Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: vH3T6JV8gPYB7mBhzr/ct9BUsUOvb6p4MJ650kdnjeM=
Subject key identifier: AF:D6:93:FF:38:C6:AA:EE:15:43:79:F6:7B:15:9A:86:14:08:65:D9
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019DA45370562D85FEB1E2B25195B03F1AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 06:00:24 +0000
Manifest this update: Sun 19 Apr 2026 06:00:24 +0000
Manifest next update: Mon 20 Apr 2026 06:00:24 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: dFAFP2Dx/90eGr2ga+VdoJwLvBLIp/h4+WDrFbqt6JM=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:70:56:2d:85:fe:b1:e2:b2:51:95:b0:3f:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Apr 19 06:00:24 2026 GMT
Not After : Apr 20 06:00:24 2026 GMT
Subject: CN=afd693ff38c6aaee154379f67b159a86140865d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:85:ca:59:2a:58:12:47:f1:35:4a:66:7d:
2f:2b:93:fd:58:0b:65:70:dc:59:1e:1f:97:de:97:
b1:91:bb:50:c7:de:04:b5:86:42:84:10:b3:32:31:
38:03:ff:e8:3b:b2:65:5c:a2:b0:f7:bc:dc:15:49:
3d:71:fb:a2:f4:ed:23:f4:e9:5e:63:ca:5c:e1:90:
db:5e:9e:28:55:ce:8d:d0:44:0a:5d:a9:f7:a7:a3:
88:a2:99:2b:aa:02:d6:e6:65:40:b2:b1:27:66:c1:
25:ba:06:1e:4f:fc:f6:4c:e8:35:e0:41:9a:b2:3e:
b3:9e:ed:a4:50:b8:f7:5b:b7:f8:c0:e6:f7:32:9e:
99:6a:2e:37:97:31:5b:86:d1:41:be:41:7d:a4:56:
06:b8:5a:49:0c:e6:0d:a0:31:51:1d:c1:ec:fa:57:
8f:4a:c4:50:3f:bd:e6:e8:2a:1d:ce:c8:d1:3a:74:
3d:9a:34:9d:59:07:27:79:ab:ec:e7:00:9c:8d:8b:
3c:e7:76:4c:6e:ff:4b:07:d1:11:95:a0:fa:3b:50:
c4:82:d8:b1:10:db:da:54:99:e4:4f:0e:f1:30:a7:
41:55:8b:c3:3a:ec:a9:90:87:3d:d0:5d:fd:9e:ba:
58:cc:70:10:02:57:fa:c7:d9:cc:80:1c:86:41:20:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:93:FF:38:C6:AA:EE:15:43:79:F6:7B:15:9A:86:14:08:65:D9
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7b:9f:f8:43:df:3d:70:d3:be:2e:51:87:98:37:1c:e2:a3:
7d:87:3a:85:a1:6d:a7:bd:fb:7e:07:81:c3:c2:02:f0:a6:74:
30:30:cf:10:83:1e:7f:64:25:7b:fb:97:c4:fa:20:22:f4:84:
1b:d7:c3:17:3f:6e:75:3b:56:00:3d:bd:41:3d:d9:d6:6a:e7:
5b:1a:4b:0c:fe:cc:f0:8a:93:5a:73:09:31:9a:1d:d8:12:ac:
4e:94:ca:73:9c:cc:17:b3:3a:11:2b:fa:fc:20:11:4e:c4:1b:
61:6b:44:0f:ec:29:38:b5:c4:69:a2:07:0f:1d:36:9e:c5:74:
21:eb:fd:20:25:18:67:f5:da:9d:3b:26:73:aa:6e:08:53:61:
f4:74:c1:aa:c8:a3:cc:31:b6:72:2b:c0:81:4e:83:9c:a2:98:
d7:06:0b:2b:71:66:14:73:cc:d5:c8:cf:fe:96:f9:2c:3d:ee:
3f:73:d0:a3:15:dc:f9:7e:e1:90:01:0b:19:05:f6:fa:e9:a9:
98:92:20:e8:9b:c7:db:83:02:14:6c:8e:35:4d:1f:ed:b7:39:
85:a5:38:4d:16:ea:38:b7:2c:da:d0:1c:72:08:84:cb:09:47:
f2:71:56:5a:fa:70:ce:8b:79:06:1a:9c:f9:d6:70:c9:00:da:
41:13:3d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:28 2026 by rpki-client