Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: 8Dq/J5W3/Zxx/nzOMNL84FDr2PKk3j9VJsQ66pKiJxM=
Subject key identifier: F9:B7:7B:9A:73:EB:5E:97:31:23:A4:89:22:08:54:AA:60:A2:E5:2A
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019D9B87A31961D94675E6CC8A6A88CEA84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 13:00:50 +0000
Manifest this update: Fri 17 Apr 2026 13:00:50 +0000
Manifest next update: Sat 18 Apr 2026 13:00:50 +0000
Files and hashes: 1: P2z60TT5kqB-d0NQ2XA4fLTFBz0.roa (hash: H2tzNdLvq80tMnAzPWbwLl8MIdAmcLNud7Ng3jnGJBE=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: 5ev1uZNMrwFbelIEmc3MYEJpdvmWuswXEUlkbTiODdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a3:19:61:d9:46:75:e6:cc:8a:6a:88:ce:a8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Apr 17 13:00:50 2026 GMT
Not After : Apr 18 13:00:50 2026 GMT
Subject: CN=f9b77b9a73eb5e973123a489220854aa60a2e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:77:1e:a5:e4:c0:14:20:14:af:65:86:f4:
84:07:60:2f:9a:d9:f4:00:94:18:2a:0f:68:ae:ca:
7f:45:d8:17:14:30:fa:36:d9:8a:64:23:65:1f:db:
a0:a3:b1:6a:7d:89:79:85:db:56:b8:35:38:13:ec:
57:65:3d:31:e1:91:d4:00:40:a6:e9:82:1d:16:42:
cb:1a:06:db:2d:1f:cf:38:54:ec:4a:17:66:66:52:
7d:21:dd:17:ed:41:dc:88:36:64:f1:b8:93:aa:f8:
04:a6:4f:44:0a:0e:fc:81:5c:aa:4d:4c:0f:17:d8:
a3:ca:35:03:32:2e:4a:98:af:11:5f:55:87:6e:12:
e9:03:a5:38:05:c0:0e:c6:d4:35:4c:54:7d:ff:26:
fd:c1:8f:9c:15:a0:e9:1e:fc:37:d4:cd:e3:b8:55:
44:75:54:57:b8:f3:ef:79:2c:67:48:ef:41:bc:25:
ea:66:52:eb:c9:17:e5:a4:c7:83:01:6a:76:af:b9:
6c:3a:aa:83:a7:5f:4a:6a:02:44:5a:7d:79:c2:5a:
3a:78:b1:0b:8a:f7:64:b0:ca:f9:78:7b:b1:00:56:
4b:c9:1f:6f:27:9d:fb:1f:8c:56:f6:7c:d0:b1:90:
3a:54:81:af:68:a6:43:85:02:70:fd:f4:05:70:8d:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:7B:9A:73:EB:5E:97:31:23:A4:89:22:08:54:AA:60:A2:E5:2A
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4a:da:7f:29:f6:7e:de:aa:0f:48:f7:d2:6a:e2:15:a2:3d:
b6:a7:80:cb:1e:b9:53:ff:6f:f2:ca:3a:f6:3e:08:08:93:60:
24:c2:28:26:4a:77:04:f8:3b:4d:0d:09:b5:cf:a1:bd:79:93:
8e:c3:88:2f:6c:ed:2a:81:1b:5c:71:84:7f:20:39:94:7f:6a:
90:8d:2c:68:00:ed:d7:ca:d3:f7:38:3a:73:de:f9:8b:08:03:
46:99:73:99:38:5e:80:e5:27:47:e0:3c:61:24:55:07:2a:f7:
e4:6b:6e:48:35:c8:fe:ff:39:a1:8e:05:ce:0e:f1:40:ea:71:
ff:59:45:f3:57:3d:7f:e0:2e:4f:30:ff:de:38:42:88:33:6f:
78:32:49:7e:a2:94:f1:75:3b:01:35:5d:25:7d:e2:a4:66:cc:
84:a0:2f:5b:5e:7b:6e:8e:d9:32:d9:dd:d3:d1:c7:7b:e4:ef:
46:c8:87:18:c5:69:d7:1a:62:a8:af:d6:1a:18:7b:d9:ba:f0:
02:fe:87:41:5d:a2:01:bd:58:42:81:7f:eb:61:3a:99:2a:61:
16:69:75:ca:fc:d9:71:59:6a:1a:c8:1d:d9:78:9c:8d:86:93:
c5:38:8c:0a:b6:8e:af:3c:06:cb:b6:2e:cd:ee:9c:22:0a:f7:
9a:f4:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:57 2026 by rpki-client