Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: 3qfKc3bekO+YJ0SElwbMhIBebZEjlp8RTVWkdixe3yI=
Subject key identifier: 24:12:DB:14:D0:10:CC:DE:F9:EF:0A:32:94:7F:09:A9:78:7D:6F:61
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 019D996274A4E0D19EEE9D394239765BFD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 162E
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: 7sXO/Rf7mVZj1FcYO2HyDy2Rx/3AMlZVn/7BTpudszc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:74:a4:e0:d1:9e:ee:9d:39:42:39:76:5b:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=2412db14d010ccdef9ef0a32947f09a9787d6f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:32:56:9a:cf:06:4a:db:70:e2:5e:c5:53:
4c:82:7a:12:5a:67:ad:3e:c7:38:6f:6e:35:f4:7a:
c3:c7:04:7e:c8:a3:f7:a0:52:40:64:52:ca:ed:e0:
32:88:aa:9a:e1:2e:a4:96:3b:fe:ba:ee:86:b0:0c:
b2:3f:cc:8a:6b:7a:2c:fb:0a:10:d8:80:52:b0:6d:
7e:3a:78:40:93:8a:4e:9a:cf:fa:4d:ec:98:9a:fd:
33:fc:11:54:1f:71:cf:87:c8:c6:db:30:67:a4:c5:
90:88:82:4f:7c:f9:a7:e7:d5:dd:15:35:ed:24:df:
4e:cc:f5:7c:2b:68:5d:4c:a6:22:60:0e:d4:a0:d4:
f0:15:4e:b0:b0:83:1f:56:0c:80:27:2b:aa:ca:d2:
a6:e9:71:88:05:ed:fd:21:17:fa:1c:ab:4c:3a:fc:
87:71:f9:c7:63:92:a5:dc:f0:ba:92:c2:be:09:7d:
23:01:e3:fc:a6:0b:ec:ab:90:d8:ec:dc:58:0c:24:
2e:93:b5:25:0f:d1:2b:25:8d:bd:19:d0:ed:03:2a:
77:8a:9b:e9:85:08:ee:91:65:a4:0d:ee:ac:08:78:
d5:1a:dd:a3:9d:60:0c:2d:5c:18:14:2e:81:c8:85:
8e:83:ed:ee:7f:25:05:76:14:8a:ee:d1:e5:bc:10:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:DB:14:D0:10:CC:DE:F9:EF:0A:32:94:7F:09:A9:78:7D:6F:61
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:65:17:23:31:9a:86:5c:3d:3d:14:bd:d8:24:88:5b:5b:df:
0e:13:8c:f5:d9:15:43:d4:5a:e0:a5:ae:4c:af:e2:d8:6d:68:
c8:02:a2:84:97:62:04:b4:20:a8:61:48:93:58:d6:aa:fb:0f:
3b:70:d3:da:95:8e:95:ac:17:d1:73:8c:4b:b3:33:26:77:6c:
30:4f:2e:f1:47:fe:da:cf:8d:18:78:12:60:5d:36:d3:12:b8:
fc:a8:70:e6:0c:33:97:2d:88:77:83:a1:7e:29:78:d0:26:9c:
b1:8b:7d:54:e3:67:9a:e4:2f:0d:c5:4e:27:dd:e2:bb:3f:3d:
12:bd:8e:a2:3d:71:86:8a:ba:27:f4:77:fd:ae:9c:e8:5d:98:
a3:ab:3b:72:5c:d9:4e:21:8b:60:e9:27:b7:24:fc:af:0a:e4:
fb:6a:c8:14:d0:0d:b3:9f:f9:7f:7b:fc:29:a5:65:4e:fc:b2:
9f:23:a8:1d:53:bb:e7:cf:25:f6:d9:7e:b6:b8:28:ac:53:20:
b0:1a:a5:40:c4:4c:e7:a2:67:4c:e0:e3:08:00:db:a3:ff:9e:
d7:5f:65:10:d4:ef:d7:66:b1:c5:3d:49:74:ac:0a:5a:8e:04:
eb:37:e2:b8:17:4c:02:4d:fe:97:5e:cd:67:34:a3:3f:c2:4a:
5e:99:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:26 2026 by rpki-client