Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: fKtR4H1Q3nfGiO3c+YaTNdhTFjpzVxRHUdrx5+2dQ+Q=
Subject key identifier: D0:3A:C0:B8:11:0A:7D:B6:7E:FB:B7:8F:5B:39:FA:AA:EE:65:80:5A
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 019D98F41AE966693E8DD841AF111726B072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:27 +0000
Manifest this update: Fri 17 Apr 2026 01:00:27 +0000
Manifest next update: Sat 18 Apr 2026 01:00:27 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: zTNXif2g70YTAvTVOv3FycslKre81cEzfXrpyw/qSnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:1a:e9:66:69:3e:8d:d8:41:af:11:17:26:b0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Apr 18 01:00:27 2026 GMT
Subject: CN=d03ac0b8110a7db67efbb78f5b39faaaee65805a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:06:23:5c:7e:4b:51:26:ad:5c:a0:2e:8d:
9f:20:ea:35:49:ca:bc:20:89:ec:6c:8f:62:ef:5f:
4d:a2:9a:e1:12:01:66:cb:27:3e:9c:24:c2:3f:1f:
d3:25:c8:17:ff:7e:0e:49:62:41:a6:26:bc:38:03:
80:f7:69:c5:b7:5d:4b:ad:c1:53:4a:e6:d9:42:eb:
4e:87:30:6d:46:82:40:10:d3:91:0b:a0:58:07:4e:
dd:24:7d:f5:e4:a7:9a:55:3c:7e:8f:20:05:9b:dd:
92:8f:12:95:c8:0e:5f:8c:91:82:c5:f5:aa:4f:f4:
1d:c8:81:c2:ff:65:d9:d7:14:8c:de:4d:b9:45:6e:
1c:e4:24:0b:96:00:f1:05:de:c4:f8:68:cf:60:fb:
17:01:3b:29:89:15:95:27:e7:ea:b6:b8:08:e6:e3:
bd:4a:fe:6b:64:cb:f0:72:2d:6c:e7:23:da:86:8a:
01:83:5e:fb:4a:d5:59:0b:62:72:74:d2:4f:90:49:
06:b7:71:74:bd:ad:d7:7f:5d:26:53:ca:25:df:eb:
8e:4e:63:d6:67:9e:a3:96:af:2c:8b:01:a1:d2:00:
28:04:55:d4:b5:63:c2:be:fd:ec:f4:61:a9:d2:a8:
9b:8b:92:f1:7e:ce:bf:c6:87:f8:0e:08:05:c6:7c:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:C0:B8:11:0A:7D:B6:7E:FB:B7:8F:5B:39:FA:AA:EE:65:80:5A
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e6:e3:19:8b:20:13:ac:d6:1c:21:91:ba:c9:53:67:ac:aa:
24:cb:80:66:b8:60:b5:30:f6:fa:3b:06:58:2d:52:32:ce:58:
11:e7:f9:40:55:1f:f5:53:56:2f:92:df:6b:a8:5e:5b:e7:9d:
9e:b4:bb:0e:c0:64:33:8f:ad:f8:b6:0d:a6:3e:10:87:1a:b9:
41:53:2b:01:c9:b0:ba:54:d6:be:bd:2a:60:76:ac:ba:e0:4c:
00:fb:fe:12:b4:7b:0c:a3:e8:8d:38:50:5b:46:38:71:40:50:
99:f1:67:76:f8:e6:25:11:68:1f:e5:16:27:0a:63:23:6d:d7:
91:b8:67:a2:a2:8c:34:24:35:64:03:02:c6:50:16:ec:02:d9:
b5:75:e5:82:a0:c3:30:6f:25:d4:ee:88:e6:0d:93:36:8a:75:
e1:28:41:9d:ed:dd:9b:db:18:8e:6e:ac:0c:32:ec:86:fa:74:
a6:8a:0b:ee:ca:f5:7d:db:db:90:fa:08:9f:8b:9b:91:40:92:
a8:27:44:e6:1a:f5:34:67:2c:c7:c6:28:35:5f:16:dc:40:54:
8e:27:bf:d6:ce:3b:51:3c:71:10:ec:99:b6:9a:56:0d:76:fb:
9b:ab:c4:d4:ac:0e:b2:42:6a:23:34:2e:be:b8:10:e3:5d:c7:
d6:7e:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:25 2026 by rpki-client