Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: oF4gpeMCEwpsNS3+WhbIz6j7Nl8Pxg9YPwR9IBI05Tg=
Subject key identifier: 1F:19:DD:F8:6F:A9:56:5B:D3:E9:21:87:9E:4D:C6:7C:6B:61:6D:CE
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019D9A74E3694774A1B4EF08F473CBED5E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 136C
Signing time: Fri 17 Apr 2026 08:00:44 +0000
Manifest this update: Fri 17 Apr 2026 08:00:44 +0000
Manifest next update: Sat 18 Apr 2026 08:00:44 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: i+ioAyfXTvkSANqUNvZnfic5LoGSCeMgwQqihW/3HAs=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e3:69:47:74:a1:b4:ef:08:f4:73:cb:ed:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Apr 17 08:00:44 2026 GMT
Not After : Apr 18 08:00:44 2026 GMT
Subject: CN=1f19ddf86fa9565bd3e921879e4dc67c6b616dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:79:cb:c3:af:e7:9e:bc:52:15:9b:73:fd:
74:7d:76:49:45:b1:44:fe:38:b9:fb:5d:b8:b5:6f:
1d:3c:dd:a4:9a:8b:7f:cc:98:4e:33:0e:02:0d:96:
7b:4f:ec:fb:07:6f:68:e9:83:07:fc:95:61:6a:e3:
60:17:8c:1b:1b:17:00:74:2d:ec:ef:3b:58:cd:55:
f1:2d:a5:c4:1f:fe:48:72:2a:cd:2b:90:d9:e2:37:
4d:55:29:9b:de:6f:7d:d3:69:3d:5c:5d:0e:21:f6:
0a:88:02:93:31:53:73:fe:cb:9c:49:f3:31:da:ba:
2c:af:01:6a:36:93:eb:2d:9d:fe:39:c8:2b:00:56:
9d:2a:fa:fc:8f:39:b1:9d:57:5d:c3:f8:69:2e:d8:
ba:77:ab:53:b0:9a:22:17:79:41:10:b0:3f:cc:44:
09:86:99:03:b4:02:ab:bb:82:e6:ae:21:12:f3:6a:
5a:c2:48:17:32:ab:9e:e2:1c:76:77:32:a6:40:73:
5f:4e:13:56:76:1a:b8:5e:70:32:a4:1b:80:00:c9:
64:eb:4c:7d:27:04:bb:0f:38:4b:4f:ac:b7:30:89:
17:75:c6:b7:38:73:03:60:08:dd:fc:a2:c8:c3:6d:
a8:97:a5:d9:34:87:56:94:0a:5e:14:1c:b9:4b:13:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:19:DD:F8:6F:A9:56:5B:D3:E9:21:87:9E:4D:C6:7C:6B:61:6D:CE
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:f8:ff:f4:30:05:46:32:5e:e9:0d:d3:ac:fb:5c:7b:f8:
de:9c:b1:4e:85:3e:52:b2:9b:41:7a:aa:74:2e:a3:bb:80:53:
da:3a:33:ae:10:ce:29:4d:fd:e8:52:9f:c8:1f:98:ea:e9:de:
55:1e:15:72:58:cf:20:27:40:bf:27:73:7c:c0:bf:8e:c9:7b:
6d:88:34:65:6d:1c:25:50:b1:0a:58:35:7d:98:9c:63:f2:70:
a5:df:74:0d:5d:c1:57:4d:36:ab:f8:a0:c8:77:47:2c:1f:53:
0e:a3:79:78:3a:05:75:5c:04:7b:19:d4:48:44:84:95:fa:41:
33:84:d8:77:cd:70:43:87:a1:b3:3a:c9:1f:3d:01:9f:e5:83:
b9:15:d0:34:8c:5d:f8:e1:55:e5:2c:cc:44:2a:07:e0:6f:11:
fb:f4:a1:14:83:e8:1c:f7:98:e3:85:67:cd:be:45:b8:d7:cc:
26:a6:2c:20:58:7b:2a:a5:74:0a:b8:8b:af:3d:c8:2e:04:ef:
b4:c4:b1:21:8b:67:6b:17:7d:9c:43:49:44:86:a0:b2:66:5f:
1e:d2:9d:91:33:b9:2d:8b:15:a8:d2:b1:a5:3b:ae:b0:a0:f9:
f2:2d:3e:0d:53:3f:e6:08:51:32:58:0e:ad:1d:c6:db:4b:eb:
1f:71:8b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adONpR3ShtO8I9HPL7V4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGUwYjc1OGJlNzNhMWRkYmZiNTE3ZWU4YjVlNGY4NjNh
MjFmOWUwHhcNMjYwNDE3MDgwMDQ0WhcNMjYwNDE4MDgwMDQ0WjAzMTEwLwYDVQQD
EygxZjE5ZGRmODZmYTk1NjViZDNlOTIxODc5ZTRkYzY3YzZiNjE2ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqud5y8Ov5568UhWbc/10fXZJRbFE
/ji5+124tW8dPN2kmot/zJhOMw4CDZZ7T+z7B29o6YMH/JVhauNgF4wbGxcAdC3s
7ztYzVXxLaXEH/5IcirNK5DZ4jdNVSmb3m9902k9XF0OIfYKiAKTMVNz/sucSfMx
2rosrwFqNpPrLZ3+OcgrAFadKvr8jzmxnVddw/hpLti6d6tTsJoiF3lBELA/zEQJ
hpkDtAKru4LmriES82pawkgXMque4hx2dzKmQHNfThNWdhq4XnAypBuAAMlk60x9
JwS7DzhLT6y3MIkXdca3OHMDYAjd/KLIw22ol6XZNIdWlApeFBy5SxP7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8Z3fhvqVZb0+khh55NxnxrYW3OMB8GA1UdIwQY
MBaAFPKOC3WL5zod2/tRfui15Phjoh+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUt
NjllM2QwODY2ZWY2LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUtNjllM2QwODY2ZWY2
LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzz4//Qw
BUYyXukN06z7XHv43pyxToU+UrKbQXqqdC6ju4BT2jozrhDOKU396FKfyB+Y6une
VR4VcljPICdAvydzfMC/jsl7bYg0ZW0cJVCxClg1fZicY/Jwpd90DV3BV002q/ig
yHdHLB9TDqN5eDoFdVwEexnUSESElfpBM4TYd81wQ4ehszrJHz0Bn+WDuRXQNIxd
+OFV5SzMRCoH4G8R+/ShFIPoHPeY44Vnzb5FuNfMJqYsIFh7KqV0CriLrz3ILgTv
tMSxIYtnaxd9nENJRIagsmZfHtKdkTO5LYsVqNKxpTuusKD58i0+DVM/5ghRMlgO
rR3G20vrH3GL3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:22 2026 by rpki-client