Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: 53qvx4WSr/qNg+aD6F1H44hWt8KSdjr2VDfmkU40Xgo=
Subject key identifier: 2D:2F:5F:2C:9D:2E:FE:1B:9B:59:7C:B8:52:CA:BD:77:12:0B:F2:D5
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019D98F4A646F5ADD36FF0B7C693F159D7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 1045
Signing time: Fri 17 Apr 2026 01:01:03 +0000
Manifest this update: Fri 17 Apr 2026 01:01:03 +0000
Manifest next update: Sat 18 Apr 2026 01:01:03 +0000
Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: OBTtOmja5f+NoIHFST+KJ0TxtC/hve5HXl2YPHUU4lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a6:46:f5:ad:d3:6f:f0:b7:c6:93:f1:59:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Apr 17 01:01:03 2026 GMT
Not After : Apr 18 01:01:03 2026 GMT
Subject: CN=2d2f5f2c9d2efe1b9b597cb852cabd77120bf2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:b8:87:b0:01:43:68:b3:e3:57:7f:f3:2d:
a8:6c:73:56:ab:2f:45:44:fa:82:34:75:90:38:f3:
f2:10:91:eb:90:61:e4:f2:68:64:68:ff:c7:7f:6b:
76:7e:93:79:1f:4d:86:30:2d:12:65:50:1e:7f:28:
f5:f2:c2:5c:60:ce:2c:48:6b:d6:d5:ed:aa:c6:70:
2b:bb:56:a5:25:c1:68:83:2d:fb:05:5d:8b:83:06:
3a:5e:34:1f:07:20:3b:2e:db:5f:39:4d:b1:67:8f:
1c:f4:95:1c:db:14:33:07:45:c1:0e:71:c9:6b:c2:
a2:b9:3e:a7:34:71:8e:1e:01:ec:11:bd:5d:73:58:
a6:ae:27:59:2a:45:01:21:ef:7b:7f:9b:24:52:f3:
09:a6:aa:24:00:27:df:58:dd:fd:d2:b4:39:98:23:
b2:10:ff:a0:e3:98:00:c8:46:eb:69:d6:95:be:10:
82:f5:e7:e9:c3:a5:bb:20:8f:ab:9e:d7:41:2b:35:
17:71:a0:61:19:ea:03:91:d0:fb:6a:6b:5f:23:71:
29:a4:54:25:ab:80:90:3e:cf:6d:13:ba:b9:d7:86:
07:6c:21:6b:f7:cc:c2:be:bc:d9:11:17:9e:6f:72:
50:49:c9:10:58:0d:1f:6b:90:d6:63:85:bc:8c:8f:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:5F:2C:9D:2E:FE:1B:9B:59:7C:B8:52:CA:BD:77:12:0B:F2:D5
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:be:0f:3a:d8:a6:a6:0f:90:df:c9:72:a7:1c:fa:4f:c2:91:
75:de:28:d5:6f:46:2e:10:80:97:17:64:46:9b:55:5b:ff:bc:
4b:4d:fe:78:d6:9e:a3:fc:7c:f2:f1:eb:5b:8a:c5:93:4b:e6:
02:4e:5f:06:23:c8:bd:85:f9:8b:63:cd:f7:d0:2d:ba:17:e4:
47:8e:1c:ea:1e:8f:00:03:48:0f:91:ff:37:d4:e6:5e:66:13:
58:72:6b:11:63:ac:53:d7:b0:12:be:ef:89:b9:a1:5a:b2:2a:
57:64:91:26:13:8f:ee:33:a0:a1:e9:a8:6f:9b:43:24:34:e5:
68:08:f1:01:93:c5:26:db:e0:9c:6e:a5:e0:16:07:3f:26:f0:
2e:8d:50:e3:84:87:df:8b:60:3a:9c:2a:2d:2c:7c:e9:c0:f8:
cf:b3:31:6e:ca:8e:3d:e1:a6:57:32:5f:1d:3c:9c:35:18:94:
c2:69:c0:29:37:c7:d7:b9:1e:2f:b8:c3:73:7a:13:c2:1d:dc:
ac:00:6b:03:b8:81:49:37:09:3b:b8:37:e3:ae:99:92:e9:2c:
58:f9:a0:b5:77:f4:b2:00:7a:85:35:1b:24:72:97:71:27:8c:
53:5f:3d:e9:30:87:be:99:af:c9:bd:51:6e:3b:f6:7b:43:47:
48:85:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:34 2026 by rpki-client