Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: AxOqKzNNJoTsKucQEEGhqezjt4O+Tql4+znf5jH0Sgk=
Subject key identifier: EC:37:73:58:C2:3E:BE:74:C0:37:13:29:D1:DD:CC:D1:C8:A2:1A:EE
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019D99D0D0B6F638C0A15CCF555F8418F3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 6O/NT5PI4hoJt3x+eBV42/w5aSz7yP0ULy3gICejxbI=)
2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d0:b6:f6:38:c0:a1:5c:cf:55:5f:84:18:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=ec377358c23ebe74c0371329d1ddccd1c8a21aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:65:12:4c:f9:cb:e2:81:1d:97:f2:ff:c5:
0d:3e:c5:6b:d8:05:70:4a:f9:46:e6:c3:47:cc:4b:
c5:f6:7d:69:21:3c:e4:51:af:b0:97:6b:71:48:54:
68:93:c2:4e:26:b1:9a:39:af:10:d0:98:92:2a:56:
fd:47:17:8a:9c:44:08:e5:e4:91:49:ce:28:6c:0d:
ca:88:7a:b1:07:f6:2b:5b:02:15:80:f3:6c:7f:32:
9f:dd:81:6b:3d:7b:2a:ca:34:0d:68:54:d5:5b:be:
c1:64:f1:92:b7:d1:39:53:69:4a:b2:0e:91:61:1f:
f3:cb:f3:04:b7:20:49:d2:4b:a0:66:7f:bf:5a:d9:
f4:f6:83:9e:cc:c3:d9:58:ff:2c:e1:78:5b:86:46:
96:c7:a0:51:99:f0:81:c2:82:42:6d:4e:3c:37:54:
68:14:a2:c4:0d:dc:3c:f5:9d:18:8e:f4:5f:8f:68:
79:6b:46:31:79:87:e2:d6:55:0d:e2:b1:b6:ee:fa:
2b:87:a6:f9:70:19:8f:b2:9f:f5:e5:03:5e:9c:c2:
d3:90:6b:6f:68:c9:ef:8f:30:16:98:02:1c:d6:76:
07:10:e8:1e:68:23:5f:31:93:03:92:97:83:4c:a0:
2b:d1:24:27:1b:f3:68:99:42:58:f3:fd:36:75:d4:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:37:73:58:C2:3E:BE:74:C0:37:13:29:D1:DD:CC:D1:C8:A2:1A:EE
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4e:02:1c:de:35:33:7f:44:fe:78:22:dd:87:14:51:68:a1:
86:b5:83:a2:27:65:16:42:c8:88:00:0e:07:c1:50:8a:5b:18:
41:59:e8:7e:d0:7b:7d:d6:5f:a9:40:44:af:c4:d6:ac:62:52:
a4:85:0b:d4:6c:67:b0:6a:49:2d:2a:d5:fe:d5:2c:43:a5:2b:
b7:aa:24:0b:a1:bf:5f:be:4e:dc:91:2f:03:21:b2:07:e3:07:
01:31:c3:ad:71:60:39:41:ab:38:04:94:b7:4a:bf:42:76:f3:
be:62:3f:b1:c7:08:f8:c7:90:9e:68:74:74:f5:43:9c:28:d0:
58:7f:b6:96:4c:a4:ae:9d:2f:05:ac:88:c6:43:3a:2c:6a:d0:
8d:4e:2b:50:a9:ef:96:da:6b:06:b7:0d:be:20:3e:08:30:68:
54:24:b6:a2:3b:7a:e9:ea:5b:07:ab:9e:5e:f4:23:7c:a8:78:
6e:a2:8d:0c:6e:76:29:e7:85:3e:73:3a:cd:7e:78:e8:d4:6c:
7c:eb:86:b7:92:2d:97:30:00:7a:64:7f:7e:bd:8c:66:53:89:
bb:24:9f:8c:6d:e7:31:d7:c3:59:82:5f:14:db:d5:56:26:8c:
84:6d:67:87:7d:b6:9a:e0:7b:3c:2b:34:06:6d:90:8d:9d:76:
9f:77:8f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0NC29jjAoVzPVV+EGPPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjE0ZWQxMjRmOWEyZjNkZWFiMTAwNmYxODRjZjRmYjgw
YTNhZWMwHhcNMjYwNDE3MDUwMTMyWhcNMjYwNDE4MDUwMTMyWjAzMTEwLwYDVQQD
EyhlYzM3NzM1OGMyM2ViZTc0YzAzNzEzMjlkMWRkY2NkMWM4YTIxYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTplEkz5y+KBHZfy/8UNPsVr2AVw
SvlG5sNHzEvF9n1pITzkUa+wl2txSFRok8JOJrGaOa8Q0JiSKlb9RxeKnEQI5eSR
Sc4obA3KiHqxB/YrWwIVgPNsfzKf3YFrPXsqyjQNaFTVW77BZPGSt9E5U2lKsg6R
YR/zy/MEtyBJ0kugZn+/Wtn09oOezMPZWP8s4XhbhkaWx6BRmfCBwoJCbU48N1Ro
FKLEDdw89Z0YjvRfj2h5a0YxeYfi1lUN4rG27vorh6b5cBmPsp/15QNenMLTkGtv
aMnvjzAWmAIc1nYHEOgeaCNfMZMDkpeDTKAr0SQnG/NomUJY8/02ddQrrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw3c1jCPr50wDcTKdHdzNHIohruMB8GA1UdIwQY
MBaAFPDxTtEk+aLz3qsQBvGEz0+4CjrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQt
NDM2MTJlN2Q5Y2MxLzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jNzljZjMtYTA3MC00ZDViLTllZTQtNDM2MTJlN2Q5Y2Mx
LzEvOFBGTzBTVDVvdlBlcXhBRzhZVFBUN2dLT3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ04CHN41
M39E/ngi3YcUUWihhrWDoidlFkLIiAAOB8FQilsYQVnoftB7fdZfqUBEr8TWrGJS
pIUL1GxnsGpJLSrV/tUsQ6Urt6okC6G/X75O3JEvAyGyB+MHATHDrXFgOUGrOASU
t0q/QnbzvmI/sccI+MeQnmh0dPVDnCjQWH+2lkykrp0vBayIxkM6LGrQjU4rUKnv
ltprBrcNviA+CDBoVCS2ojt66epbB6ueXvQjfKh4bqKNDG52KeeFPnM6zX546NRs
fOuGt5ItlzAAemR/fr2MZlOJuySfjG3nMdfDWYJfFNvVViaMhG1nh322muB7PCs0
Bm2QjZ12n3eP4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:14 2026 by rpki-client