Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: +aMTWav7LXBzuYrBUAx397IyAKozd72Zh4/ERBZaKWc=
Subject key identifier: FA:07:40:5C:F5:A9:9D:67:DE:5B:84:59:A7:B7:BE:81:F3:C7:B9:69
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019D9B881FEE6A3EDF709A39EDACDA22DF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0FD1
Signing time: Fri 17 Apr 2026 13:01:22 +0000
Manifest this update: Fri 17 Apr 2026 13:01:22 +0000
Manifest next update: Sat 18 Apr 2026 13:01:22 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: B8OVGlwx8ytxpeEFb3YYqoOG/3mbcpl3MLbuzPD5fnA=)
2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:1f:ee:6a:3e:df:70:9a:39:ed:ac:da:22:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Apr 17 13:01:22 2026 GMT
Not After : Apr 18 13:01:22 2026 GMT
Subject: CN=fa07405cf5a99d67de5b8459a7b7be81f3c7b969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:fc:97:72:5f:28:ca:0b:32:81:6b:2f:40:
f4:96:c8:b2:8e:c9:74:b0:df:d1:d9:a2:3b:04:c6:
95:11:41:03:6a:32:0b:03:01:7a:a3:37:49:a5:6f:
e7:c2:ab:4b:d8:31:61:5a:26:4d:9b:98:3d:dd:67:
79:b1:22:8d:ea:a8:71:f0:14:52:1c:2e:17:40:28:
42:cf:77:63:e2:d4:49:f0:5b:4b:3b:ee:c9:20:05:
09:97:1a:0e:2a:46:17:41:c4:b6:61:f6:29:ff:13:
7b:d2:bf:eb:3c:8d:5d:cc:3f:dc:43:97:9d:45:07:
0b:c3:86:3f:16:50:05:02:b4:db:07:9c:8a:e1:fb:
15:3e:92:36:37:d7:f2:94:d9:5a:c9:d5:5b:95:b2:
db:a7:9d:e7:99:47:4b:15:38:96:b1:b5:76:35:0a:
63:61:33:e5:a5:e7:d2:d2:cd:30:bd:c8:8b:39:2f:
9a:6e:a7:7a:d4:53:ac:24:82:d6:8c:ea:ef:b6:b6:
ad:c1:97:31:ef:dd:15:73:dd:b5:db:83:94:e6:e4:
2f:eb:2e:2b:07:c4:64:b8:77:f0:c9:20:3e:f9:c3:
17:f6:6d:01:f9:31:32:d3:dd:bd:69:42:9e:a0:26:
e3:56:66:dc:e9:45:22:94:9f:f3:fa:bc:7c:7f:bd:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:40:5C:F5:A9:9D:67:DE:5B:84:59:A7:B7:BE:81:F3:C7:B9:69
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:51:a7:69:b0:5e:80:e8:b9:10:2a:7f:8f:4f:cf:e6:8f:
ab:78:f3:f3:e9:4b:6f:f3:37:d8:99:a6:fb:30:c4:16:e9:44:
b8:d9:0d:27:0b:b2:c7:79:76:9b:8a:2f:4c:71:cb:d9:46:f7:
b1:c9:38:c1:72:7c:7d:59:02:b6:f8:ae:60:fc:f9:99:8a:04:
44:04:50:d2:52:05:b4:c8:8b:24:db:c4:f5:6f:32:a1:a7:ea:
3e:44:34:02:4c:e8:7c:d5:32:95:c5:70:ab:ae:2e:d0:c7:d6:
04:65:5e:30:bd:23:04:3b:8e:a5:fe:91:ca:51:2b:93:04:eb:
ca:2c:b9:24:7e:e7:7b:8a:7d:9c:cc:61:dd:75:f1:13:cd:53:
7d:89:5a:cf:38:01:7c:ff:74:35:dd:65:90:54:65:1e:dc:59:
14:9c:97:04:18:2c:87:e9:a4:14:3a:96:b5:5a:2f:4c:8d:05:
9a:51:39:5e:15:a3:bb:e7:37:f0:74:84:11:87:8f:49:54:f0:
96:78:72:6f:2d:51:95:40:54:b6:7f:7b:68:3c:d5:99:da:50:
94:37:a8:b6:da:1d:45:13:bb:fa:eb:4b:6c:9f:de:a4:b8:25:
3f:30:b3:96:6b:9e:27:18:bb:aa:14:32:f1:ba:f9:48:d3:a5:
8c:33:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:21:59 2026 by rpki-client