
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier: mbPNLql78M7MNn9vdrnNJCrXFbSIFG28X5UJQL+dSxs=
Subject key identifier: 1C:D6:0E:CD:F6:72:EC:D8:53:5C:B6:6A:03:17:CC:A4:51:FB:50:84
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial: 019DA309F41FC5EC9B16E0815291F899F8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 00:00:31 +0000
Manifest this update: Sun 19 Apr 2026 00:00:31 +0000
Manifest next update: Mon 20 Apr 2026 00:00:31 +0000
Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: eITjWhVeAeyF8R7vdjljYN3ABLtzr+8/4CMLENGWQN8=)
2: wp6uiGrJ4kjvwZ8tHt_RT5DTcms.roa (hash: VFhk9hTGSYfetlFbp/u5F1XNCOx7IZQTp3tsScBlLMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:f4:1f:c5:ec:9b:16:e0:81:52:91:f8:99:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Validity
Not Before: Apr 19 00:00:31 2026 GMT
Not After : Apr 20 00:00:31 2026 GMT
Subject: CN=1cd60ecdf672ecd8535cb66a0317cca451fb5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ba:dd:92:b7:e1:f6:39:dd:2d:04:ba:25:a9:
94:f8:f2:5b:4d:e7:60:83:3d:83:01:ab:5b:ad:d4:
ca:b6:67:b5:b2:b4:24:3b:b5:af:df:f5:83:0c:54:
a4:bf:7b:04:db:04:51:63:06:c8:b7:01:1e:55:b2:
42:e5:06:72:bf:1d:eb:f3:05:61:d5:01:2d:81:ef:
fc:b5:49:51:ec:6b:dc:b9:67:fa:23:f2:74:ef:59:
53:19:83:42:fb:ea:51:6d:bb:91:2e:c0:a0:74:23:
f6:db:1e:9d:a3:6e:3d:ec:27:25:92:d5:8f:21:f9:
84:fb:50:ca:49:f2:4f:80:53:25:f4:58:89:03:04:
20:46:ce:ea:39:a2:a1:e6:9d:ed:c7:af:86:7c:cb:
b5:9c:38:8c:8a:f8:8b:81:c2:e3:22:cb:a8:1a:4c:
69:ca:6d:29:a2:39:ed:6f:08:ef:10:c1:31:d9:d9:
0a:98:66:ea:3e:94:97:9c:4c:91:db:7c:1a:48:93:
ee:51:cb:1e:c5:e3:18:56:b0:84:5a:7b:7d:63:54:
98:51:09:56:8c:93:f3:cc:14:27:d8:a0:d6:16:45:
2c:ee:5b:12:00:fb:99:d4:80:5a:17:0c:b9:7a:50:
c5:14:2e:42:d3:29:08:72:cb:bd:e6:04:88:b4:a7:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:0E:CD:F6:72:EC:D8:53:5C:B6:6A:03:17:CC:A4:51:FB:50:84
X509v3 Authority Key Identifier:
keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:fc:15:17:03:d7:31:4a:29:de:1a:24:23:b4:d0:8b:64:
54:78:e9:c5:c4:db:f2:95:75:a3:9c:91:be:2b:81:3b:c4:69:
65:2e:31:91:0f:a4:0c:b9:4b:07:97:ea:40:26:78:00:a4:b5:
be:f0:0e:5e:50:8a:70:21:ca:a9:7d:73:55:9f:3a:c8:1d:70:
b9:be:ce:34:43:69:68:5e:86:65:89:9a:4f:25:85:0d:bd:cc:
02:e5:11:99:8c:0d:bb:f7:5c:ce:2f:7e:53:9c:86:7e:b9:34:
f9:76:e0:ac:d8:24:ea:90:07:8b:a8:cb:0a:01:21:77:62:1c:
a5:20:fa:08:c8:d5:ef:9c:7d:df:ca:74:50:36:fe:a3:a3:2c:
53:c9:76:b5:d3:89:6e:aa:9c:4f:a5:12:27:05:7d:8d:23:58:
16:2b:45:7e:74:47:6a:fd:0d:7f:1f:75:49:43:33:e7:df:b5:
56:b6:be:19:cb:5c:4c:12:f4:05:87:f7:e9:0e:ee:4e:06:f4:
37:96:ed:6a:67:fe:a5:fd:44:9d:e9:c9:e3:a4:be:08:f3:e3:
72:3d:65:b1:10:89:4b:13:e6:40:e7:e5:f1:ad:14:37:7d:e0:
59:53:83:62:8b:a9:e5:19:d1:73:ed:52:e4:c7:5d:1d:95:f2:
15:f6:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:46 2026 by rpki-client