Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: 1+1kBEKSXZlkwg+IGzaWUfYhh16G53YltAs9KATShiU=
Subject key identifier: DA:06:4E:1B:A7:7F:36:99:9A:43:89:2B:81:0E:CC:0D:41:49:63:1C
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019D99D05551807FA242E08552639D724645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 085D
Signing time: Fri 17 Apr 2026 05:01:00 +0000
Manifest this update: Fri 17 Apr 2026 05:01:00 +0000
Manifest next update: Sat 18 Apr 2026 05:01:00 +0000
Files and hashes: 1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: li6POLvHGNBFhQKsMifXQdSQWIA5eYVX5KcIIJbO7ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:55:51:80:7f:a2:42:e0:85:52:63:9d:72:46:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Apr 17 05:01:00 2026 GMT
Not After : Apr 18 05:01:00 2026 GMT
Subject: CN=da064e1ba77f36999a43892b810ecc0d4149631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:2d:94:6b:61:10:12:13:6e:fd:b5:d9:f9:
f8:20:fe:bd:28:57:d2:f2:6e:22:92:d3:69:57:fd:
92:d2:a3:32:f0:b8:65:93:c7:80:f7:22:72:e2:4a:
6e:78:cc:b0:32:74:b8:e4:a3:6b:4b:27:f2:b6:01:
d7:99:6a:26:a4:55:ba:99:08:89:5f:3c:5b:ad:c5:
88:4e:6e:ac:63:03:c8:4b:70:b4:97:be:19:d1:2a:
63:ef:08:a8:e8:b5:c5:a2:e7:0f:7b:c0:14:60:06:
f7:27:90:89:c5:42:2e:41:47:bd:02:9c:9c:64:bc:
4b:e5:37:f4:89:3f:da:c6:67:7b:da:e0:9b:4a:80:
2a:5c:cb:aa:4f:51:f8:50:50:4f:0e:1d:01:07:aa:
00:dc:8f:85:b4:2f:84:cd:7f:11:e2:16:bb:a1:10:
dc:da:dd:de:cd:5e:27:bc:e6:73:f6:0a:ca:4e:92:
1b:9d:a3:d7:b1:78:7a:5c:95:a6:3b:39:83:ad:78:
d0:8f:a3:94:c8:25:a9:3f:96:16:34:06:cc:e3:db:
f9:00:03:b8:50:66:62:d8:f6:33:92:dc:7d:18:8c:
3f:64:c3:8b:2d:30:24:72:ca:38:86:51:69:53:cf:
45:52:58:82:51:5b:ec:e5:58:e5:ef:28:b0:95:40:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:4E:1B:A7:7F:36:99:9A:43:89:2B:81:0E:CC:0D:41:49:63:1C
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:ca:bc:77:56:ee:6c:c7:49:99:c3:de:97:bf:e2:9d:5e:
bb:c4:f8:93:a4:a3:26:ef:bc:50:ac:d5:11:13:ca:4e:03:38:
7a:c0:06:c9:ec:78:90:ca:17:a9:c1:60:22:00:ae:20:28:8c:
be:f2:4f:88:9b:1e:d6:4b:ea:13:f1:76:f2:b8:8b:8e:b6:d9:
b0:e2:df:6a:e9:9e:9a:e4:ea:38:39:09:b9:06:eb:b0:7c:1a:
98:59:b0:09:1f:94:11:ab:e3:ce:6c:61:1a:25:fd:04:60:31:
eb:c2:10:8c:4a:c0:98:bd:8d:0f:cb:91:a8:a5:89:c8:eb:ce:
d8:0c:b0:7d:f9:ff:32:9f:13:ad:cc:2d:f0:3f:19:63:a6:85:
3c:8f:7a:0c:59:90:4a:b3:88:51:84:4e:4f:33:67:1f:e4:7f:
80:ee:9d:d3:fe:88:9d:81:74:69:ae:20:42:22:08:01:91:0b:
c7:db:70:8a:55:4a:da:16:18:7e:a6:25:57:1a:50:36:dd:f9:
af:60:4a:a2:64:ed:58:e6:60:86:88:30:f6:82:2c:d6:91:93:
c7:0a:7c:f7:f1:11:de:8b:be:0e:89:f5:d7:b1:e3:be:c8:2a:
44:12:f4:f0:9e:d8:4d:d9:a1:0b:3d:fb:03:4f:f1:34:dc:4b:
2f:28:c3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:37 2026 by rpki-client