Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: 4taYVAiAFnViK9ErrX4utjFb6DQdSBKhqE8mz6HjapM=
Subject key identifier: 8D:02:4D:1E:95:AD:D3:2D:6B:94:37:AC:EF:4F:00:0E:1E:7B:6A:EA
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019D9AAC2DAC3A5D6DC44EC5C5B777220713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0843
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: djSnVM6oiqIHr0ErkCMzjwpx3lc0nhlTNmQHr5a6hrY=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2d:ac:3a:5d:6d:c4:4e:c5:c5:b7:77:22:07:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=8d024d1e95add32d6b9437acef4f000e1e7b6aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:2f:81:ca:c8:b8:10:d4:fc:34:f8:a6:85:
64:2a:17:9b:c5:fd:df:a9:73:5f:10:b5:e3:6c:33:
49:27:81:c9:6e:e1:ee:59:21:75:8c:3a:b9:cc:0e:
33:aa:52:c8:99:3f:fc:59:1d:67:43:53:9e:26:9c:
39:36:0f:f4:7f:3b:3c:cf:a5:23:e6:d5:97:9f:4c:
af:e9:21:56:b0:86:94:ec:20:db:ce:72:6c:d3:23:
16:8a:74:dd:d9:cc:65:52:6c:e7:ac:a4:d7:43:f7:
40:bf:b3:ad:e6:ee:c7:61:60:9d:65:d0:41:9e:07:
74:a7:2b:cc:b3:ea:2d:e2:c1:d9:3d:db:4a:8e:a3:
6d:60:03:74:c5:73:78:35:ae:57:de:66:2b:cc:4d:
fb:ea:f0:1d:41:40:dd:bd:6f:ef:1b:cd:40:1c:8c:
83:dd:a2:7e:ce:63:ee:bb:10:43:bd:01:93:5a:43:
e4:d3:42:0c:c7:41:40:65:2b:05:8c:15:0b:d4:b4:
e1:d8:61:0a:3f:86:60:9f:c7:e2:18:fc:be:5d:c5:
56:48:da:13:02:65:8b:6c:2e:30:a0:7e:d1:c5:51:
cd:cb:0d:eb:e4:af:21:a2:37:3e:ae:16:d3:b7:7c:
b7:5b:a0:e8:cb:f4:d2:38:9a:25:cf:54:9d:15:b8:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:4D:1E:95:AD:D3:2D:6B:94:37:AC:EF:4F:00:0E:1E:7B:6A:EA
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:a9:be:8e:8e:d6:84:e2:75:1c:ff:4a:b3:a4:8f:ee:0d:
8f:26:d1:d4:63:30:f6:28:72:27:cc:75:2e:e2:5c:ac:ef:3f:
39:3b:92:91:7b:d8:4c:a9:02:82:f7:c7:f1:8f:fd:2f:84:ae:
a4:07:7d:00:74:76:1e:ff:c2:13:b9:82:0e:f7:c8:4f:ff:75:
20:aa:8d:80:e8:ac:8c:ca:12:92:4a:d4:4f:ef:56:a1:e2:2b:
a8:6b:56:b0:af:71:1e:e1:da:58:a1:91:c0:35:4c:b1:e9:c8:
19:d9:cb:e7:cb:70:23:ee:65:02:2d:74:08:d5:af:38:cf:ea:
b6:15:0c:03:bb:dd:5b:9b:10:e0:b1:6a:ed:f8:dd:9d:a1:9d:
f1:3e:78:22:ef:6e:44:18:cd:e4:34:a8:fe:4b:4f:ef:3b:8d:
57:af:d7:e1:1c:0e:b2:28:58:81:35:72:58:75:bc:59:7d:46:
02:ac:c4:bf:bf:e6:93:97:8d:93:f4:aa:fe:9b:aa:c3:c8:27:
0b:4a:6b:4b:2e:9b:b5:90:d5:86:6f:8c:2e:44:64:17:d6:2d:
17:fa:68:79:f2:d4:bf:76:ac:78:ad:bb:b0:11:6c:db:54:19:
ed:fd:48:92:99:ed:b1:4b:b7:d4:fb:61:fb:29:4e:dc:04:c3:
1f:1f:7f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:15 2026 by rpki-client