Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: AzsUtbGyeFjVVswmYcc7/9sGOLNxiVKHcst3ikLo5eI=
Subject key identifier: 14:AB:B0:86:4E:8F:52:3D:12:CD:F2:AD:F0:5D:C1:CE:46:79:34:7A
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 019D9AABEB803B1227EC6B93B633B903DDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:51 +0000
Manifest this update: Fri 17 Apr 2026 09:00:51 +0000
Manifest next update: Sat 18 Apr 2026 09:00:51 +0000
Files and hashes: 1: S1duhzLYVWCPzWLAVIN0U9O31sE.roa (hash: iGd5/M7wFo+vh2tNkFU7YoI/hPvzSVi7SBf4jj6Qs9I=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: i210EaWtQIZrb6wgbj2R0vqRHnWn0SUUEkghTKwbSVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:eb:80:3b:12:27:ec:6b:93:b6:33:b9:03:dd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Apr 17 09:00:51 2026 GMT
Not After : Apr 18 09:00:51 2026 GMT
Subject: CN=14abb0864e8f523d12cdf2adf05dc1ce4679347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:19:52:0c:1d:8e:ff:aa:3e:0d:12:2e:cc:
c0:f8:87:04:9e:3e:7b:6c:b6:2d:05:03:62:6f:7e:
3e:1b:03:4e:0a:59:12:54:c8:b7:0f:e4:b8:b5:24:
b5:f5:83:d9:39:93:36:4b:8d:cb:3d:28:98:95:b0:
3d:ff:46:63:7e:ef:61:46:68:ba:9d:22:57:33:c4:
7a:f3:90:e4:9c:26:99:9c:7c:ce:8f:8c:07:1a:78:
13:5e:b9:76:fa:b5:6f:8a:e3:e9:64:33:48:3d:7b:
47:92:fd:31:aa:98:5c:3a:74:6e:0f:ea:e5:1e:f3:
f0:5b:9d:bb:49:fd:22:2b:48:5e:63:97:87:8c:10:
0e:18:1c:12:25:10:c7:6d:ab:77:c1:86:24:04:b1:
00:16:6e:6c:f4:70:df:3a:2b:11:ac:11:23:be:5c:
f5:89:97:6b:97:ee:bf:24:08:69:5f:de:68:bb:9a:
4e:44:4d:96:bb:0d:68:7b:5d:de:73:f8:b6:82:d6:
44:0f:f8:3e:60:f4:9c:9f:2b:33:8d:ec:a4:df:9d:
b6:e2:3a:03:b4:ef:f6:d7:35:c6:a9:67:a7:ce:4b:
3d:4d:fc:ae:bb:c6:f6:35:e1:90:77:b9:72:3c:bf:
f0:4f:b7:c0:0e:00:8d:57:a9:91:9c:4a:83:b1:8b:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:B0:86:4E:8F:52:3D:12:CD:F2:AD:F0:5D:C1:CE:46:79:34:7A
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:ae:0f:fc:d8:21:98:b9:39:0e:42:02:35:bc:63:1a:77:
66:70:85:4a:a5:dc:e6:e8:e7:08:d1:41:ab:db:09:ff:e5:2e:
68:54:a8:25:1c:46:3a:90:7a:bf:16:1e:42:e9:58:07:8c:af:
c8:bb:3b:e3:bc:3c:26:5f:39:a2:99:ef:4a:6e:96:0d:42:7a:
4f:c9:3c:bd:e3:b3:06:4b:f0:3e:88:e9:20:e1:cc:4b:3e:8c:
73:fe:70:83:cb:65:c4:73:7b:c1:1d:f9:a5:dc:68:57:67:5b:
27:b2:3f:38:5a:49:8c:4a:16:46:86:c5:18:d5:0f:fa:1b:a4:
82:6a:48:7c:94:6f:68:5b:13:e7:77:43:3d:90:30:10:98:24:
40:59:10:d9:ee:83:71:73:ba:ee:de:9d:dd:7e:c1:63:31:61:
55:52:d6:57:6d:2e:9f:01:25:66:7b:7d:39:c5:96:60:df:92:
ef:91:eb:ae:0e:2b:d8:9b:9d:6f:88:da:6d:25:86:d1:a1:5f:
55:48:50:ef:66:ae:86:88:21:ab:4f:ac:59:64:fe:0a:f2:99:
ef:e2:3d:8b:66:0e:86:23:31:c0:fa:a4:76:9e:02:90:65:1c:
cf:d4:d9:46:97:f3:e1:e5:25:72:1b:33:fa:a7:c3:75:96:ec:
8d:2b:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:36 2026 by rpki-client