Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: o3jGoldZdiTyWmssd3B7Eh7/+9hTfY+MgkmktQx3SXs=
Subject key identifier: 65:BE:76:F7:25:37:DB:61:BB:59:1B:5D:30:90:3B:65:DC:4E:D1:14
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019D9886275CEBE56AD86CD930639138C451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0A33
Signing time: Thu 16 Apr 2026 23:00:21 +0000
Manifest this update: Thu 16 Apr 2026 23:00:21 +0000
Manifest next update: Fri 17 Apr 2026 23:00:21 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: KqS/eKq7SFErXoy0j/L94wzvUWLTpwIz7reGqc80mNY=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:27:5c:eb:e5:6a:d8:6c:d9:30:63:91:38:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Apr 16 23:00:21 2026 GMT
Not After : Apr 17 23:00:21 2026 GMT
Subject: CN=65be76f72537db61bb591b5d30903b65dc4ed114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:98:ce:cf:f4:0d:91:3a:96:8b:e2:81:08:
cd:43:09:8f:ad:82:02:3e:0c:2e:c0:76:52:41:d0:
4b:fb:a0:18:b3:43:2c:44:49:5e:3d:e9:8c:4d:02:
e7:f5:2c:93:bd:2b:ea:4b:2a:62:55:d1:23:5e:1c:
b0:1c:1e:1c:92:01:df:29:50:4e:f8:c4:3d:8e:21:
5c:87:f6:1b:68:49:8a:d4:d2:8f:56:f8:a1:c1:54:
d9:3f:2b:f6:9e:b9:c5:03:2e:5f:29:b4:57:e7:12:
13:a1:a6:85:be:5c:23:5f:cf:29:ee:54:b5:35:dc:
cf:ee:52:08:6b:0f:79:08:3c:e7:18:48:90:c1:7d:
d1:2a:5a:e2:cf:1d:0e:7e:1c:5e:ca:48:a5:fb:e5:
eb:ca:7a:18:b2:93:02:f4:21:2e:6f:95:97:d0:71:
1a:e9:b3:96:a4:fb:68:0d:20:12:92:ee:5e:57:72:
c3:8a:83:49:5a:b8:82:92:aa:de:6f:8a:58:a6:fb:
7e:12:75:d3:13:44:24:ee:2f:73:b4:e6:38:e9:5a:
62:45:b6:db:07:84:8c:98:6c:63:42:1f:9a:94:be:
00:07:95:93:0e:36:3e:16:96:13:12:c4:1e:71:ae:
d6:14:cc:96:24:c3:cf:62:d6:38:a3:14:48:0c:c7:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:76:F7:25:37:DB:61:BB:59:1B:5D:30:90:3B:65:DC:4E:D1:14
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:a0:af:e2:6c:0e:84:97:47:d1:36:e9:a3:6f:c7:49:d3:
b7:4c:12:28:9e:f0:4c:c6:70:54:2a:c9:d4:5f:32:1f:22:8c:
4b:74:21:96:df:ba:76:37:98:e2:c1:9c:48:0d:6d:72:18:12:
7e:72:04:ac:ff:1b:fd:2e:92:aa:6b:a6:79:dc:4f:a0:08:42:
5c:ad:9b:36:9a:53:59:fb:76:7f:04:f5:66:5e:cc:d3:2b:7b:
84:78:20:4a:5b:a9:90:67:59:e5:a3:3f:f1:54:63:54:7b:0b:
7a:8a:6e:12:f1:ba:6d:93:cd:d4:93:3b:5d:9b:6a:56:d0:66:
0b:69:4a:e7:68:67:ed:2c:c3:2a:a0:aa:1e:6e:a9:09:c5:a8:
1d:7a:0d:83:7f:d9:c5:42:17:a2:68:db:5b:b0:b1:68:5d:d8:
a4:8d:55:80:b2:5f:a6:63:9d:92:67:ab:73:47:af:53:27:39:
a9:d1:c4:cd:2f:1a:9c:8b:51:21:21:9a:a8:21:61:79:0b:dd:
1d:67:06:57:16:00:1c:de:e9:98:e9:08:85:7c:9b:a1:11:74:
43:ed:d3:44:19:69:2b:7c:41:1a:0f:6d:de:62:d9:96:f4:db:
04:d4:ba:57:c6:e1:3c:25:b2:74:de:83:da:59:76:2f:f0:06:
c1:f1:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:15 2026 by rpki-client