Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: S2mIlSWrieUZx3tnWMBHofGQUduWpApXTCn0YJgnAhE=
Subject key identifier: 7B:8D:FD:94:A4:50:26:7B:7A:01:80:53:C0:1C:E6:70:BA:1F:82:AA
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019D98BD45171E1EE8B9D8FD1301A8BBC63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0C6E
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: l0+cAV8lhuaEwL7BUIOQYywDfm7HuP04XtFKaUA+uzQ=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:45:17:1e:1e:e8:b9:d8:fd:13:01:a8:bb:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=7b8dfd94a450267b7a018053c01ce670ba1f82aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:07:a1:05:cd:a5:41:b2:a4:5e:c8:14:0d:
38:ad:55:b9:31:88:33:71:ad:e3:7c:c1:ae:02:2a:
a1:8a:17:9b:86:3e:f8:17:96:64:05:1f:d1:3a:23:
bb:96:34:db:ae:00:0d:7c:53:c3:7d:53:2a:f4:06:
fc:0b:f3:26:b4:6c:a5:72:d5:ab:fb:17:c6:4e:6e:
3b:0f:b7:ac:70:e0:c2:44:09:28:d4:80:2d:ce:46:
52:a3:c4:f9:a5:de:56:c1:7a:be:ac:d4:b9:4a:dd:
81:06:18:c9:90:e8:01:15:ae:cf:6d:2b:c1:bf:b0:
3b:41:54:df:83:3e:4b:fd:f3:68:1f:d3:a2:5e:eb:
13:8a:5b:29:45:78:f9:54:e5:c1:28:60:08:bf:06:
da:18:07:33:09:6e:7e:49:30:c4:c6:0d:50:31:87:
af:a9:18:ee:30:4c:55:d0:0f:5f:5a:01:98:eb:de:
ec:46:30:97:9a:b4:f0:b8:6e:8f:5c:67:ca:20:3f:
22:1a:fc:a0:89:3c:6a:e9:48:ee:06:77:c6:55:ec:
eb:ec:bb:2d:2d:34:fb:ab:89:52:49:26:0d:2e:00:
3f:05:cc:22:7e:fd:8a:92:07:91:ab:33:6c:b8:06:
07:4a:f7:02:57:af:e8:09:ac:bb:f2:cb:14:36:20:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:FD:94:A4:50:26:7B:7A:01:80:53:C0:1C:E6:70:BA:1F:82:AA
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2b:51:62:17:ed:43:ca:98:74:c6:b1:df:36:1d:d6:45:b4:
52:d8:30:50:ab:52:96:61:1d:aa:ab:13:56:cb:33:f2:82:4f:
66:31:28:9a:be:4d:4e:e4:4e:c2:21:2a:e8:65:0a:6d:78:90:
26:c3:80:19:0d:31:8d:e8:7b:88:78:ad:9f:97:de:c9:df:b4:
0a:0d:48:23:91:48:4d:84:80:ca:0e:c5:a2:40:27:8a:67:b1:
5e:86:b9:ad:48:49:97:e3:84:28:c1:a1:7a:3f:ea:a2:1e:52:
6d:e9:90:a0:01:bf:16:18:75:f6:cb:ed:bc:87:9c:66:26:b0:
7a:ec:d2:15:10:da:ee:10:b4:7d:c4:fc:89:97:23:c2:42:05:
a2:dc:53:61:10:7f:cc:7e:d5:78:08:06:a0:75:a7:19:4f:4e:
49:d2:01:52:57:e4:88:a1:bf:49:99:ae:bd:77:79:5f:36:95:
a1:71:2b:cb:98:1c:61:7c:08:c0:1c:cb:68:84:40:76:57:c9:
5d:90:bb:5f:66:53:60:43:7e:bf:ed:e3:fb:05:f3:88:d9:74:
4b:56:14:9d:cb:3a:e2:b0:98:17:52:b9:c8:52:51:4b:f4:e1:
b4:0a:99:90:23:26:e3:3f:b1:2a:88:f5:43:e0:ba:ee:8e:a6:
aa:0f:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:02 2026 by rpki-client