Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier: 1/6Qi2Jq1wyn6oLKkT4rGTG1ODr5Lc9+kbNtskeoJHY=
Subject key identifier: 5A:69:C3:58:D7:69:E3:31:F9:D0:A3:8C:F7:B2:18:6D:7B:E6:72:76
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 019DA48B05F685FE662C3C3129A9128291DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number: 0D4C
Signing time: Sun 19 Apr 2026 07:01:07 +0000
Manifest this update: Sun 19 Apr 2026 07:01:07 +0000
Manifest next update: Mon 20 Apr 2026 07:01:07 +0000
Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: oXamigTcNhTBbZ/lGzr/Z2uPP0B4Q2aDUTmV9+e1Lxs=)
2: KoNkyGEhQqx3GQv3NXvFVwMfef0.roa (hash: LtXPZaXsrwVyxDRh3HBOcDRrPS3lyLPIJctf5b2s8uw=)
3: com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa (hash: MDoGJcJ4G5Krxrk0LLNHmW1LvznE/ooEfQBze5H+eN0=)
4: fYeRjU_mc3h2GVmwavyUioK7cxs.roa (hash: 9Bo6zl6wQTTzHhoMoy+vLsVaHVkougsJgOQtEmgZ41Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:05:f6:85:fe:66:2c:3c:31:29:a9:12:82:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Apr 19 07:01:07 2026 GMT
Not After : Apr 20 07:01:07 2026 GMT
Subject: CN=5a69c358d769e331f9d0a38cf7b2186d7be67276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:0b:9d:a1:ba:ee:fe:ba:85:dc:27:4a:d1:
b7:2e:43:12:1a:17:00:3c:40:bc:3a:b8:80:25:ac:
24:71:66:59:07:3d:bf:a6:5c:49:c2:34:05:81:05:
a0:1f:43:2d:01:fa:5c:c4:a6:a2:0e:19:19:ee:9f:
54:59:c5:38:26:93:79:ba:82:5b:28:ad:ae:86:82:
c8:ba:b1:53:9f:93:c8:8a:8a:a4:db:c4:e9:ab:57:
6a:f3:3d:5e:21:04:a3:3e:3f:0c:d4:b9:78:76:cd:
d5:a2:45:6a:af:77:26:7c:92:24:87:e1:2f:c3:6c:
58:c7:da:db:23:19:c7:71:80:62:10:90:35:08:b2:
b5:e1:15:db:01:57:ae:03:0d:e4:a3:9b:5b:0d:35:
ad:d8:d2:e7:55:57:86:c7:5e:67:0f:78:a2:f5:d2:
e5:0a:06:c6:38:39:b8:7c:40:2c:0d:fa:73:3f:ba:
4f:c6:a4:dd:a4:2b:2b:c7:21:87:7f:9a:72:31:4d:
0d:ad:33:de:e7:5c:ba:e2:0a:81:16:72:aa:0e:41:
37:7b:49:70:3c:2c:7b:cc:b9:fa:90:47:a8:11:5a:
5c:54:87:4d:9a:72:45:34:7c:b1:52:41:39:82:6a:
b1:4b:fd:66:68:4e:2b:2d:71:40:24:71:d8:ec:9f:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:C3:58:D7:69:E3:31:F9:D0:A3:8C:F7:B2:18:6D:7B:E6:72:76
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:23:d5:65:68:3e:50:0f:83:79:38:5c:a6:c7:46:e4:ac:9b:
08:93:06:d4:38:96:78:41:22:f5:dd:81:1b:84:30:91:7d:48:
76:d6:fb:8e:3d:31:bc:fa:de:b4:03:c3:73:73:67:91:4c:08:
d5:00:7a:6e:96:e7:97:00:fe:26:78:ff:6b:fb:ec:8b:e8:fb:
6e:96:58:ea:c3:25:eb:4d:7b:02:55:6e:dc:d0:f9:9c:82:33:
70:71:6f:4c:ea:cc:7d:90:61:44:98:52:fd:77:5b:d4:ce:74:
60:60:43:1e:e0:08:1f:b7:a0:ac:e7:cc:45:a0:f0:e3:5f:df:
b3:5f:4c:d6:cd:90:93:7f:d4:c6:32:99:5b:00:6d:82:89:d9:
d2:57:aa:db:91:8a:74:9a:dd:75:ba:1f:56:d8:da:6b:5b:51:
ca:cc:0e:2d:e8:6a:de:f3:9e:7e:93:e6:0d:c4:fd:2d:a5:1f:
d0:8a:93:f3:db:0f:ff:d0:0d:0f:bd:a2:33:ea:a1:d6:45:72:
6e:77:6e:87:5b:42:3f:82:7a:e9:4d:d7:eb:6d:0b:93:c6:ea:
4e:b6:d5:1b:41:9c:df:9f:d9:6d:74:25:5e:96:8e:3b:ef:f2:
af:b0:cd:d7:3a:f1:ae:aa:78:9e:9d:fd:36:86:1a:53:ac:4f:
a3:3c:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:51:41 2026 by rpki-client