:c4:be:
2d:d5:04:bc:83:fd:8a:15:20:96:4d:a6:4f:09:d5:
4b:41:03:de:28:26:ec:f7:a4:ad:0b:86:86:a3:52:
64:c7:c6:2a:e4:15:f3:00:15:35:2c:37:b1:d7:a6:
36:03:56:c7:77:79:ee:7e:4e:29:d2:e7:97:43:be:
54:6e:64:af:30:a6:1b:1c:9c:ce:18:f1:2b:df:e9:
ca:a2:ae:ba:b8:93:2f:56:af:40:4c:45:24:cf:18:
3e:f2:e4:2a:a1:ed:59:7d:69:c8:09:38:a4:d3:b6:
22:ee:35:8a:e0:7c:9b:85:04:3f:ba:c9:c7:4d:f9:
30:4c:46:c6:e2:01:5d:d9:17:95:02:cd:59:88:69:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:FB:06:3E:02:04:CD:3B:B3:59:B5:7C:B0:5A:8A:A9:7C:17:02
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1f:d7:15:d2:73:bf:86:f1:d8:43:65:99:22:ea:0b:60:05:
7c:c6:a6:77:e0:cd:9b:36:cf:39:40:d4:d8:20:36:6f:72:ef:
9a:6f:03:98:31:17:b4:69:92:e7:9d:af:bd:4a:78:18:5b:4f:
e0:5b:32:0a:24:bc:7b:60:81:d8:73:b6:4a:b6:85:eb:67:22:
12:a0:13:86:de:46:32:b9:71:9d:76:f9:c2:66:9c:d3:cf:07:
d5:db:24:82:49:0d:92:32:6d:20:13:bc:07:23:c3:97:1e:67:
f4:48:58:93:51:11:1b:33:05:6a:95:d5:b4:d3:ce:f0:b0:94:
8a:ef:05:eb:a5:e6:d8:52:78:79:5f:48:1d:27:6a:3d:18:33:
f2:70:e4:75:65:0a:70:90:1f:1a:b8:9d:5e:40:0b:98:60:3b:
9b:21:75:28:3b:54:ed:28:8d:86:8a:96:98:eb:d3:63:3a:e1:
5c:95:c4:13:c4:95:d7:d1:45:9e:c0:2f:1e:64:7e:1e:2f:35:
2b:0c:1b:05:a0:98:a4:a7:96:a1:d4:ab:14:2a:8d:2a:62:13:
d3:34:2e:44:65:2b:4d:17:22:1a:0a:5b:81:73:ae:86:7e:2a:
9f:64:ea:d1:ce:38:aa:3e:c0:bf:de:9d:b6:f9:de:84:81:fe:
24:ef:13:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBveRhLVkLE/IDtsAoPp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjYwNDE3MDYwMDQwWhcNMjYwNDE4MDYwMDQwWjAzMTEwLwYDVQQD
Eyg5OThhZmIwNjNlMDIwNGNkM2JiMzU5YjU3Y2IwNWE4YWE5N2MxNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80WBPM2skwvTQ7c8dfOZRGf7mJOS
oMzAEtnh4TOd6GsYGEsi6hk2hS6nhOHmS4EET0V8PP/Fgl12ofOgj28EfvK6ee5Q
+XOeGlCGynSQQDXTQI/+1OO6/muXVAKN8XPrQrbKN71ZMm/KgMYhcoBYNoDngrKC
xL4t1QS8g/2KFSCWTaZPCdVLQQPeKCbs96StC4aGo1Jkx8Yq5BXzABU1LDex16Y2
A1bHd3nufk4p0ueXQ75UbmSvMKYbHJzOGPEr3+nKoq66uJMvVq9ATEUkzxg+8uQq
oe1ZfWnICTik07Yi7jWK4HybhQQ/usnHTfkwTEbG4gFd2ReVAs1ZiGnS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmK+wY+AgTNO7NZtXywWoqpfBcCMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkh/XFdJz
v4bx2ENlmSLqC2AFfMamd+DNmzbPOUDU2CA2b3Lvmm8DmDEXtGmS552vvUp4GFtP
4FsyCiS8e2CB2HO2SraF62ciEqATht5GMrlxnXb5wmac088H1dskgkkNkjJtIBO8
ByPDlx5n9EhYk1ERGzMFapXVtNPO8LCUiu8F66Xm2FJ4eV9IHSdqPRgz8nDkdWUK
cJAfGridXkALmGA7myF1KDtU7SiNhoqWmOvTYzrhXJXEE8SV19FFnsAvHmR+Hi81
KwwbBaCYpKeWodSrFCqNKmIT0zQuRGUrTRciGgpbgXOuhn4qn2Tq0c44qj7Av96d
tvnehIH+JO8TsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:43 2026 by rpki-client