Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: 6rBI14SZZP/af9qCLDH1rtIPge3IcziuAz2PfjT9XPk=
Subject key identifier: FA:2F:76:84:EE:C2:8F:7F:86:9F:17:6E:BF:CC:EE:58:DA:8D:34:8E
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019D999969671BBED3E26639C13DCCD9E078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 130B
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: +m8LnXhQ/gNQB2gHP2K3Z5vVa10Xp423pgYbW/i7poQ=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:69:67:1b:be:d3:e2:66:39:c1:3d:cc:d9:e0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=fa2f7684eec28f7f869f176ebfccee58da8d348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:6a:8b:28:7e:7e:92:73:bb:4b:92:7d:87:
ea:80:a8:ae:b9:55:c5:43:4c:3d:bd:f0:00:05:a2:
f0:fe:75:be:3c:e1:6b:f7:a3:3a:3f:58:db:d9:f4:
ba:2d:03:1c:54:38:3f:ce:4d:38:46:79:77:df:25:
44:9a:83:43:09:64:cb:9b:37:2c:04:cf:77:65:07:
94:c7:e4:30:3f:fe:c4:b7:a6:11:8e:f5:e0:21:b7:
25:87:98:23:3f:aa:82:1a:e9:07:a7:bc:21:2b:91:
96:09:ce:83:28:e1:0c:a6:79:86:55:b1:3e:37:28:
a2:95:6e:af:42:28:48:d2:e5:48:a0:14:ec:52:00:
15:e6:29:14:27:ee:10:1a:25:0f:cb:7b:d8:54:96:
32:23:a2:2e:3a:cb:ab:e9:ee:9f:94:90:38:d2:71:
89:88:a7:c9:8e:fa:dd:50:a0:98:6a:ca:28:6c:28:
5e:a4:af:75:97:93:15:20:ec:bc:1e:ce:8c:78:36:
73:85:ce:d6:65:50:c9:42:58:92:52:2f:58:9e:48:
a9:09:d4:82:4e:96:79:f3:10:b0:14:fc:1f:44:9e:
c5:0b:59:11:10:ca:04:b9:7f:71:6b:9d:8c:78:e8:
fa:ab:67:2e:d2:cf:91:10:45:af:5f:44:5d:4f:eb:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:76:84:EE:C2:8F:7F:86:9F:17:6E:BF:CC:EE:58:DA:8D:34:8E
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:2c:a9:42:30:d2:82:fb:68:96:21:19:6e:34:90:86:91:
5c:21:78:0b:44:bd:f7:9a:0b:d7:ba:66:23:f9:b5:69:4b:4f:
11:2b:63:ec:a6:5c:29:d2:a2:96:c8:01:c5:32:e4:67:dd:4d:
d3:b9:db:36:b0:c1:3c:94:57:b6:d3:a5:13:76:66:ec:05:3b:
c7:43:f9:68:16:14:a8:d5:e4:cf:4c:0d:1f:ed:4d:6e:60:07:
de:cb:fe:13:ea:4f:b9:53:ce:c5:b0:fb:7b:0d:3c:b6:78:9e:
41:db:53:e8:8a:a6:2d:02:19:4f:51:c7:17:d3:c5:ee:f6:d9:
e5:7c:16:7b:d7:b7:ea:e7:36:18:d3:2e:48:75:4e:93:be:b7:
06:59:7c:41:65:06:ef:f7:44:39:f5:93:80:92:8c:f5:fb:ff:
cb:6a:dd:1c:73:74:1a:73:7f:d4:28:36:7f:c6:45:63:20:6e:
bd:8b:8a:3b:83:ee:78:8a:d6:90:6e:e7:45:34:24:48:57:f6:
3b:5f:21:a5:4c:52:0b:2e:0d:37:10:c8:49:1a:bf:fb:0d:f9:
ed:f0:8f:ad:7d:02:e8:06:e8:52:4f:66:fa:72:c9:d7:fe:82:
c9:a9:48:b3:69:15:62:61:bd:2e:9f:b4:a9:94:4d:66:d8:91:
24:5a:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:54 2026 by rpki-client