Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: q5G+dXxNk2WuYOJex0fQiu/Buxnl8GSp0GOqAQcdXJ8=
Subject key identifier: 8D:14:7B:CC:97:99:72:AC:A5:23:7E:A6:7D:8F:EE:F6:84:47:2A:A5
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019D98BDBA360DCE8D51B98944922EFFFDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 102F
Signing time: Fri 17 Apr 2026 00:01:03 +0000
Manifest this update: Fri 17 Apr 2026 00:01:03 +0000
Manifest next update: Sat 18 Apr 2026 00:01:03 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: aW5vtbP6gNjuiHucwHAH5Vk4iglpR2dK6RP49vsE/F4=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ba:36:0d:ce:8d:51:b9:89:44:92:2e:ff:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Apr 17 00:01:03 2026 GMT
Not After : Apr 18 00:01:03 2026 GMT
Subject: CN=8d147bcc979972aca5237ea67d8feef684472aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:8c:23:b8:0e:52:5c:71:6a:25:08:ac:4b:
70:a8:a4:49:dd:d1:6d:52:f2:02:5f:ae:64:7b:78:
cd:b6:58:71:69:42:89:f0:80:d5:d5:31:09:18:30:
e6:8a:55:34:84:72:21:41:8f:21:d7:1a:8d:14:24:
98:e0:a6:a1:a1:7b:e3:31:2c:0a:50:e3:6f:69:88:
d6:61:3d:89:d5:d9:6b:2f:56:38:81:31:6d:ba:33:
12:8f:dd:a7:42:af:cb:6b:9f:bf:2a:6a:f8:61:04:
88:08:25:f7:96:cb:65:93:e8:8b:60:3c:d2:b0:c7:
55:05:b4:19:1e:88:6b:43:9c:ec:6f:f7:b2:25:9f:
47:db:81:24:a0:bf:ad:cc:f1:45:ec:fc:a2:53:a3:
b3:f6:f2:27:17:eb:6f:e2:64:07:0a:c6:ba:e0:31:
23:38:d4:55:15:86:28:21:7b:c5:fb:13:f1:c0:b0:
fe:2a:f8:96:d7:50:bd:b9:a5:4b:f9:60:71:2c:65:
34:14:f8:71:6f:15:0f:ab:f9:6c:54:c6:15:77:0c:
0d:b2:a7:5e:09:03:d1:a1:6f:b4:30:24:49:b5:b3:
f8:78:25:53:f2:95:d4:07:09:e3:d8:e8:94:d8:51:
24:5e:7f:58:55:cc:30:67:4c:9b:c1:ac:cd:5a:f4:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:14:7B:CC:97:99:72:AC:A5:23:7E:A6:7D:8F:EE:F6:84:47:2A:A5
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:6c:78:93:96:6b:9d:0c:f5:7a:91:d8:29:f4:c5:c8:cf:
b7:99:e2:a1:5a:7e:22:cd:58:ad:b4:bf:af:d2:60:b9:0a:d2:
c6:fc:f2:1f:6a:04:ae:ea:21:fb:f6:5d:f1:80:1f:7a:26:bb:
dc:fa:6b:52:f3:fc:bf:28:d4:64:3b:e1:35:3a:78:fc:d0:f6:
d4:17:fd:7a:e2:c2:42:d0:94:9e:a0:c5:f0:bd:67:f6:fb:cf:
5d:cc:ed:b8:cb:95:73:9a:04:9e:de:c4:cb:c5:66:25:3c:18:
af:f6:fa:61:b5:2e:11:fd:5d:cb:24:53:97:57:9f:67:82:5c:
09:71:16:63:f0:75:ed:4c:83:af:3b:e5:b4:48:f8:ba:e3:d4:
ef:56:38:e6:a0:2f:ad:93:32:c6:ce:ea:aa:08:fb:1c:4e:eb:
a8:a7:5e:29:c4:7e:7e:7b:a3:e7:5e:80:32:d9:24:63:e3:63:
77:7f:06:c7:fd:56:f6:22:1f:1b:ed:b1:61:26:ab:cc:1a:de:
17:07:32:02:29:94:92:e3:4b:d8:cb:94:b8:36:e5:76:c2:71:
5d:6f:24:22:94:f3:55:57:3c:cc:2b:d2:42:56:81:9f:51:0b:
4e:39:87:fc:05:72:3d:e8:f1:61:f9:c1:34:44:94:a3:63:5c:
32:a7:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:55 2026 by rpki-client