Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: 5OMNjFLK6X4tMJ3vyLmtuHpvoan9fpRkcgF5N/Cz7RE=
Subject key identifier: 39:D1:C7:6B:F2:0C:A0:13:AC:17:A7:C0:F3:B1:4B:3C:DE:1E:CA:B9
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019D9C62F94B1DC9932F890797F703D6CB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0FB8
Signing time: Fri 17 Apr 2026 17:00:25 +0000
Manifest this update: Fri 17 Apr 2026 17:00:25 +0000
Manifest next update: Sat 18 Apr 2026 17:00:25 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: nqsUnDEOYYoBO9lSXWLgeqn6m/MlTsBO3vZkEjnzl0g=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:f9:4b:1d:c9:93:2f:89:07:97:f7:03:d6:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Apr 17 17:00:25 2026 GMT
Not After : Apr 18 17:00:25 2026 GMT
Subject: CN=39d1c76bf20ca013ac17a7c0f3b14b3cde1ecab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:26:20:c5:4c:e8:f0:aa:c6:3e:97:75:8f:
89:2d:ea:20:78:5b:71:17:4d:78:5e:f1:de:01:1c:
bd:a9:2e:42:b1:eb:3c:4e:a5:52:26:04:83:7d:f3:
04:c4:bf:cc:87:25:8c:79:02:74:16:b1:25:76:8e:
1d:2d:2d:c3:16:8a:94:8a:f8:ae:38:8e:69:19:a6:
8c:1e:94:30:93:2b:a8:34:1c:22:0e:72:60:f5:96:
50:e0:21:30:6b:fa:9f:61:7d:ca:87:7d:fa:ec:a5:
93:66:41:ad:88:5f:6b:fc:6f:78:8b:bc:ed:57:67:
f7:14:d0:de:b4:3b:f4:40:97:8e:bd:49:50:e8:3b:
16:00:eb:e6:c9:21:d5:55:7e:05:f7:fb:b6:8f:66:
7b:4d:68:e4:cd:81:da:bb:9c:03:26:2b:b1:af:4d:
4b:dc:18:13:f6:14:ac:24:3a:ba:0f:4b:db:b5:7c:
ff:18:36:8b:f3:6e:1f:a7:83:57:86:ba:ee:57:c9:
eb:d5:7b:ea:cf:bb:86:31:1e:0c:66:41:2d:a1:13:
e6:cd:0b:cf:83:40:54:02:f7:74:4c:6f:de:ea:59:
10:ac:00:1c:bb:3e:62:c3:79:95:2d:49:21:40:4a:
62:eb:6a:88:4a:7b:be:6b:df:fc:57:bf:ec:4d:b0:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:C7:6B:F2:0C:A0:13:AC:17:A7:C0:F3:B1:4B:3C:DE:1E:CA:B9
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a7:33:1d:cb:43:51:2a:b4:3c:e9:8e:21:62:ce:6f:68:f5:
97:71:7d:9b:db:da:c2:a5:7d:4b:1d:85:ba:6a:34:c1:5b:08:
31:03:28:92:87:25:37:89:f1:74:2a:29:2f:4c:bb:33:32:d3:
de:3d:dd:52:40:27:d5:e1:bf:b8:46:39:7b:f9:5d:b6:9d:12:
29:4e:9a:5e:3d:3f:a9:5f:6e:15:3c:d0:ce:51:28:da:eb:9d:
7f:64:65:e0:01:9c:62:c8:5a:f0:2a:12:4d:e0:c8:19:45:27:
28:f3:c7:af:b1:5f:5f:f1:cd:12:9a:c7:c8:3e:2a:8d:58:79:
d2:98:95:17:59:25:0c:c3:9f:7b:7d:2c:a1:5e:cb:67:a8:58:
0f:27:9c:8a:52:22:63:b1:48:e7:85:85:f7:64:96:2c:b9:31:
4f:46:7a:06:04:05:3c:24:de:49:2c:51:97:80:48:34:a7:b9:
94:6d:e6:b7:c3:c9:1c:b0:c2:3f:5c:71:01:61:bb:50:9a:1f:
5e:e5:74:ba:39:21:45:cd:01:3c:c0:50:1e:66:76:a7:e4:b4:
1b:fa:98:5a:d3:0e:34:93:07:70:81:41:bf:fd:5f:eb:02:1b:
ed:26:e7:0d:f1:38:8f:8a:3b:1a:b5:ed:7c:51:48:ee:f5:5f:
14:64:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:29 2026 by rpki-client