Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: wDzy/L37dzV9pbeZJ0cHkCxx7VMspLha16Qe33QhrLs=
Subject key identifier: 1C:03:BD:65:46:83:EF:B6:74:5B:73:24:20:ED:46:60:8E:9C:BC:9B
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 019D98F47DCE95A70CBAFD53610550EDC686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0F71
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: zXd/lVJa6WP32bQH7u+snD1M2cL/hs9BPXiAlE5eP50=)
2: RAC2EIsVMHG6hRns7HbMn17gGls.roa (hash: FF3H1038Rgf//9+NtLOprCe/ZirTllG7HflUAk9dINQ=)
3: nxP6oV7FFuyKT5VZI8Lr0S_v3YA.roa (hash: iN63qFqYR+Oirh/aAc/OhTjdpHDfVt7KEG3Iws+eD0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7d:ce:95:a7:0c:ba:fd:53:61:05:50:ed:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=1c03bd654683efb6745b732420ed46608e9cbc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:75:91:6e:8a:33:3f:21:38:8d:4e:2a:2f:
32:84:cb:0d:3b:54:04:f2:a4:16:a6:78:e9:f4:83:
41:86:9a:19:12:21:b8:c8:ca:17:6a:75:6e:21:43:
2d:52:4a:8c:6f:db:4d:dd:0f:4c:4f:08:74:bb:3a:
ff:a2:f8:59:d5:c6:4d:82:6e:8b:1c:6b:29:ab:8a:
7c:a7:dd:7d:75:0c:df:1d:28:43:5e:32:a1:34:bf:
7c:a7:15:93:61:90:e4:6a:c7:e2:7b:b9:cd:96:1e:
50:75:4d:4d:2f:c5:d2:c6:5e:2a:05:4e:11:b5:a2:
bd:4b:0a:96:82:cc:e2:94:da:76:64:26:86:2e:c0:
a8:09:22:a8:1e:e8:ae:5f:96:02:62:bd:22:0c:d6:
1b:17:61:ee:d7:ee:71:d3:3e:b0:bb:d2:08:9b:3b:
87:ac:a3:8a:7f:dd:ec:5c:21:63:64:f3:8f:b3:78:
fb:f2:74:b1:ca:47:00:85:a3:af:06:5f:2e:18:52:
b4:77:05:4d:72:f5:b8:f0:17:fe:7d:72:97:a5:af:
ae:3d:05:be:d9:90:f7:35:83:bc:22:5c:9e:92:ab:
ae:a2:7d:57:92:d7:3d:03:78:db:4e:50:92:7b:f9:
61:de:34:5f:cd:9c:98:a8:61:88:a1:28:69:fe:a5:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:BD:65:46:83:EF:B6:74:5B:73:24:20:ED:46:60:8E:9C:BC:9B
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:57:5d:a1:23:71:c2:e7:6b:e1:9b:fa:81:93:6a:92:2c:7c:
37:84:a8:a7:56:49:7b:87:65:78:69:4a:58:c1:fd:cc:71:84:
a9:0a:3c:1a:ba:0e:aa:b1:d2:a3:79:f9:71:30:3b:4d:5a:6c:
da:5d:dc:9c:48:1b:82:53:f7:67:64:61:e8:57:9d:13:9a:d4:
29:dd:5d:58:48:3c:4e:55:06:04:6d:1d:85:1f:13:cb:1f:ce:
87:3c:16:98:0e:dd:ab:0e:43:34:16:4d:d7:4a:94:5f:37:a1:
83:a2:54:3e:ee:c4:f5:66:77:f6:cd:79:8f:9d:20:fe:b9:98:
aa:fe:ec:cf:d0:67:50:da:e1:18:ee:0d:9e:4e:85:f9:4c:63:
c6:e5:ed:92:44:29:29:b0:b5:44:8a:02:c9:de:b9:a9:eb:5d:
d8:ee:b6:d8:b7:ca:68:29:37:b3:7b:ba:bc:0b:ac:96:de:ad:
4f:b6:9a:b3:61:df:58:e8:79:6d:73:33:c7:88:28:1d:11:cf:
c3:39:30:ce:5c:18:9a:0a:ae:89:6e:80:25:1b:a7:0d:c8:cb:
7b:ff:9d:8c:f5:88:0f:d8:9d:ed:62:24:7a:c1:ee:b7:f8:33:
f2:5e:31:6a:f8:da:8a:3d:72:56:ac:c7:38:49:03:c2:cb:d7:
81:d2:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:18 2026 by rpki-client