Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: aeAmnY2mpIlGx6HrB5Ce7rSYw7tB2rKHEYM0jFlPXPo=
Subject key identifier: 85:19:10:69:88:D9:02:13:BB:D1:09:61:CE:7D:7B:86:5A:66:B1:13
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 019D9B87BFEBC67B25D60060429C4868EFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: K8HecFRRKEjS3qKmvuFAnvz_-uc.roa (hash: vesVSy2mT3SX5WV3LlmG2YI3Cv5I/bjZoprTrOQYHHA=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: genR7agrjjqMZICUnvisSWY3IbxPnK+Rf0Ctu3czuTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:bf:eb:c6:7b:25:d6:00:60:42:9c:48:68:ef:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=8519106988d90213bbd10961ce7d7b865a66b113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:83:03:a8:9c:66:0e:58:4a:8b:f5:53:72:
50:3d:04:be:26:88:4c:e0:6a:ae:9a:f8:bd:41:5c:
f7:c0:10:16:53:4f:c5:5c:3e:5a:40:92:b4:f2:ab:
07:87:71:fc:0a:c4:d0:63:c7:77:83:12:90:cb:f5:
48:6a:d7:14:d3:bc:0c:eb:04:ee:d3:4c:ec:e2:2b:
c6:71:49:ac:e9:96:73:0f:4a:ac:d3:e2:ae:df:e2:
ea:e9:32:eb:9b:b0:e9:d9:a8:90:d4:a9:ff:e7:42:
94:1e:5c:bc:82:7b:ac:50:8c:c4:fc:83:0d:33:4a:
bb:d9:ee:c6:01:59:3c:9a:b6:48:7e:2a:d6:65:5c:
d3:61:d1:cc:4c:08:fd:0a:05:ae:c0:20:bd:8e:f4:
be:b4:54:a9:2a:61:83:72:a3:84:a1:d7:7c:6c:e5:
ab:d0:1d:30:2e:1f:0c:d8:cf:57:22:99:ce:df:de:
ce:9c:bc:90:65:7e:d3:b7:7d:25:92:0a:aa:e8:6b:
86:58:47:db:4b:6a:4d:0d:f7:7f:48:5b:8e:ee:a5:
d5:44:e9:30:e8:df:c3:ae:5a:58:d8:47:5c:84:fd:
01:12:d4:91:f9:57:fd:53:39:26:ab:62:31:0a:56:
40:cf:ed:22:46:d0:f9:1b:2a:06:cd:b8:ec:69:47:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:10:69:88:D9:02:13:BB:D1:09:61:CE:7D:7B:86:5A:66:B1:13
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:e5:38:cc:33:8d:7e:32:ef:fd:26:e4:6c:03:59:c6:f4:
fd:c1:aa:ca:17:8e:39:77:19:21:55:e9:d2:00:0d:8a:b3:c8:
0f:0c:62:10:ee:86:b0:72:6e:a1:2b:0c:d6:62:70:91:0e:85:
0e:7b:de:be:07:6c:e3:8c:3c:6f:46:9f:8a:82:7a:78:b6:4e:
ba:85:5f:d1:26:56:87:72:46:18:98:89:c5:35:33:5a:92:e5:
cd:fb:e1:68:73:b2:cb:ed:4d:c4:e8:85:d6:8a:2f:62:da:34:
d0:34:4d:22:d5:0f:8c:22:9b:c7:c7:cb:de:1a:07:cd:7c:e8:
fb:fc:f3:ba:83:83:b8:6c:45:0e:38:b6:af:8a:db:d5:a3:01:
69:b6:c6:6b:3f:dc:61:9e:20:4a:9f:e4:38:a6:1c:1e:83:03:
bb:02:4d:1e:01:08:66:f1:c1:98:ca:62:17:27:1a:d8:b7:33:
e2:7f:2f:62:1d:c9:fe:21:2d:6e:cb:08:41:ec:35:09:b3:12:
5f:2e:69:a8:39:19:4b:70:ee:1e:0d:14:a7:de:d3:bb:6a:0a:
2b:a6:b1:a5:af:18:71:c5:2c:7f:07:61:38:41:6e:84:db:f4:
1f:0f:f9:ea:2d:14:30:50:1e:c1:2d:6e:cd:4f:59:4c:54:a8:
82:90:48:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:06 2026 by rpki-client