Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: Vz+3rC2BsUF+aO5B6t1kgmGXv1GSN4KPhyWotCjFYVo=
Subject key identifier: 3A:03:8E:A6:7B:8C:4E:46:C1:D6:38:48:18:81:2C:35:29:26:0A:69
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 019D99D00F953A5AEE6B962C1F2DB9233A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 1536
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: lXKs4SozDmVZuvRaTNrUqJxRXdFfdF7cEJWzIoDqfow=)
2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0f:95:3a:5a:ee:6b:96:2c:1f:2d:b9:23:3a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=3a038ea67b8c4e46c1d6384818812c3529260a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:1e:c3:f3:ab:be:7f:ef:91:0c:51:13:fa:
9d:09:30:33:1e:f0:53:15:68:93:e0:21:4f:ba:3e:
a7:20:db:8c:e4:e7:33:6c:e5:88:9b:bb:44:03:e9:
99:38:8d:45:c4:b2:dd:cb:d5:da:8e:06:9b:fe:2e:
37:65:5f:4f:e7:63:ae:9a:95:aa:7a:a0:e6:eb:a6:
10:ab:7c:d4:9e:e0:80:53:71:2d:67:11:b8:5c:2b:
92:9d:1f:73:4d:73:fd:4c:a9:4f:fc:75:34:8e:25:
82:2a:e3:92:f0:78:0f:58:2b:ba:ef:fc:5e:e9:53:
06:43:f5:1a:a3:b5:a1:1e:66:8d:b4:a2:d0:0c:1a:
5d:2c:7b:9c:42:03:3b:0e:3d:3c:c0:b1:5a:c4:c4:
b9:e4:10:3d:20:06:65:bc:fa:0d:5f:e6:2d:77:34:
54:83:7c:66:be:75:f3:05:6a:c4:10:df:4f:b2:bc:
33:4f:92:fa:cc:47:a6:7f:47:b3:3f:89:0c:fc:22:
fa:11:62:84:0c:96:5a:96:c9:a6:db:9e:6f:d3:e2:
6e:9f:e8:3f:78:a8:a9:ab:0b:f3:11:4c:77:a6:9b:
41:b0:64:68:33:28:5c:68:9b:f3:46:4d:ed:9d:fb:
49:28:54:5b:db:29:90:0b:35:e2:0e:45:0c:5d:ce:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:8E:A6:7B:8C:4E:46:C1:D6:38:48:18:81:2C:35:29:26:0A:69
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:ad:07:0c:9e:00:89:6c:d6:43:78:be:9a:38:89:77:be:
68:c4:ee:50:d2:b5:67:97:23:a1:c7:a8:6c:7b:14:85:57:b8:
ca:52:be:9d:f8:aa:e2:81:db:ec:d2:e3:ca:d5:bd:8d:87:eb:
64:72:df:7f:4c:3a:42:79:80:79:54:55:74:7b:2b:1b:d2:4f:
c9:af:57:83:62:e8:9f:ea:3d:97:50:8e:b0:9a:38:1c:6c:28:
27:c5:52:7d:10:14:47:39:92:65:a3:7c:3c:cd:89:de:ac:8c:
7f:f7:4a:80:07:d1:f4:bc:79:36:a5:db:57:e7:bf:63:3b:de:
42:b9:81:a3:3d:60:1b:f3:12:75:bd:b3:f2:cc:89:6a:4d:17:
92:56:ce:8b:48:ab:65:f2:80:03:84:17:ba:0c:34:74:0c:53:
ec:db:31:ad:d1:cf:68:36:f6:9a:0d:03:5c:4d:a6:96:1c:66:
54:ec:44:34:29:6d:1f:8c:65:39:2a:36:df:a2:2c:bd:85:4a:
ec:47:eb:a8:76:31:2c:89:a0:19:83:52:0a:a3:5b:6a:3d:23:
7d:59:80:8a:ba:a2:0d:be:38:33:f7:87:8c:48:a4:cf:cb:67:
36:f0:78:5e:fd:d6:f3:4f:fd:67:a7:ba:de:d1:a7:09:92:71:
d1:73:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:08 2026 by rpki-client