Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: LL5dSZS3HzjKynt7cxExMGqZQkX2YmRNSATgF8AYkRM=
Subject key identifier: C6:5E:3F:39:0F:14:11:02:CE:23:8D:3F:78:FB:A2:60:76:09:0A:4C
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 019D992B81CC205AA6417BE8F79E6145CA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:58 +0000
Manifest this update: Fri 17 Apr 2026 02:00:58 +0000
Manifest next update: Sat 18 Apr 2026 02:00:58 +0000
Files and hashes: 1: HJnj8_fGCoJyE1urHv4cHdz9YF0.roa (hash: vG8U6KbBLWi3A5le7qHak88pNNLwlA0sSunnRfJLuks=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: bmBXRtSKHTKIEVcCqzTwlJLSJ6/15P3qLJl4os7ULEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:81:cc:20:5a:a6:41:7b:e8:f7:9e:61:45:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Apr 17 02:00:58 2026 GMT
Not After : Apr 18 02:00:58 2026 GMT
Subject: CN=c65e3f390f141102ce238d3f78fba26076090a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:7d:3b:8b:f0:9d:95:91:96:96:43:fb:4d:
b8:ca:a5:67:2f:a9:b0:20:ec:9f:7d:a0:a8:71:c9:
6c:06:56:bf:99:f3:28:8a:99:54:d0:e5:1a:8a:e3:
e0:85:57:38:a6:47:6f:51:64:e7:e2:c8:ac:2b:a4:
8b:c8:0e:74:75:1c:32:f6:48:d0:75:2b:75:15:f6:
0e:ea:fb:ce:8d:09:03:bf:76:97:6d:1e:03:36:19:
6a:69:6d:60:96:d6:7f:91:22:df:8c:43:a4:c4:42:
d8:e2:fb:52:80:55:6e:71:35:50:52:9b:0b:c0:2a:
c8:8e:c3:c2:54:4e:8b:67:a9:b0:1f:4b:5e:c6:1e:
8a:ad:d1:1d:b6:27:31:75:b1:3a:7e:fa:7c:2a:09:
4e:94:dd:2a:8a:32:5e:3e:fb:2e:9f:fc:6b:bf:a8:
95:25:d5:28:1b:c5:22:f1:4e:bc:3f:dd:a5:ba:06:
10:85:e4:9a:66:28:75:16:88:74:8e:63:43:a4:e7:
4b:19:44:1a:42:24:dd:01:d8:a0:d6:db:17:23:11:
eb:b9:63:fd:1e:18:c5:46:ab:af:91:9f:8a:31:53:
1e:84:6d:27:25:e5:9c:2b:fd:8c:8e:37:08:80:2a:
27:09:12:dd:65:d6:21:9c:73:ec:0d:b0:f5:d4:30:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:3F:39:0F:14:11:02:CE:23:8D:3F:78:FB:A2:60:76:09:0A:4C
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:58:88:0e:99:e1:84:18:67:e6:9c:c7:cb:a7:9a:7a:01:
18:c8:fd:74:e8:60:f1:e6:5a:62:88:ae:31:ba:2e:a7:6c:21:
46:37:a7:b8:7f:da:24:ae:55:d6:a3:1f:fe:57:62:2a:d3:eb:
29:b2:3b:d5:ad:2e:91:71:34:ce:b3:f9:e6:dc:ce:19:af:c1:
f3:33:a8:a5:a9:16:86:fc:5e:d8:25:f3:2e:79:d5:33:7c:e8:
2e:9a:ec:d4:7e:65:b1:56:a0:6d:df:db:29:a7:05:7b:61:21:
8a:1b:98:6e:a5:6f:8b:8f:3e:69:27:e5:22:b9:4c:4a:66:5b:
44:5b:a9:ba:c3:ac:9b:90:2f:2f:18:9f:31:3f:6f:d7:74:0d:
23:a2:51:27:5b:c5:74:da:bf:2f:1f:be:40:8c:29:6c:95:a0:
d3:dd:60:2a:4f:dc:f3:b9:53:90:36:46:6a:2d:57:74:15:ad:
29:80:ee:c1:37:7a:1d:f3:f7:f6:1d:c4:c0:33:8f:a5:19:9e:
e6:17:d0:47:8c:8e:6f:40:c5:73:ec:fc:b7:01:e8:cf:46:f7:
cd:15:26:50:b4:78:e7:c1:3c:91:93:45:8d:ca:db:a1:a8:d2:
c7:5e:56:2b:31:b9:24:00:cb:ce:b8:7f:c4:07:73:a4:35:e3:
34:d6:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:57 2026 by rpki-client