Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: Gt+UzcuFjrPclR/AFFs4prOLltggnKyyEe6S28Y2YJI=
Subject key identifier: A0:F9:D0:60:C3:49:EC:F7:AD:DB:6A:65:9B:E1:BA:D8:6C:AD:B8:60
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 019D98BD67674557792F2A81FE683FF91965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: o+j1gBzpJuOID/s0pI71KhY6fGhWAl7N9t5ycU1PTiw=)
2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:67:67:45:57:79:2f:2a:81:fe:68:3f:f9:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=a0f9d060c349ecf7addb6a659be1bad86cadb860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:30:1d:91:cb:78:38:d4:02:b1:5c:3c:96:
e4:ca:06:c7:ae:ca:53:39:70:b6:b4:68:86:05:24:
26:f0:61:10:b7:5f:71:b1:0a:6d:1e:81:c3:cd:37:
b3:ad:8f:87:c4:7c:63:a1:6e:85:c7:85:c3:39:eb:
af:58:65:9b:8e:bb:2f:14:48:d9:54:7a:f2:d3:c1:
b4:af:33:ab:9f:ef:27:98:09:e1:84:08:bf:a3:64:
0d:0c:6f:db:dd:cc:ca:a9:4c:e1:5e:67:42:7e:ee:
61:c0:9b:81:70:2a:1f:1e:15:9d:24:76:ef:d5:82:
50:b0:d3:61:87:72:59:71:00:7b:40:84:7c:49:b7:
87:4c:0d:5c:ed:b1:a3:ef:9e:5a:bb:8a:99:e5:31:
dd:f2:3b:d2:ce:6d:a7:38:af:78:bc:e4:d7:88:69:
25:74:12:df:72:d6:de:05:d3:58:39:5f:e4:97:fc:
4f:1b:b8:8e:7b:c1:b4:54:5b:a9:68:ac:10:90:fb:
2f:31:b6:6c:fa:fe:31:71:5d:e7:0f:d5:76:2a:c2:
8b:08:9f:8b:c3:91:77:9b:66:c3:0f:1a:23:e3:b2:
1f:54:5d:34:e5:a5:dc:86:24:be:60:a7:26:b7:ba:
9d:24:9b:21:4f:cc:37:1c:4e:0e:d0:b5:bd:ce:d7:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:D0:60:C3:49:EC:F7:AD:DB:6A:65:9B:E1:BA:D8:6C:AD:B8:60
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:a4:bf:83:4d:3d:b9:cf:d1:10:81:ef:eb:79:d5:6b:96:
59:ae:e6:ae:a9:24:97:64:04:dc:a1:79:cf:e1:d7:83:28:a9:
15:6b:64:03:26:1f:1b:a8:4c:ff:5e:88:e0:fe:04:af:ac:91:
6d:ad:7a:e8:0c:38:34:98:2c:99:c3:d6:8c:20:e0:30:df:96:
1c:7f:ea:2d:85:d3:c9:2e:82:21:ee:1f:01:bb:c1:b2:12:f9:
f0:a4:ff:7d:8b:2d:34:ee:0a:d0:c7:d2:a3:2c:2d:99:cd:9b:
8c:f1:6e:f4:02:d9:e7:22:24:23:2d:a4:6d:e6:dc:c9:dc:f0:
70:7b:e9:f4:c2:00:e9:a7:46:90:84:0e:2a:6f:3d:69:a7:d4:
ef:e8:19:df:06:2c:51:90:bf:a0:a4:64:86:60:53:e2:2a:4b:
50:20:6a:08:ef:1f:2f:13:2d:71:18:bd:d5:57:c4:7a:63:02:
fa:07:82:61:d7:86:89:94:d2:56:5d:1d:1f:19:50:8d:db:23:
78:83:e5:89:ac:2f:33:ad:55:20:2a:7e:6d:69:d2:75:b2:11:
b2:98:ea:06:1b:dc:da:34:d6:39:2e:e0:5b:15:c8:f8:7e:d3:
9a:53:19:99:01:38:82:1e:28:27:37:49:39:a8:ca:2c:23:e1:
59:e8:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:37 2026 by rpki-client