Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: pHR4T0AudmLKUKX9RupkXe8w2UEKqsCZSspIKoHEPio=
Subject key identifier: E1:AC:65:04:D9:53:02:29:7B:61:E2:3B:07:43:0C:DC:E7:14:65:F2
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019D9C2D487AFE147C38D350A6F26EADBA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 1288
Signing time: Fri 17 Apr 2026 16:01:46 +0000
Manifest this update: Fri 17 Apr 2026 16:01:46 +0000
Manifest next update: Sat 18 Apr 2026 16:01:46 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: XuovV8jYrNKCYaecneVKd3AK3HmPib4IvqsRgDFgPP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:48:7a:fe:14:7c:38:d3:50:a6:f2:6e:ad:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Apr 17 16:01:46 2026 GMT
Not After : Apr 18 16:01:46 2026 GMT
Subject: CN=e1ac6504d95302297b61e23b07430cdce71465f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:b7:07:98:cc:81:8e:6d:cb:15:98:b0:34:
26:f9:2f:7d:da:c8:14:6e:73:06:57:30:d1:26:90:
bf:98:89:b2:30:80:71:26:a3:72:5d:fc:d8:7b:64:
b9:d6:31:ea:f2:be:e3:17:1d:d0:2c:a5:ec:bc:c1:
5d:d6:58:31:cd:74:bb:98:d6:b6:5e:53:53:e0:f5:
ad:b1:aa:62:e3:bd:29:fa:93:51:bc:8c:62:da:2e:
88:5b:c9:cd:a0:20:23:8d:14:6c:e1:64:ad:75:8f:
bf:4a:f9:cc:0b:06:92:43:9d:58:e6:73:7d:ef:97:
30:a4:a4:77:fd:7c:b0:84:c5:08:a5:80:cc:0e:19:
b6:96:16:33:61:ce:44:5f:c6:89:fe:f7:d4:1d:fc:
7d:58:78:57:76:02:d5:c8:90:a2:91:a7:21:25:b4:
68:d3:96:7f:20:89:c4:a4:e7:45:4c:f7:d6:61:0b:
fd:c4:cb:21:dd:0d:c1:1d:b5:c3:96:94:db:6a:b9:
19:60:c8:26:b5:5d:af:56:c3:09:52:ac:94:3e:6e:
59:cf:f6:2e:31:74:af:c3:d7:da:01:78:00:40:55:
3f:87:5a:2c:3b:b6:01:b1:7e:8c:33:79:87:b8:53:
ca:ca:f2:a4:9a:f9:bf:e1:40:69:b2:56:2b:93:13:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:65:04:D9:53:02:29:7B:61:E2:3B:07:43:0C:DC:E7:14:65:F2
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:3d:66:3b:a5:ef:11:34:e9:c6:2f:5c:2e:b9:dd:96:ff:
ed:6d:fa:bb:9e:70:3c:19:c9:fc:93:16:2d:0b:34:81:fd:77:
9b:af:90:7c:78:f1:34:53:5a:c2:34:e7:84:18:1f:b8:7f:c1:
f4:9b:4d:02:cb:7f:4f:2d:8d:ab:c4:d3:42:b8:ad:b1:f6:17:
34:28:5d:62:1f:af:4c:16:09:c0:2e:45:d3:4e:d1:b5:91:df:
2b:ca:44:4f:56:08:78:63:da:c7:d7:bd:bb:c7:e8:34:1e:1b:
c8:6a:79:b8:b2:fe:d9:9f:f1:91:b2:27:2e:45:20:98:4b:3c:
0f:f2:8a:d5:9c:5f:40:ea:7e:0c:12:b3:72:09:99:8f:d2:d2:
1b:1a:ff:b4:fc:a3:6e:61:45:78:b4:59:e8:76:8f:c0:8b:b2:
ea:cb:3d:e9:64:85:d4:14:64:1a:f2:34:18:35:39:1d:17:7a:
93:51:82:f1:f4:c3:52:48:59:6b:de:cd:18:09:4f:fe:9e:92:
bd:b0:31:b8:49:77:a6:a7:29:5f:e5:8b:48:ac:3e:8a:b0:11:
34:11:e0:8b:89:c3:c2:4b:52:65:6e:e9:ad:86:3d:3e:e2:91:
83:ed:46:ed:ce:84:39:6f:fd:ee:5c:6d:cd:7e:74:81:bc:6b:
71:28:81:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:44:15 2026 by rpki-client