Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: AFYncBYILSmHMYp2g4/e4ECMD7BUvuL0E9Qk+F5UjTw=
Subject key identifier: 0E:11:3A:FE:3F:B8:52:C9:A5:77:1C:23:D7:47:C3:11:10:BC:48:D7
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 019D98F484B356613FCF33D14F717A358A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 1561
Signing time: Fri 17 Apr 2026 01:00:54 +0000
Manifest this update: Fri 17 Apr 2026 01:00:54 +0000
Manifest next update: Sat 18 Apr 2026 01:00:54 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: Qo+KEopS+SetyPxkrvSy714ySCeD4JKPiD42JePVXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:84:b3:56:61:3f:cf:33:d1:4f:71:7a:35:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Apr 17 01:00:54 2026 GMT
Not After : Apr 18 01:00:54 2026 GMT
Subject: CN=0e113afe3fb852c9a5771c23d747c31110bc48d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:96:c6:f9:ac:a3:3f:df:b1:63:34:18:bc:
7a:07:a5:19:f2:60:a9:42:71:8e:92:81:4f:98:05:
ec:df:82:6d:57:47:db:11:1d:35:e3:ec:7c:29:b9:
6c:82:2b:b2:e3:af:84:bd:32:b1:58:92:21:a8:34:
e0:62:e1:6c:ec:26:62:ff:ba:ff:04:e3:f5:29:8a:
a5:40:9c:c2:94:11:2f:af:cc:30:d0:11:76:26:f0:
47:dc:eb:d4:a2:2a:cc:cb:9f:5c:e2:33:d0:a9:9a:
4c:06:a7:50:8c:9d:63:54:1d:74:a1:01:6a:c3:12:
80:ad:6e:ea:f3:5e:30:e9:ab:1a:16:02:5b:cd:b4:
21:46:19:67:f0:e2:5a:87:ea:f1:8a:8d:e2:e1:aa:
53:f0:29:67:89:7c:9d:2c:e0:18:ef:a3:00:7c:34:
71:db:0a:1b:84:72:24:4b:9e:bf:ff:d7:fd:8e:8e:
d8:e2:d0:1e:20:b4:b7:63:6c:5f:0f:ef:54:ab:9b:
6f:53:c2:57:8e:f7:0c:b0:1d:27:aa:25:35:1d:37:
0b:9c:30:24:b5:6e:8a:7c:e0:c9:19:5a:3e:ad:c8:
8e:ac:ea:0d:82:74:8f:07:b3:61:38:ea:49:8c:3a:
c7:7a:83:4a:8f:99:e0:9b:76:ed:de:c1:51:18:69:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:11:3A:FE:3F:B8:52:C9:A5:77:1C:23:D7:47:C3:11:10:BC:48:D7
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b5:6a:46:a6:58:2a:94:40:4d:43:7a:9c:29:b6:f7:13:65:
ea:38:d4:51:0d:a5:3c:0c:92:d6:e1:90:fc:90:af:2c:75:2a:
f2:85:27:a6:b4:91:ed:0d:a8:44:5e:08:47:af:64:bf:1c:f4:
38:47:11:f7:0e:42:0e:c2:1d:90:33:ec:ec:f1:95:20:1f:4b:
26:48:2d:ad:0d:33:19:4a:c7:24:03:3f:80:2e:36:7b:8c:49:
ee:8a:93:50:f9:27:4a:18:0b:06:2e:f1:74:95:bb:0f:d0:fc:
16:13:d2:7e:d8:b0:69:87:c3:66:40:5d:96:61:1f:a6:38:08:
60:21:f7:91:69:b9:e7:fb:3d:f9:02:29:43:d9:97:55:da:ec:
8b:03:bc:08:c2:46:b9:41:61:f2:eb:e3:95:82:30:0d:10:58:
7e:ea:3c:3c:be:a7:d5:45:2d:49:bd:67:ad:1c:67:f4:94:78:
95:97:fe:36:d8:bf:46:b2:ae:c6:1c:1a:cd:4e:d4:b7:27:0a:
26:df:06:d3:df:f5:59:4c:f7:c0:2b:42:70:8e:61:57:b3:d4:
e9:bd:0e:37:89:19:a0:59:8d:41:c0:6e:ad:57:c0:ca:1e:62:
fc:82:b0:4e:1b:d6:73:02:ae:e9:b2:9a:02:7f:09:5e:3d:5c:
45:40:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:08 2026 by rpki-client