Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: 2Wprtulm/07mdq/YWd/7qEg3PpGY6wPsTHvYtFniOg0=
Subject key identifier: B5:97:9F:CC:E7:97:85:5E:DE:6B:2A:12:DE:12:67:F3:B6:79:44:6D
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019DA45415FC66FDEA6F2D078AD91723FAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 1159
Signing time: Sun 19 Apr 2026 06:01:07 +0000
Manifest this update: Sun 19 Apr 2026 06:01:07 +0000
Manifest next update: Mon 20 Apr 2026 06:01:07 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: kiVnKZ73JzO97SBYwK5UiyAVD+nhgYbuESJR084gpzs=)
2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:15:fc:66:fd:ea:6f:2d:07:8a:d9:17:23:fa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Apr 19 06:01:07 2026 GMT
Not After : Apr 20 06:01:07 2026 GMT
Subject: CN=b5979fcce797855ede6b2a12de1267f3b679446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:3f:eb:3a:ea:8c:cd:70:92:e4:89:ac:0d:
9b:79:ac:e4:a8:33:d3:42:b8:1a:eb:d3:e6:cf:9f:
f0:17:95:6b:e2:77:59:30:10:a1:f9:0a:44:e3:5d:
08:e2:97:7c:51:b8:d5:be:ec:42:63:c0:49:e8:b4:
41:40:1a:fb:0c:e7:7d:f8:98:30:1c:85:00:74:38:
2f:33:66:55:22:62:7c:9c:9d:12:27:d1:a0:8d:ce:
3a:da:33:c4:6b:0c:3c:ef:82:7c:24:99:3d:fa:a3:
0a:5b:dc:17:9f:bb:94:41:bc:c7:ca:0f:d7:12:02:
62:ce:b7:7b:82:db:7c:32:76:ea:18:17:ab:07:cd:
74:fa:f3:4f:fa:f1:bb:67:ff:a9:13:e4:d5:a9:5d:
ea:3c:ea:38:f1:91:af:db:de:82:de:6c:6c:9d:15:
3e:a6:b7:1c:65:eb:c6:0f:b5:e1:bf:8c:ff:8c:be:
8b:d6:ef:cb:a2:46:92:4a:39:d8:0c:74:14:b5:0b:
83:b8:2c:04:b8:42:01:09:4f:18:2a:ec:e9:0b:e9:
78:b8:b0:98:58:c5:22:7f:cb:4c:ea:67:b5:fc:e3:
a4:0f:b1:74:33:5e:57:be:81:b7:a5:d0:4c:a6:dd:
ea:cb:34:8d:e2:f5:30:9a:4f:fb:49:44:2d:08:b6:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:9F:CC:E7:97:85:5E:DE:6B:2A:12:DE:12:67:F3:B6:79:44:6D
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:1e:ac:6b:b2:04:e2:b6:9c:98:e5:5a:8e:03:68:3f:f9:
fe:de:e7:a3:7b:ab:62:7c:0e:07:90:0b:1e:b2:e0:d7:31:23:
f5:0a:75:82:02:c5:f3:8b:c3:00:10:50:3c:59:89:21:3e:06:
4a:6f:c7:7a:59:76:42:92:85:2a:c6:ee:52:9e:33:91:3e:e6:
5d:b2:84:fc:f2:fa:51:9e:25:8f:3a:ee:0b:2b:a4:29:96:8d:
68:47:81:fe:e9:05:ae:62:57:97:a8:fb:73:96:ae:53:85:1c:
f4:49:c6:78:86:4d:84:27:7f:6b:99:74:9c:de:8f:60:9d:b1:
39:29:4e:98:0a:ac:3e:b5:f3:75:cd:be:7c:76:89:b5:26:13:
ad:82:00:3f:ba:77:bf:a8:24:bc:f1:90:2c:1c:81:d4:e2:a5:
d5:eb:97:64:f8:a6:d6:62:d3:55:41:ba:82:1f:73:0a:63:07:
44:b1:06:14:91:0d:54:91:7a:9f:93:17:03:20:ce:d1:2d:3d:
71:ce:4c:71:b4:db:57:d8:03:3c:92:3a:89:15:3f:dd:13:23:
4d:3d:dd:90:57:ee:87:c3:dd:02:3b:ff:24:f5:84:bf:25:91:
25:65:ae:30:e2:57:54:f9:34:a0:7b:eb:eb:47:53:23:09:b7:
45:90:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:44 2026 by rpki-client