Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: 6VhHWRRYVRn58GlIqc/NmGOYGIOEwAwELHMsyO7CGf0=
Subject key identifier: 4B:E2:3A:B9:D3:B5:98:08:2A:E3:C3:D4:6D:64:44:5C:B7:26:9E:A6
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019D992B1A02B18408188F4EEDC88BB360CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: gmHnOJGZB7nTO7DNxGTsssYdHdPu/KgafnbrG69GN8w=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1a:02:b1:84:08:18:8f:4e:ed:c8:8b:b3:60:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=4be23ab9d3b598082ae3c3d46d64445cb7269ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:b2:97:88:6f:c8:f7:d6:f6:e6:4b:c0:55:
65:14:05:af:be:c9:86:22:b5:2b:57:28:ae:d7:60:
2a:d7:e5:6c:e3:64:41:ee:11:94:0e:d8:b1:6d:e3:
bd:01:89:3d:9d:c4:e0:39:16:78:0d:7f:8c:e6:17:
24:2e:a3:58:f8:57:67:31:f0:d1:d5:9c:c6:9f:49:
35:a3:f9:3a:91:8f:3f:e0:d1:38:3f:f3:70:cf:2b:
75:a1:c6:e2:36:e0:2a:50:60:fb:d9:6c:4b:e7:4a:
13:91:34:5b:0f:05:2c:70:a7:ed:5b:7a:32:68:6d:
f2:be:f5:27:b0:08:de:c1:d4:cb:2c:02:c9:3a:eb:
44:8c:32:80:9f:b4:33:7d:6e:a1:18:3b:8d:a5:bb:
58:d6:64:fa:07:0e:6e:04:d0:28:41:00:fd:7b:6f:
a2:de:48:c5:25:66:3a:ba:dc:f7:54:f0:b6:39:10:
ec:a5:bf:e6:c1:e7:3f:fb:e4:95:0e:e1:15:d4:77:
d5:5d:4b:91:e0:19:82:25:ed:93:5c:d9:be:54:fd:
fc:98:31:df:3c:6f:8f:7d:85:85:44:1b:43:25:49:
7d:5a:1d:d3:b6:fa:5b:78:db:45:09:fa:eb:ed:2e:
4d:38:93:8d:08:8e:52:7b:70:4f:b2:6c:dd:2d:7b:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:3A:B9:D3:B5:98:08:2A:E3:C3:D4:6D:64:44:5C:B7:26:9E:A6
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:1f:46:2b:82:6d:84:8e:0c:86:55:4b:1f:73:94:2c:0e:
20:17:65:70:26:c5:ac:79:a8:b0:f2:8a:ab:c6:47:e0:bd:19:
6b:aa:7f:9e:28:b4:74:1d:a4:93:29:82:8b:62:f1:04:f8:aa:
08:90:79:fd:6f:d8:be:a8:1a:0e:15:64:18:6b:cb:8f:22:31:
5d:c7:03:e4:5c:7b:08:b6:bc:f5:00:57:94:19:b0:df:94:4c:
e3:28:04:3b:9d:f8:81:eb:a5:03:ff:d2:17:ef:73:60:c0:85:
c2:18:52:0b:31:dc:60:98:91:1b:a3:1d:bc:12:59:41:15:3e:
90:2b:eb:dd:e6:8c:e4:61:bd:db:c5:74:ee:ac:07:07:8d:15:
d3:4e:9d:4e:e4:39:b7:f9:5c:2b:70:25:8f:d8:72:5a:d9:db:
0b:09:20:ec:1c:e9:ae:9a:96:75:87:52:5b:29:ca:3a:9a:75:
4d:f4:05:f0:d6:8c:0e:19:ab:a7:24:a1:4f:03:f1:98:ad:eb:
59:31:e0:77:90:1d:ef:72:22:91:f5:4a:cb:a4:a2:9c:6a:4d:
9b:53:a6:1e:ad:48:cf:fc:9b:fc:b5:49:37:53:39:fc:5e:7f:
71:20:3f:bf:05:96:ce:47:bb:73:96:f4:cd:3a:fd:d5:38:bc:
db:62:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:37 2026 by rpki-client