Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: zrOtYek+zSpns3CVVHSGYjYgM6Edhf8Sx0D7vEFuMhQ=
Subject key identifier: 2C:17:FB:E3:F4:EF:63:9C:28:B7:06:FD:02:D4:13:39:80:56:65:C7
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019D9BBE23A17658DAE3B6902B5F1A8C74FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: 5p+ACE1Wqj9bdsT/tIDF55Ln4vhGvFmy9Bvk/ME0c5c=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:23:a1:76:58:da:e3:b6:90:2b:5f:1a:8c:74:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=2c17fbe3f4ef639c28b706fd02d41339805665c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:ad:36:14:5b:61:7b:b0:ff:4a:e8:e1:ed:
e6:16:4e:a3:19:13:24:35:d3:a7:46:b1:9a:2c:af:
e6:03:93:ca:3b:44:63:b1:05:88:25:64:81:98:9e:
e8:34:4c:cf:1a:ce:ec:57:e7:4c:2a:f8:2b:99:93:
81:5b:13:70:a9:f2:3d:3f:f0:af:86:21:20:61:fb:
4d:51:85:8f:7c:53:9f:67:8c:67:53:c2:b7:3c:f7:
b4:b9:bc:55:92:91:82:b1:40:0a:5e:ae:19:ee:43:
7e:c1:25:f2:ef:db:c8:67:50:88:75:9f:40:ea:0d:
3a:89:14:1c:90:85:82:83:af:b4:c4:98:d0:47:c2:
a2:98:55:eb:46:f2:61:ff:83:aa:d9:b7:00:4d:c0:
b1:13:c1:4d:ca:2d:7f:3a:7c:b1:b8:17:58:f1:2e:
ac:1b:ae:d2:0d:70:7d:42:cf:1e:80:f9:98:9f:53:
3d:a2:57:ae:9f:ce:be:fe:6e:d7:15:1d:c1:42:5b:
ba:e2:a9:71:4a:8f:cd:52:23:f4:6e:96:25:f0:4c:
e1:be:c5:47:e2:1b:e2:fc:6a:cf:54:1d:59:e3:37:
f3:e9:29:7d:9f:1a:dd:d8:b6:7a:db:4a:ed:e6:86:
44:e4:36:c1:85:62:ff:65:ae:f4:fa:b5:91:2c:35:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:FB:E3:F4:EF:63:9C:28:B7:06:FD:02:D4:13:39:80:56:65:C7
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:8f:52:20:77:08:fe:c1:18:f5:df:8a:ea:ef:30:76:de:
7b:d6:24:d2:f6:cb:e0:b7:57:85:47:90:38:40:81:9c:de:47:
c1:70:fa:aa:6a:84:7c:f7:e2:35:9b:ce:39:87:eb:b7:52:39:
c1:0c:5e:dc:ea:a5:e2:39:a8:cd:75:a8:10:36:fa:48:ff:7f:
d1:d7:33:e3:f9:f4:c5:8c:47:5f:62:3a:4f:d8:bc:f8:87:f9:
8d:ae:a0:a6:61:41:8d:c8:88:9c:8d:14:2e:27:99:d0:24:22:
52:b3:29:29:24:b4:89:d0:5b:16:fc:ca:5e:3a:00:48:53:d9:
c3:be:20:62:fe:3c:cc:2b:46:60:df:79:0d:ea:16:5e:b3:18:
ce:af:0e:5d:93:71:be:29:ea:b2:70:78:8c:f2:9e:6b:98:77:
ef:dd:14:a5:9f:3f:9c:fb:23:49:8e:60:ab:e1:88:31:4a:88:
63:2d:52:a1:fe:c5:cc:7a:53:7d:e4:57:cb:54:28:ef:b4:07:
36:76:91:9d:99:e5:02:63:fb:d6:44:77:88:aa:8e:7b:cd:16:
cd:b9:cc:d7:a2:78:a5:05:c0:80:c0:9f:64:5b:e5:fa:e4:59:
33:fb:2c:08:4a:76:d4:ce:ba:5f:4e:8c:c2:91:34:ca:36:b0:
ef:dc:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:01 2026 by rpki-client