Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: EHHUN810e0fChEy4xdOvg80iCamjqUUQcUkuhWRU4gA=
Subject key identifier: 1F:F4:26:9E:44:0F:1E:C2:D3:26:71:CB:3C:F4:4E:94:66:21:26:AF
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019D9C2D46AA7F533031C49C51AC0745BD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0FA5
Signing time: Fri 17 Apr 2026 16:01:45 +0000
Manifest this update: Fri 17 Apr 2026 16:01:45 +0000
Manifest next update: Sat 18 Apr 2026 16:01:45 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: w411bpmkLqDu4BiLlpScRookTeblsj7f7//bUE3tAQc=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:46:aa:7f:53:30:31:c4:9c:51:ac:07:45:bd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Apr 17 16:01:45 2026 GMT
Not After : Apr 18 16:01:45 2026 GMT
Subject: CN=1ff4269e440f1ec2d32671cb3cf44e94662126af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:b3:f3:fa:e6:7e:4a:8a:04:8f:d3:dd:90:
06:85:b6:90:4b:6b:d3:4b:2a:68:8e:c3:75:fe:b6:
6c:6d:8e:09:15:c3:23:7e:25:58:47:7b:80:20:e1:
dd:96:a5:db:d5:b3:e8:36:50:c2:8a:7d:e1:81:37:
a4:99:34:f7:b2:c5:43:f9:da:ba:51:a8:48:a0:cd:
90:63:e2:93:00:78:48:3c:a9:4e:87:03:e2:a9:03:
09:45:b7:d4:a5:d2:bc:69:49:b8:2e:70:6c:c1:4c:
dc:7e:71:76:88:d6:7d:b8:9a:fa:df:92:3f:9c:37:
b7:54:64:7f:9f:43:b7:89:85:ab:2f:59:bc:c9:48:
1d:4c:6b:a4:aa:8f:d9:30:82:16:fa:e7:64:a8:23:
f4:69:5e:bf:be:40:6c:53:e9:31:e6:87:24:fa:6a:
0b:a2:07:c6:6e:be:7c:e2:9e:88:7c:64:d1:c8:91:
dc:01:63:5e:cd:7f:e6:1a:1d:62:24:00:3b:5a:e6:
0e:1a:1d:74:8a:f3:40:61:fe:01:8e:fd:3f:c5:36:
08:c0:ec:9a:dd:b9:80:fd:4c:e5:95:3b:6e:f9:8e:
f0:5a:e6:49:70:ee:f9:cd:2e:ca:a1:d2:4c:d6:95:
7a:44:cb:dc:8f:e4:9f:6f:20:9d:8b:df:d4:6e:f6:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:26:9E:44:0F:1E:C2:D3:26:71:CB:3C:F4:4E:94:66:21:26:AF
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bd:90:c3:85:b8:ef:c8:7c:b3:40:79:89:f6:21:f5:45:99:
24:11:3c:d8:7f:c4:fa:6f:cf:fa:b9:c6:3a:24:12:8f:66:9e:
87:93:e0:7b:60:83:aa:e1:2c:9d:15:1d:a4:3f:c1:de:36:d3:
aa:fa:13:43:a5:be:f2:1d:a6:8e:24:00:9b:86:03:ff:24:36:
34:44:b0:84:da:12:13:eb:ec:1e:06:d5:5f:7a:32:3e:f2:71:
d0:3e:23:1d:39:12:43:bc:31:e6:f3:60:e6:bd:ff:cc:83:f2:
97:23:1e:ff:82:f6:bd:b3:5d:79:d9:c8:d7:67:e6:b5:27:40:
18:3e:88:ce:19:66:49:80:30:59:78:51:af:fd:37:25:6d:a9:
e7:d3:e1:53:80:ae:81:50:10:18:27:8a:af:c1:fe:83:9e:32:
88:81:4f:e7:77:2a:16:4c:23:fd:74:a8:11:f7:cf:33:ca:c6:
c9:b5:b0:bc:c3:1e:79:49:0f:ec:be:76:6b:b5:fc:56:c3:27:
65:10:05:ff:38:ec:bf:33:f3:0e:4b:d6:7a:be:cd:4a:4d:fd:
7f:7f:34:48:1d:d1:fe:72:76:f2:7e:f6:25:ab:59:ee:5f:00:
4b:e7:31:44:ab:8b:5b:9b:5a:36:01:2e:b3:26:a6:fd:ba:f5:
1f:b8:3b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLUaqf1MwMcScUawHRb1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMjEwOTQ4N2FmNDAwYTYzZTNjYjAxMWEzZDU0OWU3NTFm
ZDJjMTgwHhcNMjYwNDE3MTYwMTQ1WhcNMjYwNDE4MTYwMTQ1WjAzMTEwLwYDVQQD
EygxZmY0MjY5ZTQ0MGYxZWMyZDMyNjcxY2IzY2Y0NGU5NDY2MjEyNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jqz8/rmfkqKBI/T3ZAGhbaQS2vT
SypojsN1/rZsbY4JFcMjfiVYR3uAIOHdlqXb1bPoNlDCin3hgTekmTT3ssVD+dq6
UahIoM2QY+KTAHhIPKlOhwPiqQMJRbfUpdK8aUm4LnBswUzcfnF2iNZ9uJr635I/
nDe3VGR/n0O3iYWrL1m8yUgdTGukqo/ZMIIW+udkqCP0aV6/vkBsU+kx5ock+moL
ogfGbr584p6IfGTRyJHcAWNezX/mGh1iJAA7WuYOGh10ivNAYf4Bjv0/xTYIwOya
3bmA/UzllTtu+Y7wWuZJcO75zS7KodJM1pV6RMvcj+SfbyCdi9/UbvZccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/0Jp5EDx7C0yZxyzz0TpRmISavMB8GA1UdIwQY
MBaAFPEhCUh69ACmPjywEaPVSedR/SwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUt
ZjA1ZWZhYjc0ZjczLzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83NWNkMTctMDQ0MS00YTRhLWI3ZWUtZjA1ZWZhYjc0Zjcz
LzEvOFNFSlNIcjBBS1ktUExBUm85Vko1MUg5TEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwr2Qw4W4
78h8s0B5ifYh9UWZJBE82H/E+m/P+rnGOiQSj2aeh5Pge2CDquEsnRUdpD/B3jbT
qvoTQ6W+8h2mjiQAm4YD/yQ2NESwhNoSE+vsHgbVX3oyPvJx0D4jHTkSQ7wx5vNg
5r3/zIPylyMe/4L2vbNdednI12fmtSdAGD6IzhlmSYAwWXhRr/03JW2p59PhU4Cu
gVAQGCeKr8H+g54yiIFP53cqFkwj/XSoEffPM8rGybWwvMMeeUkP7L52a7X8VsMn
ZRAF/zjsvzPzDkvWer7NSk39f380SB3R/nJ28n72JatZ7l8AS+cxRKuLW5taNgEu
syam/br1H7g7LA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:04 2026 by rpki-client