Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: QOzOULp3oc8yLgM2QqAUJhsqjz8ryU5waBfYA83Yb3U=
Subject key identifier: 76:91:0F:42:8F:48:CF:91:17:C5:38:9E:03:5B:C0:F7:95:A6:91:A0
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 019D9AE297A32B027E7B619746659229CB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1819
Signing time: Fri 17 Apr 2026 10:00:34 +0000
Manifest this update: Fri 17 Apr 2026 10:00:34 +0000
Manifest next update: Sat 18 Apr 2026 10:00:34 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: GvBCmstWDyzk+lN8JqFvLkO8cBZzTRFQWYo7zzb8d24=)
2: XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa (hash: PLd3AjjjU/YjEzgvUwnUvjyB10O7EBQqmUUYsFik7AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:97:a3:2b:02:7e:7b:61:97:46:65:92:29:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Apr 17 10:00:34 2026 GMT
Not After : Apr 18 10:00:34 2026 GMT
Subject: CN=76910f428f48cf9117c5389e035bc0f795a691a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:62:aa:74:11:fb:50:66:44:8f:8f:38:d5:
d0:8e:ae:65:81:b9:a0:61:d9:7d:83:ab:93:3b:16:
d1:7d:c6:8b:d8:7a:6e:34:19:33:a7:21:9a:1d:44:
65:f0:cb:b0:25:41:b9:40:3b:8a:69:7c:7a:87:d1:
d2:3f:be:bc:87:97:a0:83:f2:a9:89:ca:33:fc:df:
6a:2e:05:17:52:3c:ba:05:4a:a7:2a:a8:65:9b:3c:
21:e4:aa:77:e9:c6:0c:77:82:18:15:c2:fe:91:f4:
db:b2:7f:fa:52:59:6e:72:f9:89:82:09:dc:5f:74:
75:3a:35:ce:02:f6:04:53:bb:e5:e2:b4:e3:f3:a3:
c4:df:c0:65:0c:16:6c:a2:fd:ec:f5:c7:4b:89:17:
b7:c8:81:07:d8:35:32:1b:99:be:a5:7c:86:72:9c:
45:c7:46:76:5d:e5:fc:f7:de:4e:11:01:20:8d:0e:
80:95:fd:34:14:a7:b6:04:2d:d5:0b:4b:08:0e:b6:
c0:14:39:cb:4c:53:6c:13:e4:35:07:d2:6e:50:e0:
e8:a2:ab:a0:2f:b0:4e:16:8a:8b:f1:8b:ac:1d:bf:
3a:c4:72:6a:50:85:ac:4c:e2:84:4c:86:79:c9:9d:
70:90:2c:ed:de:16:2f:65:db:2e:fc:73:45:3e:e5:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:0F:42:8F:48:CF:91:17:C5:38:9E:03:5B:C0:F7:95:A6:91:A0
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:0f:2b:b6:18:d0:7e:00:bd:ec:9a:92:d9:a1:12:6e:61:
c2:a6:dd:8e:3d:08:e6:55:62:8c:76:5d:8c:2c:69:62:be:55:
23:c6:e5:09:f8:c7:97:86:18:b7:88:ff:14:54:58:47:88:e7:
e8:38:c6:6a:81:90:6f:3f:51:e7:8b:1d:08:41:5e:30:8c:8c:
df:60:11:0e:b3:8d:27:f4:6d:eb:50:e0:45:c5:19:6d:e9:1a:
37:cf:c3:8b:24:c1:df:3f:fa:55:ab:36:d9:ab:c0:3f:14:9e:
c1:be:8c:b6:6c:9e:c0:02:88:eb:c9:1d:00:f4:b8:59:8a:62:
8b:76:2f:98:5b:81:6b:74:11:07:69:75:de:71:54:97:ff:18:
ad:a6:29:a3:e2:5d:3a:c1:a9:56:d4:22:e7:38:b2:db:df:c7:
2a:9f:e9:0a:3e:80:5a:ab:9c:53:b6:37:6d:d5:26:89:06:c8:
fe:bf:81:55:4f:10:eb:d2:fa:cc:34:92:d5:29:d5:49:7b:0f:
7c:00:67:d9:48:99:95:02:2f:0f:12:66:bd:71:3a:cf:66:0c:
6d:3b:4e:ad:c3:2c:ac:27:9e:c1:f9:b3:21:8a:ac:84:59:dd:
84:03:1b:b4:af:35:1d:10:50:71:be:21:9c:75:c7:1c:d2:22:
64:a5:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:21 2026 by rpki-client