Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: k+Nybd54GdaiSfmeZMq0dvamikqHb+P5KBSvqzMfHso=
Subject key identifier: 95:66:9A:8A:2B:0B:9F:95:21:8C:A1:CF:0A:F6:2D:12:16:C5:56:5A
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 019DA3AED0DD0B28313CF0D15776C81179A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 08EE
Signing time: Sun 19 Apr 2026 03:00:36 +0000
Manifest this update: Sun 19 Apr 2026 03:00:36 +0000
Manifest next update: Mon 20 Apr 2026 03:00:36 +0000
Files and hashes: 1: 3gZgHbD-hrqcq_Pjyy1piMjeRhE.roa (hash: gOXLcL67YsVsuGlPynBLLbxradMX9qPaxCdbkscokfQ=)
2: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: +rHCs0eecDh0eAiwSwF2qQaBOUBlTS5UKqpLIyNScko=)
3: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (hash: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:d0:dd:0b:28:31:3c:f0:d1:57:76:c8:11:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Apr 19 03:00:36 2026 GMT
Not After : Apr 20 03:00:36 2026 GMT
Subject: CN=95669a8a2b0b9f95218ca1cf0af62d1216c5565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:9f:45:6e:f7:aa:96:f7:5a:08:17:db:57:
ed:42:c0:49:e5:0d:ef:e1:3c:a9:4d:16:18:f0:dd:
02:5a:08:f5:86:fa:7e:6d:aa:b6:a3:40:57:f2:52:
66:52:9d:7c:92:d3:21:ad:e6:81:00:b7:1a:ba:a2:
bb:f5:4b:a3:2c:a5:c1:84:a4:e6:d1:34:8c:96:42:
44:25:7a:25:8b:1e:0b:11:09:25:76:00:cb:2c:5d:
54:20:1d:8c:9e:19:6a:07:18:b0:19:ef:fe:2a:06:
e9:46:5a:92:06:32:56:d9:97:09:32:1c:a5:0d:60:
4c:17:88:67:a8:bb:50:61:06:f7:d6:76:54:fb:b6:
8f:46:73:e5:1a:08:0d:94:7a:88:cb:63:e5:1b:6c:
b9:70:b7:12:24:2f:8a:6a:5c:28:7a:6f:0f:80:08:
62:16:9e:a4:19:c8:98:23:9c:78:43:ef:7a:f8:31:
51:f3:1f:0c:c6:db:b5:2e:3f:34:34:73:9a:aa:0d:
68:72:38:ed:4e:5e:b5:c8:34:56:3c:cc:6a:bc:1e:
2a:9e:3a:fb:74:8f:ff:88:a6:cd:fc:28:fe:4c:83:
90:f9:87:3f:40:27:e7:2e:6a:66:d9:6a:6a:8d:8b:
da:cd:7a:00:09:37:34:98:6b:0e:c8:1b:ae:3b:87:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:9A:8A:2B:0B:9F:95:21:8C:A1:CF:0A:F6:2D:12:16:C5:56:5A
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:82:eb:a7:c7:ed:61:fc:c1:75:5f:03:df:ed:92:e5:37:
95:8c:e6:90:53:25:2c:02:9b:bd:b1:5a:59:66:f4:9b:4a:3a:
0c:6c:0b:53:a7:2b:9e:c6:c4:71:78:70:a0:73:bd:c2:01:9a:
c2:0f:86:c3:ea:56:27:5c:fe:68:3c:bb:ab:31:62:82:32:8a:
e9:ac:5f:df:55:80:46:11:f4:27:8d:7c:80:75:65:e8:40:8a:
95:af:a7:00:7d:a4:c1:ab:30:c5:a0:c4:f6:34:57:ec:88:09:
a0:c1:22:bc:e0:bd:3b:2e:74:d8:e3:0b:8a:ab:30:9d:ce:06:
24:78:c3:0c:b6:1b:fa:58:f5:a9:8a:a0:e8:f8:57:29:75:42:
eb:a5:7c:73:64:8d:02:1d:3f:a5:e9:b8:61:28:04:06:c1:8b:
d4:5f:ad:3e:c4:64:65:c5:7b:55:58:d1:cd:9f:51:f1:d4:40:
d3:b5:87:ab:97:6c:e7:7e:27:77:11:00:95:33:d3:ce:5c:b0:
65:35:b6:f7:ea:e5:70:54:e4:5b:48:fa:f1:82:7c:ac:32:78:
b6:b7:a9:db:0e:ca:ce:bb:55:bb:85:47:2e:d2:6c:0a:17:d8:
f6:a2:d3:5d:2a:58:fb:33:6c:f5:3c:b7:c6:b4:b0:c1:04:07:
4c:4f:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:08:50 2026 by rpki-client