Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: XorTwQ2YQEHcE0RmwzuigIVy/x3tGMheRTvFvsoKBMo=
Subject key identifier: 6C:F7:A7:1B:35:4E:8C:F0:01:8F:81:8B:D5:13:F5:FE:96:52:8D:C9
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019D9999718FCA6AFB0B1FAB9DF61B4E6A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0D20
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: puIyv7NHFmCYG4FzBMGCiSPBMAI.roa (hash: i1Aa75xsqKrbXHK4auY98NNg+6xdfgvwz966P5kACS4=)
2: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: M45E5enQ0zDLu/S3fi8rwBw/UczBtEeHqvdSXv+YUPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:71:8f:ca:6a:fb:0b:1f:ab:9d:f6:1b:4e:6a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=6cf7a71b354e8cf0018f818bd513f5fe96528dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:7c:af:e6:4b:37:a0:0c:06:19:dd:77:e2:
96:92:f2:8b:b5:27:8d:57:d8:14:68:47:43:cf:e8:
92:e2:b4:cb:dc:46:88:40:32:37:26:cb:08:14:e3:
21:d0:9d:c1:d4:90:b9:4d:3c:3e:35:5f:9d:c2:33:
e7:64:2d:56:09:6f:82:f9:da:f9:fa:05:0f:bd:c4:
db:81:56:5f:f0:1f:40:90:8b:94:0d:24:f4:fb:5f:
77:df:b4:66:e7:9c:79:03:77:a1:6e:81:02:83:4d:
9d:6b:b1:b2:da:8d:4f:1e:54:c5:b9:89:78:aa:13:
bd:4c:15:8f:00:07:c4:63:80:57:4d:9f:4e:67:ec:
1f:fc:23:d8:e4:48:ea:4f:48:f3:85:4b:dd:4e:04:
75:b3:86:ab:d3:2b:63:3f:dd:de:e1:51:48:e6:b0:
7f:f8:e6:2c:5c:ea:ff:29:61:49:9f:45:73:a8:1b:
23:3c:39:d4:1f:d1:a4:f0:17:13:8e:46:45:89:94:
09:60:b1:14:a4:c0:72:15:4f:7f:8e:3e:6d:6e:67:
51:b2:b5:96:ed:c2:f8:2f:02:99:69:77:ea:d6:e8:
97:56:fd:a6:b2:e1:d0:7c:43:35:f8:3f:a6:50:b9:
f4:5e:42:49:56:b2:7d:94:68:04:29:9b:84:49:60:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:A7:1B:35:4E:8C:F0:01:8F:81:8B:D5:13:F5:FE:96:52:8D:C9
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a0:ff:7f:a4:56:1d:b0:e3:0b:5e:62:ea:7e:0e:b5:49:eb:
15:a3:b1:ff:98:25:33:65:56:99:05:0d:4d:a6:92:8c:8d:e7:
0f:6b:1a:8b:ae:92:5e:b5:e8:6e:24:21:0a:3b:b4:81:ab:2d:
ec:d3:b9:3a:f0:77:54:41:45:5f:a6:8d:be:63:8a:00:94:e6:
1a:6a:62:73:b4:73:05:f0:e3:f0:8e:65:fc:42:1b:a3:6b:09:
a0:19:5b:4d:6e:38:46:ac:66:21:ba:3b:77:94:7e:89:f9:1d:
f6:6e:2c:54:59:b4:8c:7a:1e:35:1f:89:4c:85:24:7c:e1:2e:
b9:87:6c:3d:4a:b7:37:59:0a:16:b0:8f:84:73:f0:6c:e0:30:
15:9d:1f:13:2a:10:58:9b:39:7a:ed:bd:79:78:df:43:68:ce:
09:a3:46:cf:c7:74:17:d0:68:bd:44:23:b5:ea:0d:e7:e7:d3:
2b:e5:b6:47:5a:45:69:f2:c8:66:98:3e:a0:a4:80:37:17:5f:
0f:1c:d9:b0:4e:bb:83:b7:68:64:a8:13:ab:6b:8a:3b:37:d5:
74:a9:bc:b9:77:af:f3:95:d0:fd:d1:8b:12:4c:24:5f:a4:ee:
c5:3b:00:65:b2:5a:f4:5b:8d:21:56:63:92:b7:39:9c:0d:c5:
a0:0c:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:46 2026 by rpki-client