Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: B0knNlEC+wOBPC7MhJaFtmJERWgTrr1c6cU3imQmho8=
Subject key identifier: FA:23:60:71:64:F2:35:CE:D5:78:A7:ED:4E:A0:E0:44:B7:D8:29:03
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 019D97AB3904FBAF251F22187DB87CDF7B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 15AD
Signing time: Thu 16 Apr 2026 19:01:13 +0000
Manifest this update: Thu 16 Apr 2026 19:01:13 +0000
Manifest next update: Fri 17 Apr 2026 19:01:13 +0000
Files and hashes: 1: 2pSmfbphSDb9Cqxh8NYcKQtlp1o.roa (hash: maKyyaI7uWNQa13JatdDTrRmvHHlkhB9HEz590CRzd8=)
2: lNntVwqmP1g050CVm9YpSl35H2U.roa (hash: dV1Mh9n/uRu+yXT900FgqLc47Mey+zbCu4y2cZxScc0=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: u6LVMfobRUD/GH/oNvRMMRdMnQw6hMVb9zMCqGrE9rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:39:04:fb:af:25:1f:22:18:7d:b8:7c:df:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Apr 16 19:01:13 2026 GMT
Not After : Apr 17 19:01:13 2026 GMT
Subject: CN=fa23607164f235ced578a7ed4ea0e044b7d82903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:09:40:9c:09:66:eb:79:d0:f2:55:89:da:
79:cd:09:56:c8:7b:c3:e6:d0:0e:a5:db:87:62:56:
d5:3c:76:5b:b1:c5:48:a1:e6:87:a5:98:e7:0e:12:
56:3a:f6:3b:5c:aa:5b:d5:15:b1:44:b5:13:bc:98:
17:55:86:14:5f:78:c4:6c:31:c0:84:e2:69:3a:48:
4f:30:28:f3:45:47:94:ea:8e:a6:b7:df:0b:ea:3a:
13:c0:bb:5f:e8:3f:9d:2e:5a:d2:55:24:ff:b3:88:
17:43:0f:16:6b:f3:47:dd:11:a8:fd:4e:aa:90:a7:
66:1a:67:68:e2:44:ea:72:d4:c9:93:86:fa:12:8e:
67:90:50:0b:be:44:92:72:81:52:59:b1:8b:89:3e:
df:5d:0d:aa:ba:5a:e1:66:ab:ab:f2:85:0f:75:d8:
e2:fe:a7:17:97:7c:ba:47:5c:b6:a7:a1:ea:64:73:
eb:c8:1b:32:aa:ac:fe:91:15:e2:23:49:71:f4:06:
ad:d6:38:89:00:1d:8a:22:89:46:78:9c:a6:d9:93:
54:12:3b:22:34:8b:da:29:ab:3c:03:c0:97:43:a7:
c3:99:da:eb:bc:49:eb:2c:09:b7:d7:6a:37:7c:27:
65:60:17:5d:eb:40:bd:2a:22:00:90:f3:70:a6:24:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:60:71:64:F2:35:CE:D5:78:A7:ED:4E:A0:E0:44:B7:D8:29:03
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:6c:47:5d:be:7f:9a:80:e6:cc:44:97:c1:95:4b:01:c4:
a2:22:c2:a9:e1:2b:88:20:c3:14:9b:74:7e:01:88:10:60:1a:
f1:b2:c9:0a:0b:09:c4:f2:2c:cd:81:c3:f3:9b:8f:7c:42:d8:
2f:f7:f7:75:35:40:c0:0f:7f:2f:df:d1:f0:61:ea:82:e6:72:
ac:1c:04:62:aa:11:0a:22:99:25:d6:60:02:ff:ef:2c:cf:5c:
73:72:4e:16:70:29:14:bb:3d:c1:0a:52:38:2d:ca:67:35:42:
44:3e:c7:de:0d:9b:88:3d:12:2e:c2:ef:24:84:1e:f4:99:6c:
31:46:70:24:cb:5c:5c:0f:77:9e:66:9c:59:10:49:7a:3b:04:
6a:d1:9e:0f:0b:9b:04:cc:3c:97:b3:81:14:e9:67:c9:07:0b:
19:a7:39:d2:07:ff:90:c9:17:a8:e1:0a:4e:c0:8d:63:5a:43:
f9:7a:36:65:14:45:ab:ff:07:04:da:41:c0:dc:28:1c:de:d8:
5c:56:4d:fe:53:1b:97:99:46:5c:a0:ec:58:8b:71:70:e0:58:
ca:cb:86:bc:7c:ba:43:5e:20:8e:5a:b8:7e:d0:b4:d6:79:b6:
38:0d:4c:ef:d0:91:c3:46:65:f2:41:dd:23:82:7b:ee:83:13:
40:ad:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:45 2026 by rpki-client