
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File: t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier: JuH2BGOltswJKmC8KsxdpNX+lfnhVLsjn6Wx4o7Dvtg=
Subject key identifier: A2:87:4B:4C:B9:11:16:17:15:93:73:1E:E5:C2:01:57:20:3E:2E:E3
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer: /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial: 019D98BE1B8E234A21370F5E810F396C33F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 00:01:28 +0000
Manifest this update: Fri 17 Apr 2026 00:01:28 +0000
Manifest next update: Sat 18 Apr 2026 00:01:28 +0000
Files and hashes: 1: iBrzoJ4P7RKd300eOF4qUe3LCl4.roa (hash: QIdg4eDqVZUaeV5vnK1TSNPsCbX4Vczgh0HCqrqiwcA=)
2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: JC+iB8iHBBd8GaaAUDQZ97ZYjKcPKR0AsqrmDQ8TPFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:1b:8e:23:4a:21:37:0f:5e:81:0f:39:6c:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Validity
Not Before: Apr 17 00:01:28 2026 GMT
Not After : Apr 18 00:01:28 2026 GMT
Subject: CN=a2874b4cb91116171593731ee5c20157203e2ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:c7:05:88:02:8a:f5:55:c1:e5:b2:75:29:
40:d6:a4:17:e1:81:d2:67:8b:44:c0:d1:10:5e:a1:
a8:05:61:66:68:3d:1e:4a:f3:7a:da:3e:f6:15:9d:
89:f5:6c:0f:c9:1c:cc:35:2d:5a:19:e7:6d:ef:3e:
48:9c:20:66:ed:d6:65:26:98:73:84:ea:56:36:ac:
72:2d:2b:28:86:32:69:16:e2:c4:a0:08:4a:69:ee:
b4:79:7f:5f:27:4b:00:a8:42:83:71:52:6e:67:1e:
71:cb:b2:51:6c:c1:a6:e9:2b:77:02:d7:bd:86:46:
e1:8f:d7:e1:fc:8f:a1:f0:70:7b:f7:b2:43:69:f4:
dc:f9:0c:1e:74:5f:08:36:c5:99:03:12:96:0d:df:
fc:05:8a:bd:c2:44:c6:e9:d1:97:ae:b7:b6:e5:81:
15:5d:d0:75:6b:0e:60:89:d1:13:ab:b4:9e:4e:ee:
06:2e:5d:d5:8a:c6:f3:ff:ad:a1:e6:07:a8:55:0c:
60:78:35:00:f2:cc:7c:de:14:64:36:32:02:97:a8:
84:6b:d8:87:8b:06:b5:32:70:d1:4e:1a:91:80:f4:
45:83:b3:85:ee:ab:7e:f6:dd:11:2b:23:c5:88:8e:
b3:b0:a8:56:56:a3:df:96:d0:ed:50:d5:01:1b:60:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:4B:4C:B9:11:16:17:15:93:73:1E:E5:C2:01:57:20:3E:2E:E3
X509v3 Authority Key Identifier:
keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d5:1d:ce:b5:09:46:78:3e:4b:86:1a:b9:b5:4b:38:38:f3:
c5:e6:6c:b6:35:6e:44:21:c7:60:60:cb:85:19:42:f3:23:e8:
7e:29:cd:39:e4:b9:c0:46:7d:0b:32:04:be:e8:40:5c:a9:b4:
54:dd:53:3e:d0:91:b8:fe:79:42:7c:92:b6:c5:91:1a:27:a5:
64:f4:e8:cb:94:b4:48:d4:52:8f:94:d9:b5:fa:65:a6:b6:2a:
3e:ed:ff:12:4a:4f:1c:ae:87:da:24:55:46:cc:09:dd:ab:6e:
c3:90:10:7c:17:41:7f:7b:ae:b1:60:a4:06:93:b3:53:a9:c5:
b6:01:84:4f:99:40:9d:73:fb:1b:e7:fd:63:05:b8:f8:30:ac:
aa:4f:95:14:c3:85:b9:ec:f8:41:a4:0e:97:c1:a4:2e:1a:a2:
e3:90:54:41:85:de:09:4c:a4:23:3e:a6:ad:b2:d6:46:75:6c:
43:4d:fc:b7:3b:b3:d7:21:db:6a:2c:0e:cf:6d:b7:3a:d6:86:
cd:48:88:8f:58:23:26:c5:b5:a0:0f:4f:00:80:02:4b:53:0f:
cb:32:42:ff:06:4d:38:66:76:5c:e2:d9:fe:cf:d9:13:50:a9:
10:0c:e6:df:6b:b6:16:c8:46:e2:b7:90:4e:d1:a5:37:03:7f:
30:aa:b5:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvhuOI0ohNw9egQ85bDP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Y2MyZGEyYmRiOTdiZTkxMmEyZDk0MmViZTdlYWZhNDY1
MWU4ODUwHhcNMjYwNDE3MDAwMTI4WhcNMjYwNDE4MDAwMTI4WjAzMTEwLwYDVQQD
EyhhMjg3NGI0Y2I5MTExNjE3MTU5MzczMWVlNWMyMDE1NzIwM2UyZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXvHBYgCivVVweWydSlA1qQX4YHS
Z4tEwNEQXqGoBWFmaD0eSvN62j72FZ2J9WwPyRzMNS1aGedt7z5InCBm7dZlJphz
hOpWNqxyLSsohjJpFuLEoAhKae60eX9fJ0sAqEKDcVJuZx5xy7JRbMGm6St3Ate9
hkbhj9fh/I+h8HB797JDafTc+QwedF8INsWZAxKWDd/8BYq9wkTG6dGXrre25YEV
XdB1aw5gidETq7SeTu4GLl3Visbz/62h5geoVQxgeDUA8sx83hRkNjICl6iEa9iH
iwa1MnDRThqRgPRFg7OF7qt+9t0RKyPFiI6zsKhWVqPfltDtUNUBG2A0MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKHS0y5ERYXFZNzHuXCAVcgPi7jMB8GA1UdIwQY
MBaAFLfMLaK9uXvpEqLZQuvn6vpGUeiFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2Yt
MjJlN2EzN2U4ZTM4LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lZTZjNmEtZmI1NS00ZGM4LTlkY2YtMjJlN2EzN2U4ZTM4
LzEvdDh3dG9yMjVlLWtTb3RsQzYtZnEta1pSNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtUdzrUJ
Rng+S4YaubVLODjzxeZstjVuRCHHYGDLhRlC8yPofinNOeS5wEZ9CzIEvuhAXKm0
VN1TPtCRuP55QnyStsWRGielZPToy5S0SNRSj5TZtfplprYqPu3/EkpPHK6H2iRV
RswJ3atuw5AQfBdBf3uusWCkBpOzU6nFtgGET5lAnXP7G+f9YwW4+DCsqk+VFMOF
uez4QaQOl8GkLhqi45BUQYXeCUykIz6mrbLWRnVsQ038tzuz1yHbaiwOz223OtaG
zUiIj1gjJsW1oA9PAIACS1MPyzJC/wZNOGZ2XOLZ/s/ZE1CpEAzm32u2FshG4reQ
TtGlNwN/MKq11w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:27 2026 by rpki-client