Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: CXsur2LntpOJO+dlzBCZjzrMTL19MUBqmiVDZzry6BE=
Subject key identifier: ED:0B:47:69:37:09:04:4B:57:A1:AD:EE:72:4C:C3:53:25:46:7A:77
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 019D99628049245D5278EADABC6DE89660CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: RHxrZYngRgtBcZFzimGfU+g89Porl8sncLoWJb9TRSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:80:49:24:5d:52:78:ea:da:bc:6d:e8:96:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=ed0b47693709044b57a1adee724cc35325467a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:a9:e0:e0:6a:28:de:80:14:be:87:4a:23:
13:ef:46:4e:e1:d4:3b:fe:ff:cd:f4:c6:58:52:ad:
27:59:e4:b2:12:0b:97:7e:fa:46:7d:ff:cd:61:10:
bd:b6:04:55:d0:51:af:3b:66:77:ff:c1:6e:75:ed:
ae:52:aa:09:36:4f:8f:60:4b:ef:77:76:02:5f:29:
6b:2e:18:10:44:cf:2a:64:19:77:4d:c9:c5:ac:f2:
f3:be:86:10:3f:6d:ed:45:d6:c1:88:dd:e3:95:6c:
25:3b:c3:04:fc:49:7f:23:cd:e6:68:31:5b:04:c8:
f0:90:8b:18:76:52:01:9f:4b:26:c7:ab:d5:14:c6:
eb:7a:f3:0f:ff:9e:e1:19:13:0b:f4:49:1c:a2:e9:
31:bd:d5:4f:b1:b0:f6:b4:b1:86:17:47:8b:2c:b1:
06:3e:31:4d:bd:fd:5b:6e:b3:fe:27:31:02:9a:b3:
5b:c4:9b:71:02:c0:35:a1:d8:04:26:e0:6d:2d:cc:
17:99:fb:5c:c8:8a:ee:48:ec:7d:13:26:ed:1f:a1:
2a:c1:5d:16:a1:42:ba:83:3e:e7:7e:f8:f8:28:64:
76:a8:10:96:0d:af:29:b5:aa:f4:99:bc:1c:25:2d:
08:a3:f4:58:e9:71:39:8b:6d:e1:ac:46:a2:7d:a8:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:47:69:37:09:04:4B:57:A1:AD:EE:72:4C:C3:53:25:46:7A:77
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d4:23:81:38:a9:7d:41:c0:42:9b:09:c6:3e:9e:b7:64:d0:
45:1d:1f:57:9e:a8:1d:e9:01:4a:40:5f:02:0c:3b:f9:06:8c:
7d:a0:1a:5d:21:ea:af:49:56:11:c9:a7:bf:31:5e:27:8e:31:
a1:80:b1:a6:65:3b:39:08:cf:23:1f:ed:05:fe:4e:07:4a:ac:
3b:27:55:d5:b3:46:22:d8:d1:86:9c:93:4b:4d:bb:fc:5d:db:
0e:e8:97:ad:42:d9:6f:6e:b0:eb:1b:a6:65:23:f7:8e:6e:d8:
3a:6c:b9:2f:42:06:4b:66:21:82:7d:27:46:56:7c:2e:cb:32:
04:0f:2c:a7:72:d0:33:d7:73:e7:e7:ab:4c:0f:08:5e:3b:d6:
96:ac:fb:3f:dc:95:ba:d7:42:1c:7f:3a:68:5c:df:db:fa:fd:
7e:4e:97:e7:14:be:96:ee:da:3e:72:0b:a9:5f:35:8a:ec:e3:
44:2c:e6:f4:84:1f:0d:e2:40:6a:6b:c1:b4:28:42:a5:26:1f:
7c:b6:87:16:61:4e:87:4c:11:fe:85:94:e7:cf:fd:57:3a:d3:
4a:9c:ee:5a:94:31:b6:2d:94:81:a1:1e:ce:e1:d3:63:9b:3b:
74:f7:46:11:a1:2e:ef:88:0f:f6:ed:2a:2a:79:b8:57:9b:1b:
34:46:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:44 2026 by rpki-client