Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: Ceo9oNOShfxt/xLE72hUKTnc62yq6DkBya33rIXTsZI=
Subject key identifier: 19:74:CF:0E:E4:14:6C:E7:19:8B:B5:8E:04:32:B8:BE:0E:61:4A:B0
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019D9962F7A1A420C91D6C0DF7E4E5C52112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: hiiHLgXrJk0uYqtjakDC3lGmAu7stcpbiPL9VIed1aI=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f7:a1:a4:20:c9:1d:6c:0d:f7:e4:e5:c5:21:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=1974cf0ee4146ce7198bb58e0432b8be0e614ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:43:87:3a:19:64:3b:2f:f9:3f:0e:e4:c8:
38:0f:4e:77:2d:cb:f4:98:f4:ca:16:27:0c:a9:6e:
e5:bf:a1:c4:65:b8:16:ce:d3:d6:9f:40:dd:b1:f3:
52:10:de:ca:0f:b5:27:00:ae:6c:a1:db:72:89:05:
5b:e4:9a:4d:e6:5f:53:e8:ac:ec:96:f4:7c:d4:f8:
0c:a8:28:79:d7:ee:17:93:cc:ee:1e:7f:31:f5:32:
9d:3e:91:31:a0:6c:1e:99:c0:9e:c0:41:c9:7f:03:
e2:52:27:f5:f8:a7:47:c7:16:65:73:05:e0:ca:a8:
7d:16:48:b8:01:63:66:0a:25:9e:1b:65:f5:ef:8c:
01:42:6b:29:c3:4c:46:03:c5:7a:70:a6:1f:38:47:
05:27:e5:fc:b4:e3:f6:dd:a7:b5:8e:f7:8b:c3:c8:
e4:76:7c:ce:6d:8c:c6:d3:40:92:95:e3:87:ad:ed:
dd:f4:3e:39:e7:c8:54:61:89:c6:5d:12:5c:64:f2:
71:d8:c4:7b:be:9a:1b:f6:09:a8:76:f7:79:61:24:
8b:5f:7e:ef:f3:e7:0c:cf:f0:1a:f1:62:d6:ce:ad:
17:12:38:16:b9:70:cd:34:e5:1c:77:db:3b:47:c0:
ec:4f:03:97:37:28:c1:23:12:7f:cd:fc:59:78:c4:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:CF:0E:E4:14:6C:E7:19:8B:B5:8E:04:32:B8:BE:0E:61:4A:B0
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:52:eb:70:22:f6:70:42:49:42:71:d1:cb:bb:35:1d:51:
6d:34:1e:68:03:55:be:a2:d4:81:1d:84:97:83:58:b5:e7:60:
ef:17:7c:7b:dc:8f:fe:c7:77:e4:a1:ca:21:c2:6e:00:2a:dc:
ba:c6:a0:b8:da:84:c9:f5:93:65:b7:4a:43:50:3f:cd:7e:43:
63:cd:f0:00:3e:dc:08:0b:b3:1c:f4:fe:91:f0:a2:aa:af:02:
55:8a:6c:43:ae:e1:1c:3f:8e:73:67:5f:65:63:ac:a9:64:e1:
36:c9:d4:a7:ba:b7:5b:c4:33:e4:2b:20:52:2b:59:67:96:c0:
a9:ff:03:f0:51:58:82:d6:40:ce:94:dc:c6:0e:df:ab:4a:e8:
d4:c5:5a:09:72:82:02:89:3a:94:28:c1:d7:19:04:96:e0:34:
fe:7f:0d:40:d6:e9:0a:e6:58:2d:c4:b7:95:a2:6d:17:3a:4b:
97:45:38:d7:e7:2d:16:6f:d1:05:a6:33:9e:35:42:75:e5:2d:
23:bb:62:4f:e0:35:23:f3:88:54:67:3a:68:15:71:ef:31:47:
fd:73:f6:6e:6a:48:ca:d6:be:e9:70:36:a5:cf:d1:0a:6e:67:
d1:19:29:56:dd:0e:04:30:ef:c4:f8:c2:19:e5:27:9d:1b:27:
87:57:d3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvehpCDJHWwN9+TlxSESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjYwNDE3MDMwMTMzWhcNMjYwNDE4MDMwMTMzWjAzMTEwLwYDVQQD
EygxOTc0Y2YwZWU0MTQ2Y2U3MTk4YmI1OGUwNDMyYjhiZTBlNjE0YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMlDhzoZZDsv+T8O5Mg4D053Lcv0
mPTKFicMqW7lv6HEZbgWztPWn0DdsfNSEN7KD7UnAK5sodtyiQVb5JpN5l9T6Kzs
lvR81PgMqCh51+4Xk8zuHn8x9TKdPpExoGwemcCewEHJfwPiUif1+KdHxxZlcwXg
yqh9Fki4AWNmCiWeG2X174wBQmspw0xGA8V6cKYfOEcFJ+X8tOP23ae1jveLw8jk
dnzObYzG00CSleOHre3d9D4558hUYYnGXRJcZPJx2MR7vpob9gmodvd5YSSLX37v
8+cMz/Aa8WLWzq0XEjgWuXDNNOUcd9s7R8DsTwOXNyjBIxJ/zfxZeMSFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl0zw7kFGznGYu1jgQyuL4OYUqwMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu9S63Ai
9nBCSUJx0cu7NR1RbTQeaANVvqLUgR2El4NYtedg7xd8e9yP/sd35KHKIcJuACrc
usaguNqEyfWTZbdKQ1A/zX5DY83wAD7cCAuzHPT+kfCiqq8CVYpsQ67hHD+Oc2df
ZWOsqWThNsnUp7q3W8Qz5CsgUitZZ5bAqf8D8FFYgtZAzpTcxg7fq0ro1MVaCXKC
Aok6lCjB1xkEluA0/n8NQNbpCuZYLcS3laJtFzpLl0U41+ctFm/RBaYznjVCdeUt
I7tiT+A1I/OIVGc6aBVx7zFH/XP2bmpIyta+6XA2pc/RCm5n0RkpVt0OBDDvxPjC
GeUnnRsnh1fTRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:32 2026 by rpki-client