Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: 53rilhJuaZzwDwuoHsUnCDIuHberVVlNTGSVojwqi+U=
Subject key identifier: 93:71:C7:ED:15:66:4D:8E:B6:56:F0:1D:FE:F7:08:F5:3B:08:EF:5D
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 019DA2D36A079903966C15FD8F96FDB9E8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 1315
Signing time: Sat 18 Apr 2026 23:00:57 +0000
Manifest this update: Sat 18 Apr 2026 23:00:57 +0000
Manifest next update: Sun 19 Apr 2026 23:00:57 +0000
Files and hashes: 1: 5zVSKcJaPsXj2Cbi8_dkp0M1n5o.roa (hash: 4jlaZxhWTA1CCnRRprrMPJev1XSLyXsPJzXP/xH6h+Q=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: 3p6fIXT4uzaSNMnlCtr1i/eENkxf6VujqcgYPPJ6FPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:6a:07:99:03:96:6c:15:fd:8f:96:fd:b9:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Apr 18 23:00:57 2026 GMT
Not After : Apr 19 23:00:57 2026 GMT
Subject: CN=9371c7ed15664d8eb656f01dfef708f53b08ef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:bf:41:0e:8e:7b:b1:8d:39:40:ba:61:65:
06:92:ce:c6:f5:6d:09:f5:f1:17:a8:d1:e8:19:9a:
f2:ac:ee:d6:8f:9a:30:2f:b4:22:97:cf:57:6b:03:
69:87:d4:f3:e4:4c:0c:a5:d7:71:90:c3:93:65:c1:
e8:ba:fc:cf:54:1d:de:18:48:56:71:0f:a3:80:b7:
90:b2:f0:9e:45:d1:5d:85:6d:89:d6:f5:41:78:8a:
35:d0:d3:d1:d0:58:b9:f3:5b:13:e9:0e:2f:08:68:
3f:7a:eb:cd:15:b8:6f:64:c3:a7:cf:88:89:55:27:
05:f9:5e:9d:8e:7d:ba:09:4a:3a:90:ad:f1:90:33:
89:3e:40:2e:d4:db:d8:8e:8f:d7:22:be:22:20:68:
ee:d8:dc:8d:65:01:ad:f6:26:f1:28:b9:26:8c:a4:
ba:13:50:77:9f:d0:0a:e7:98:40:fd:97:ec:0e:8c:
03:55:47:12:eb:46:f3:97:28:12:ef:97:59:e9:09:
a0:c2:ec:94:da:18:ff:52:95:1b:b2:a4:ec:4e:11:
16:9d:2b:ed:9a:23:7c:15:64:a6:88:8b:af:61:11:
12:ca:21:7f:ce:68:e5:83:d6:3c:1e:e0:15:76:52:
b9:03:3b:2b:20:38:3f:10:3f:f5:b5:80:b3:af:34:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:C7:ED:15:66:4D:8E:B6:56:F0:1D:FE:F7:08:F5:3B:08:EF:5D
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:f1:65:21:0e:16:cd:a1:ef:ac:2b:80:c9:b9:1e:fb:c6:
06:6e:22:fc:cb:ed:d9:2d:4c:e8:ab:d0:54:fa:fe:f2:7b:4c:
1d:e3:bb:91:5a:1a:69:65:fc:06:bd:3e:46:c2:ce:30:0b:9b:
bd:b2:64:81:86:8b:c5:36:48:05:28:06:57:8f:2e:b8:14:9f:
99:75:34:cf:c8:0b:fb:0f:4b:b8:89:9e:2b:a8:66:ad:66:f1:
38:8d:c2:0d:60:e1:b2:d6:4c:5b:93:4d:ce:98:de:96:9c:8d:
ce:06:52:e5:64:f6:4c:4c:ba:21:50:8b:88:44:5c:c2:24:92:
26:b8:08:bb:ef:da:1a:65:f9:fa:a6:4a:59:39:6d:ce:6e:8f:
b9:6c:d3:74:7a:77:8f:19:40:cd:56:9c:26:90:33:08:34:8a:
c5:ba:ad:5e:e9:87:ad:cf:ec:3c:dd:b3:f5:18:11:46:d2:8e:
54:44:f0:2a:5d:06:48:b3:97:41:15:aa:5a:4d:48:55:32:f2:
36:da:c9:7b:ae:88:55:d0:63:70:e7:95:87:4c:9e:70:8a:2a:
e7:2e:27:69:16:ab:0a:b4:84:91:04:c5:d7:8b:d3:54:7d:ea:
06:78:06:03:e3:d2:f0:d5:f3:8c:e3:fe:47:cf:09:8b:5c:da:
92:0c:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:28:19 2026 by rpki-client