Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: wxsjsoX6Xti9j+frSSSY/jB/4qXZyMs2btsMSXez2lc=
Subject key identifier: 98:3E:BC:D6:AD:FB:C7:56:E7:39:FD:3A:3F:94:A6:84:2E:F6:EE:6C
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 019D99D00D631E06C98195059A3231A3271A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 0989
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: ALLGVKP-5SXjVEpjuKZaujJ3frw.roa (hash: 2IbnRTYsIxpxMkgjyLztl2mAatRyrBZ2hVeLGo8g2qQ=)
2: ATMfOPn_iklWkDGZaU6nBEYrMIs.roa (hash: MkgqGmH4i1AY83gSH/fJ/hLhxo7uHROhQ+deiJMJQps=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: XuGJxY1zf4AfJL+ApvA6pyAuJozn/aIruAoimiASslA=)
4: gd0apcrdYEI4bPnkTNGJSM4gRa4.roa (hash: p+dDYEXfjkS2FAsmztfw4NEl9rJExwTKxbBp/O3yJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:0d:63:1e:06:c9:81:95:05:9a:32:31:a3:27:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=983ebcd6adfbc756e739fd3a3f94a6842ef6ee6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:5b:6d:d4:e3:f0:5c:52:8a:e9:d9:04:90:
6b:f2:2c:bf:19:5e:eb:1e:92:b2:73:9d:fd:30:cc:
6f:09:04:47:2d:11:0b:48:da:eb:e4:d5:ae:ef:1d:
ab:85:7c:fa:f1:2c:63:e0:3b:e5:25:a5:52:e6:22:
b2:4d:3a:38:90:89:a5:56:1d:0b:d1:13:b1:20:5f:
3c:65:98:fe:e5:96:99:44:23:22:10:6f:33:17:a5:
5d:5b:22:b5:dd:3c:43:e8:e2:18:2e:61:68:7c:b0:
62:05:ff:ce:08:4e:2a:7b:40:27:a6:b2:ba:c0:8b:
0a:1f:e0:d9:47:a7:2a:cf:ca:5b:83:41:58:57:23:
35:d4:54:a0:54:a0:bf:01:24:00:d8:aa:5a:72:2d:
1d:fe:44:ac:be:08:45:f0:62:17:05:2f:bc:52:9f:
e9:ba:69:b9:b9:55:00:f0:76:d9:4b:7d:2a:56:c3:
12:e0:bf:d1:7e:a2:73:f0:16:2d:c3:81:8b:54:48:
14:34:ac:36:27:9d:91:0d:00:68:db:f6:8b:63:2c:
c8:43:fd:21:a2:64:72:44:6b:7a:0f:79:97:84:de:
a0:56:ff:d3:4f:39:63:b9:d9:99:37:a0:94:ea:85:
8c:39:53:82:fb:4b:8d:bb:d9:b0:87:c4:0f:3f:1b:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:BC:D6:AD:FB:C7:56:E7:39:FD:3A:3F:94:A6:84:2E:F6:EE:6C
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8c:58:25:e1:30:9a:65:c7:b6:e8:ce:37:76:20:9a:23:d3:
53:ac:88:d7:5b:d5:8c:77:98:eb:d7:14:9c:fc:1c:69:52:b2:
2b:f1:aa:1c:98:1d:ea:dc:7c:55:a0:fe:df:76:14:0b:d8:7b:
a1:56:ca:8c:83:a8:4e:fa:04:4a:5a:87:33:3d:aa:0b:4f:63:
37:15:57:5e:61:24:fa:9a:d0:4f:92:32:5c:5e:fc:40:9e:cc:
81:6c:50:49:e9:6c:f0:ca:cd:c6:08:b5:da:cf:58:4d:d5:6a:
9f:77:91:57:5d:b9:3a:b2:06:07:df:d0:2e:e7:7a:07:9e:c1:
de:65:01:57:24:9e:78:d1:8e:94:5b:ae:58:ae:f3:d7:ba:c5:
37:8c:6d:38:b1:62:cf:c3:82:10:7d:f2:18:d6:37:91:85:9e:
95:d9:15:e3:9d:d1:a6:2f:0d:ee:17:b4:b1:af:44:ac:f6:61:
95:b0:f6:6d:2c:68:12:1f:ca:b1:67:fc:2a:f2:46:56:96:b9:
f6:27:df:db:32:cd:11:e1:ac:c0:03:bf:e8:7d:4d:eb:4b:58:
bc:63:8f:31:3a:20:74:eb:ed:12:95:08:ff:40:bc:88:3a:10:
37:f1:41:54:16:1c:02:03:39:65:5a:65:d1:66:01:58:a5:6e:
81:94:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:56 2026 by rpki-client