Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: 5LGGK9Ce4Zd6wzH7qTYaA7AZ0LaUwuFJFIdfv0pLaUk=
Subject key identifier: 79:F4:CE:E9:E3:16:F2:99:49:71:75:82:A8:6A:3A:5A:EA:58:DC:17
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019D9850580A00313BB13BDC453A226297E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 158F
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: HO0pdoiaTm4tYO0rBcmPwbEwUt36bCmL02LDRqHnYk8=)
2: yuJsWVIKEkrfOiLC0rgtYrfv5ig.roa (hash: tNJ821CD2JFvwv/regbkNi6JuvYQZgMCd//DFX1D46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:58:0a:00:31:3b:b1:3b:dc:45:3a:22:62:97:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=79f4cee9e316f29949717582a86a3a5aea58dc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:46:33:2b:1c:f0:f6:7a:7b:98:37:fe:2f:
95:31:10:ea:2d:cc:8c:88:cc:d5:8e:23:cb:d6:fe:
c6:d6:d4:a6:73:f7:42:a0:cf:bb:3d:39:4c:48:8d:
20:f8:a3:4e:93:59:16:a3:75:ef:4e:bc:57:74:f2:
8e:55:7c:1f:5e:06:91:5c:94:1b:dc:e4:0e:43:54:
5f:15:05:51:b1:fd:8d:7d:73:f7:f9:18:c0:cb:2d:
dd:07:4f:9e:b6:af:42:21:b2:20:88:ab:d6:3f:ce:
a1:90:78:3a:d0:68:05:12:55:44:ed:20:ef:f9:ac:
b8:38:03:75:a0:bd:52:8c:bf:a4:5f:14:c3:f9:b0:
37:45:5b:13:6f:41:38:d4:c8:fc:76:8b:aa:51:da:
14:55:a5:1e:3d:45:7f:72:07:13:b4:cb:7f:9f:15:
fa:76:cd:b6:81:af:50:3e:26:b0:4c:f5:75:51:8b:
a7:a8:28:d0:55:00:a3:59:dd:ee:fd:be:c1:90:90:
54:c1:f2:eb:37:b8:ec:27:76:bb:9e:24:a3:8e:71:
ff:a4:be:5c:d6:3d:97:69:21:ee:ca:92:84:1d:13:
c5:9c:bf:4d:b6:a9:75:46:1d:09:95:7b:bf:4d:15:
b0:d2:c6:d0:ec:af:d1:93:eb:39:0b:50:0d:31:6a:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F4:CE:E9:E3:16:F2:99:49:71:75:82:A8:6A:3A:5A:EA:58:DC:17
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:f0:b6:cd:95:a0:ae:eb:db:95:ab:b5:c1:9e:e5:84:34:
56:d5:90:97:0e:4a:44:91:47:bf:60:cb:ef:5f:9f:78:46:de:
26:79:db:17:43:ee:e3:10:58:fa:fd:7a:fd:a3:91:a8:0f:53:
5e:8f:9d:a2:19:b5:27:4a:2f:ad:8b:3c:7e:2d:63:8b:4a:45:
56:97:7d:cc:12:6f:f4:71:82:a4:c1:19:94:a1:e8:65:4a:ad:
07:03:00:d6:c3:6a:9e:b6:02:30:59:91:96:33:fb:21:a3:02:
20:17:e5:e4:67:9c:b9:a1:db:85:0b:43:60:3f:d9:59:e4:95:
42:23:3b:34:5c:57:20:b1:35:fb:e7:3e:91:8a:98:93:3f:2a:
dd:8b:b1:02:c2:bb:7d:89:90:34:28:9c:92:4a:b1:fc:5d:c1:
c0:46:c5:ed:7d:3a:17:5b:b9:5a:e0:97:05:cd:b6:e8:18:95:
5f:89:d4:fa:62:0b:1c:12:8d:f7:12:05:b7:a3:6c:68:4d:47:
aa:7e:56:11:0b:8d:64:fa:38:65:c3:43:56:a6:48:3b:0e:2a:
3e:8e:f9:61:54:7d:af:0a:95:d3:34:df:ff:2a:cb:85:f0:6b:
e5:bb:65:a8:dd:f5:83:0b:f2:8e:f5:a9:df:10:8f:45:7c:d5:
44:88:11:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:05 2026 by rpki-client