Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: Y5iye51q81rlyWHKdiW6WKh3jwsT64uClwPA+7CdCGw=
Subject key identifier: CC:C0:C3:2C:C7:08:18:A6:F3:A2:78:D7:FB:5E:AC:44:11:97:2B:54
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019D992B7C9400292CDD34A9F85686830C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0C8E
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: yiHggbEMKHZSJnG4ba8pyWvZ9/OKzKlWhCJ5hWI+V58=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7c:94:00:29:2c:dd:34:a9:f8:56:86:83:0c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=ccc0c32cc70818a6f3a278d7fb5eac4411972b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:93:ad:9b:a1:34:54:05:b4:1a:3e:bc:bf:
da:d4:1a:da:c8:74:22:6e:07:10:26:bc:ff:f2:c9:
6b:23:74:d1:41:e7:9b:2b:6c:2c:5e:d3:ec:18:2b:
f0:ab:91:ef:8a:ab:e3:2e:7e:ba:be:23:8d:3e:d6:
c0:af:2e:77:2a:73:db:c4:4c:a3:0a:c8:57:16:2a:
84:32:bc:a9:eb:8e:b7:7a:d7:45:85:44:12:cf:04:
4e:fa:d2:0b:5b:93:7e:a7:53:b2:c4:9f:22:79:60:
01:1c:b3:c6:06:09:a7:da:6a:b0:49:88:ee:ab:bd:
95:1e:1c:7c:78:9c:cc:8a:de:ea:1e:bd:2b:17:86:
1a:44:01:0d:fb:b0:28:da:e8:3a:29:f5:8f:68:5f:
e1:14:ed:f0:99:49:77:ab:65:fc:79:28:18:6e:28:
8c:6d:b9:25:07:ec:ed:8b:df:89:4a:c1:89:cb:cf:
46:34:f0:f0:c2:06:dc:a6:be:c4:fe:84:0d:7c:bc:
cd:d3:93:58:3d:bf:3c:11:30:37:a8:67:7b:30:aa:
3b:43:9f:8a:36:ae:78:91:27:42:58:4d:2f:ea:40:
a1:c7:6a:db:9b:c6:f3:9d:57:05:59:e7:4a:87:ee:
b5:c9:84:28:5a:1b:44:65:0d:46:d0:0d:49:39:65:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:C3:2C:C7:08:18:A6:F3:A2:78:D7:FB:5E:AC:44:11:97:2B:54
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:00:3d:52:08:33:05:00:b1:e0:94:38:cf:df:8a:3c:ad:0b:
65:4c:b7:d7:36:f5:d4:4d:f6:79:37:64:bd:b7:9e:7c:f1:0f:
6b:cb:57:de:a4:80:9a:5b:8b:e1:7a:2e:12:e0:c1:f6:4d:b1:
93:29:d5:f1:28:35:51:80:03:47:e4:a2:4f:b0:5f:dc:9b:01:
ad:3c:eb:f8:30:f5:b9:aa:8b:92:f5:0d:9b:7a:82:54:12:a4:
f7:ad:a1:24:4c:a0:b2:82:03:9e:f8:b1:87:03:e2:2f:b4:b9:
a1:ed:15:46:d4:f9:1f:84:56:e2:4b:68:0b:c7:53:5f:25:b4:
8a:f1:07:4b:21:cb:29:ad:20:a7:76:83:8e:cf:b2:d3:7f:0c:
06:c4:c1:c5:0d:1a:28:a4:7f:28:41:96:b3:ab:96:b9:9b:08:
53:79:72:ae:92:a6:3b:d8:1b:62:92:9a:4c:15:31:f9:01:1c:
19:a4:0c:b1:f6:0b:dc:9f:35:98:1a:3b:a0:0b:cb:83:e5:61:
1e:70:ae:84:72:ae:ea:b5:d2:27:e9:36:f1:2c:3b:a0:c2:70:
af:92:83:9c:37:72:18:7d:ca:f4:57:32:5e:5f:ec:57:4a:df:
e0:05:85:8f:4a:57:be:14:74:3c:69:e0:73:cd:35:5d:16:c6:
9d:65:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:30 2026 by rpki-client