Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: IY/EL0czKMtVdHj6RP4NfDZ1MeJlzAl6MmLelMy9cWU=
Subject key identifier: BD:A3:C6:1B:E3:78:36:45:73:4A:2E:40:EB:76:55:93:74:83:62:41
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019DA52F983D23EE9FA4691E1846F5DE1E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 122E
Signing time: Sun 19 Apr 2026 10:00:52 +0000
Manifest this update: Sun 19 Apr 2026 10:00:52 +0000
Manifest next update: Mon 20 Apr 2026 10:00:52 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 0gbnnX1QW2+0PQ3QAbX4We5hyFui25ko4eL2hbWAUrs=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:98:3d:23:ee:9f:a4:69:1e:18:46:f5:de:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Apr 19 10:00:52 2026 GMT
Not After : Apr 20 10:00:52 2026 GMT
Subject: CN=bda3c61be3783645734a2e40eb76559374836241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:64:5d:40:ce:94:a6:e3:4f:fb:fe:74:1f:09:
22:39:5d:e2:f4:3c:ea:b3:e1:86:3c:49:d9:ba:a4:
2a:e4:c2:1d:35:b7:1b:24:46:90:6b:1a:64:b8:bf:
ed:3a:41:fa:a4:55:96:b9:b0:68:c7:d7:1b:e2:79:
df:ac:34:a3:5d:da:aa:be:ca:3d:86:1f:b3:21:24:
4a:ea:45:67:27:68:20:31:cb:15:50:3d:46:f6:b1:
89:f8:1c:67:4e:5d:33:d8:06:ea:80:42:33:8a:90:
07:26:70:d6:28:c4:b5:1b:b7:97:f2:42:b7:d8:1d:
36:b1:e2:09:7a:61:90:6a:ac:45:be:57:6f:51:a6:
d8:ca:77:64:89:19:d8:fe:8b:7e:a9:b2:a0:dd:5a:
18:85:38:b3:49:14:91:45:92:74:8b:35:2a:9a:48:
8e:f5:8c:c4:89:eb:2b:80:42:a5:4e:1b:f8:a6:8b:
31:91:b4:c4:dd:34:91:43:86:15:f7:48:20:4e:03:
22:e8:04:02:8a:5b:7a:be:c9:4b:1c:75:50:91:8d:
86:3f:14:40:69:db:6d:03:71:43:a5:75:d8:9b:be:
96:4f:04:36:ec:bb:45:53:e2:a1:6f:66:e1:f2:cc:
c4:f0:97:fc:fc:17:39:71:af:14:81:5d:5f:9f:61:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:C6:1B:E3:78:36:45:73:4A:2E:40:EB:76:55:93:74:83:62:41
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:73:af:6d:b6:aa:a5:89:82:62:f5:a1:92:67:cb:6f:b9:
54:f5:f7:75:5e:81:97:36:b8:f2:b9:d8:78:ab:ab:ab:e6:7a:
d5:d7:22:41:33:41:9e:e1:71:f8:c4:7e:4d:a9:12:08:9b:2a:
4b:75:22:be:1d:0d:12:c9:0f:a5:ef:23:86:de:63:70:57:7a:
30:de:d4:95:57:b1:8b:27:02:e8:1c:c0:db:5b:58:df:5e:19:
00:02:76:bb:c9:a5:ff:ca:63:18:80:c4:1a:f0:0f:07:0c:df:
e6:58:cb:c1:e0:19:2f:1a:b2:f0:67:04:37:8e:af:35:7c:98:
75:a3:7b:85:67:22:24:ee:fe:75:a6:7e:fa:d2:ac:56:d6:55:
b0:79:23:e2:2b:c0:de:5f:fd:6f:45:58:15:f5:cd:71:31:7b:
a8:d0:06:97:10:db:e2:5c:2a:58:bf:ea:a2:5c:9c:1b:5f:7a:
d0:dd:8a:76:e6:00:ba:78:a0:f5:fd:20:b0:41:0e:cf:a4:fe:
d6:f7:a3:28:d5:06:10:b4:36:ea:d4:38:79:a6:b1:1c:36:89:
88:7e:56:70:34:01:d7:8f:eb:6c:02:88:43:ae:b8:45:6c:33:
90:8a:da:6d:f1:8b:6f:2d:b1:c8:21:24:1c:ab:df:bf:07:1e:
0b:8a:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:12 2026 by rpki-client