Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: nhTE5M/tUkL0FaV4HIPAdAATK+2/iZj4die/uo4L6iQ=
Subject key identifier: A9:29:35:F6:8F:02:2E:B8:F3:35:98:D5:99:5A:75:B5:C5:54:04:34
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019D97742BA8F0C73CDE1975381C9E249892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 18BB
Signing time: Thu 16 Apr 2026 18:01:05 +0000
Manifest this update: Thu 16 Apr 2026 18:01:05 +0000
Manifest next update: Fri 17 Apr 2026 18:01:05 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: e8K3CUBtvE85d9l9bSm8YKWU5mzUMZ5OD3Mp9EFXv24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:2b:a8:f0:c7:3c:de:19:75:38:1c:9e:24:98:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Apr 16 18:01:05 2026 GMT
Not After : Apr 17 18:01:05 2026 GMT
Subject: CN=a92935f68f022eb8f33598d5995a75b5c5540434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:2f:8b:7e:f7:78:91:62:b4:f4:12:8f:8d:
44:20:72:2f:5a:95:b3:b4:2d:8a:f1:be:ed:27:d4:
84:57:eb:5c:37:ae:cd:bc:59:2f:e2:41:31:4e:c4:
fd:de:d1:d7:c7:cc:7d:35:99:f2:b3:53:0c:3c:3b:
26:14:38:46:85:07:ff:53:55:31:24:25:25:09:16:
92:00:f1:1f:b5:c7:f6:ea:bf:77:58:c7:f7:47:04:
8e:8f:b8:44:a1:31:dd:d8:7a:c1:a9:91:ad:09:a4:
0c:dd:3f:b2:30:8f:7a:b1:77:78:61:3a:6d:35:d1:
90:6f:93:fa:6d:e2:99:03:08:d1:a7:7f:a7:ad:3a:
52:80:a1:25:9f:bb:70:b7:2a:d6:14:36:b3:94:15:
15:3f:87:d8:54:d7:1b:17:1d:ca:d3:2f:2b:15:9e:
11:53:52:16:79:6c:44:30:77:87:3a:97:e7:21:04:
f8:9f:31:b9:65:f9:c0:57:3b:2a:bc:f7:4c:7f:dc:
3a:d2:6b:6d:53:96:04:50:00:db:05:7a:62:be:60:
a4:fe:b1:24:58:d4:c3:fc:b3:83:7d:bf:d9:58:05:
1a:c9:ea:91:f7:f1:e2:1c:2d:1b:e9:b0:55:38:91:
98:26:f8:56:c3:2f:6b:d8:95:48:81:58:be:8c:f6:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:35:F6:8F:02:2E:B8:F3:35:98:D5:99:5A:75:B5:C5:54:04:34
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:92:f8:d1:a1:4f:eb:53:df:38:59:58:8c:05:34:01:39:14:
f2:9e:56:f8:72:57:68:3d:c6:7e:ed:23:fa:e6:1d:cf:d1:4c:
20:26:c9:56:7f:11:0d:98:41:16:61:6c:57:ad:52:e5:49:d7:
b2:02:42:5e:6e:a3:b2:61:85:2c:f8:03:f3:49:99:18:7a:ca:
ef:b4:81:f9:13:19:4e:c9:a0:cf:21:7a:72:19:bc:5c:0f:44:
2c:da:31:50:cd:a9:cd:32:d9:6e:d9:4a:e8:fa:8e:3c:0b:eb:
78:59:7e:da:f3:65:16:75:b3:76:49:20:1f:e4:78:0d:b1:a1:
d0:d6:b6:b0:48:53:c3:c7:2e:66:07:61:49:58:fa:98:aa:bf:
71:c5:e0:bd:f8:3d:0a:42:81:bf:ad:6f:5a:ed:dd:2d:f0:62:
ac:4e:60:03:f4:28:ce:87:44:3a:c0:8e:e0:ff:44:14:9e:cf:
b7:6c:81:ef:30:6a:be:5d:23:0c:0e:c9:3a:ae:fd:cb:26:65:
cd:89:ec:cf:eb:76:fc:0d:42:93:15:01:6b:d3:74:37:06:86:
80:81:12:6b:49:8f:c5:74:7b:56:25:d0:96:14:80:83:50:b9:
79:39:62:82:4f:2a:f4:b1:d1:5c:91:e6:fa:e9:3f:7b:93:7d:
9e:33:34:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdCuo8Mc83hl1OByeJJiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj
YTllY2UwHhcNMjYwNDE2MTgwMTA1WhcNMjYwNDE3MTgwMTA1WjAzMTEwLwYDVQQD
EyhhOTI5MzVmNjhmMDIyZWI4ZjMzNTk4ZDU5OTVhNzViNWM1NTQwNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1Yvi373eJFitPQSj41EIHIvWpWz
tC2K8b7tJ9SEV+tcN67NvFkv4kExTsT93tHXx8x9NZnys1MMPDsmFDhGhQf/U1Ux
JCUlCRaSAPEftcf26r93WMf3RwSOj7hEoTHd2HrBqZGtCaQM3T+yMI96sXd4YTpt
NdGQb5P6beKZAwjRp3+nrTpSgKEln7twtyrWFDazlBUVP4fYVNcbFx3K0y8rFZ4R
U1IWeWxEMHeHOpfnIQT4nzG5ZfnAVzsqvPdMf9w60mttU5YEUADbBXpivmCk/rEk
WNTD/LODfb/ZWAUayeqR9/HiHC0b6bBVOJGYJvhWwy9r2JVIgVi+jPZCWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkpNfaPAi648zWY1ZladbXFVAQ0MB8GA1UdIwQY
MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt
ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh
LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJL40aFP
61PfOFlYjAU0ATkU8p5W+HJXaD3Gfu0j+uYdz9FMICbJVn8RDZhBFmFsV61S5UnX
sgJCXm6jsmGFLPgD80mZGHrK77SB+RMZTsmgzyF6chm8XA9ELNoxUM2pzTLZbtlK
6PqOPAvreFl+2vNlFnWzdkkgH+R4DbGh0Na2sEhTw8cuZgdhSVj6mKq/ccXgvfg9
CkKBv61vWu3dLfBirE5gA/QozodEOsCO4P9EFJ7Pt2yB7zBqvl0jDA7JOq79yyZl
zYnsz+t2/A1CkxUBa9N0NwaGgIESa0mPxXR7ViXQlhSAg1C5eTligk8q9LHRXJHm
+uk/e5N9njM0VQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:46:37 2026 by rpki-client