Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier: Ksx3AWVCBakodpgOX2EZZsv5tW27mWsZM6ovejF6EFM=
Subject key identifier: 7A:FC:D3:A7:B0:1F:C4:AA:AF:C9:DB:CB:F1:FF:A9:89:59:78:AB:33
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial: 019D9AE2DFFEE8F2D99D67FA92895881EB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: X+UiSsQbst1vbAJgNd5W/Z/EuUtQiT7TkrVvEe8S43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:df:fe:e8:f2:d9:9d:67:fa:92:89:58:81:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=7afcd3a7b01fc4aaafc9dbcbf1ffa9895978ab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:8e:e4:9a:c0:44:82:2d:7c:2a:8d:ef:8a:
0a:c5:49:60:5f:c8:fe:b8:a8:2e:44:05:39:72:90:
b9:1a:ac:f9:d8:34:fd:52:48:56:0f:c7:3a:7e:44:
66:b4:6b:a4:4a:fe:d2:cf:f4:a3:5b:c2:d4:f4:62:
d0:e6:a8:7e:2b:82:e5:3c:11:b4:0a:02:73:bc:ac:
6e:07:07:c6:97:11:a1:e4:20:1a:ec:4f:99:f5:c1:
9a:8c:30:e9:5e:6a:ca:7b:5b:f5:ec:86:28:67:68:
a6:02:50:7d:16:e3:72:82:13:94:31:81:a4:d1:c3:
0c:9d:6d:57:e1:1a:6d:88:16:0e:c1:01:70:c8:e6:
20:b7:6a:10:6e:19:8b:75:43:60:ab:d0:b1:40:82:
e6:87:1e:e6:d2:72:9d:07:0f:b1:18:54:5d:83:6c:
80:48:bf:1c:28:11:c9:2e:54:82:de:d3:51:46:5c:
59:db:0e:b9:5c:ed:57:51:33:22:1b:15:dd:c2:96:
08:ee:dd:36:15:a2:a3:27:02:b9:f2:4a:f0:6f:ad:
3f:67:25:ac:2c:a0:a0:89:0d:bd:13:1c:30:aa:74:
ac:62:ee:cc:9e:f4:0d:0a:51:61:f2:27:c2:80:4b:
ce:4d:7b:76:12:a7:02:ba:40:ea:6f:b4:92:18:3d:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:D3:A7:B0:1F:C4:AA:AF:C9:DB:CB:F1:FF:A9:89:59:78:AB:33
X509v3 Authority Key Identifier:
keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b5:c7:7b:52:b9:46:24:84:01:da:2e:ea:83:61:d0:bb:f3:
15:a7:8a:f0:b8:5e:60:8e:89:b4:31:12:80:b8:f9:cd:f1:c4:
44:d3:9e:a9:a2:66:4a:c2:53:75:8e:6f:47:0c:03:60:74:a9:
10:13:29:23:29:c4:3f:0f:7b:e2:43:67:4d:9a:25:5f:e6:87:
fe:39:5b:d0:6a:04:04:12:dc:46:35:fb:d8:d1:a9:f7:0b:b6:
27:99:2d:a0:35:81:15:40:f0:7d:ce:43:91:69:6d:aa:34:1b:
06:d2:ba:75:5c:5f:8f:38:dc:d2:df:86:7d:82:09:a8:79:2d:
90:17:6c:21:6d:b1:fc:20:cb:8c:6f:61:ee:36:7d:21:43:94:
36:af:99:03:9b:c5:99:35:05:b5:34:90:4b:02:6a:1c:a8:2c:
79:70:4f:0e:1c:e7:34:fd:e2:c5:cd:6a:13:6a:f3:c8:74:75:
6c:a3:ef:e9:be:f7:49:6e:da:93:99:27:cf:74:71:aa:e8:1f:
51:bb:ed:fb:78:db:92:e9:1c:c2:c8:77:7d:7a:62:3e:88:25:
5b:55:7c:47:0b:11:da:d4:75:31:52:27:db:3f:5f:5f:07:a1:
1d:56:b0:cc:13:61:59:0f:f9:bb:15:f9:bc:bd:57:e6:cd:06:
73:68:4a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4t/+6PLZnWf6kolYges4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4
ZDJkNjkwHhcNMjYwNDE3MTAwMDUyWhcNMjYwNDE4MTAwMDUyWjAzMTEwLwYDVQQD
Eyg3YWZjZDNhN2IwMWZjNGFhYWZjOWRiY2JmMWZmYTk4OTU5NzhhYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVuO5JrARIItfCqN74oKxUlgX8j+
uKguRAU5cpC5Gqz52DT9UkhWD8c6fkRmtGukSv7Sz/SjW8LU9GLQ5qh+K4LlPBG0
CgJzvKxuBwfGlxGh5CAa7E+Z9cGajDDpXmrKe1v17IYoZ2imAlB9FuNyghOUMYGk
0cMMnW1X4RptiBYOwQFwyOYgt2oQbhmLdUNgq9CxQILmhx7m0nKdBw+xGFRdg2yA
SL8cKBHJLlSC3tNRRlxZ2w65XO1XUTMiGxXdwpYI7t02FaKjJwK58krwb60/ZyWs
LKCgiQ29ExwwqnSsYu7MnvQNClFh8ifCgEvOTXt2EqcCukDqb7SSGD26TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr806ewH8Sqr8nby/H/qYlZeKszMB8GA1UdIwQY
MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt
YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj
LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurXHe1K5
RiSEAdou6oNh0LvzFaeK8LheYI6JtDESgLj5zfHERNOeqaJmSsJTdY5vRwwDYHSp
EBMpIynEPw974kNnTZolX+aH/jlb0GoEBBLcRjX72NGp9wu2J5ktoDWBFUDwfc5D
kWltqjQbBtK6dVxfjzjc0t+GfYIJqHktkBdsIW2x/CDLjG9h7jZ9IUOUNq+ZA5vF
mTUFtTSQSwJqHKgseXBPDhznNP3ixc1qE2rzyHR1bKPv6b73SW7ak5knz3Rxqugf
Ubvt+3jbkukcwsh3fXpiPoglW1V8RwsR2tR1MVIn2z9fXwehHVawzBNhWQ/5uxX5
vL1X5s0Gc2hKqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:29 2026 by rpki-client