Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: ABTCZml56pjjSHBf4PbFzzw/KHvw6h9OhZyAAwuV8vE=
Subject key identifier: AA:19:A7:B8:A8:D8:50:05:12:1D:28:D8:5D:23:84:11:19:57:57:96
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019D9BF55DC96D36CB8DAB9CB389A91E73BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 17C8
Signing time: Fri 17 Apr 2026 15:00:41 +0000
Manifest this update: Fri 17 Apr 2026 15:00:41 +0000
Manifest next update: Sat 18 Apr 2026 15:00:41 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: CD7OOi0yl0teduON2bo3oYjPx6nMnpweUyTgV8LRtD4=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:5d:c9:6d:36:cb:8d:ab:9c:b3:89:a9:1e:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Apr 17 15:00:41 2026 GMT
Not After : Apr 18 15:00:41 2026 GMT
Subject: CN=aa19a7b8a8d85005121d28d85d23841119575796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0d:a7:64:eb:21:0e:c0:d9:fa:a6:90:fb:89:
0d:44:7f:dd:a3:78:ca:d3:3a:fa:b4:2c:bf:68:e7:
42:e1:c5:58:cd:b7:9e:57:3a:8b:e3:d5:76:72:e7:
54:a4:3b:5d:6c:a8:18:98:06:d0:a8:ba:d8:ee:37:
88:f7:76:38:dd:e2:39:d7:32:e6:af:07:93:df:c5:
b9:79:ef:9e:1b:43:55:38:9c:d5:14:be:83:0b:2b:
b3:4c:2c:65:17:25:07:a1:33:8d:83:28:2e:ea:1e:
7f:2b:36:60:71:c4:fc:25:8d:4d:06:0e:17:81:15:
6b:62:9a:a3:4e:b2:19:45:3b:31:80:17:09:40:5e:
96:5a:47:bf:e7:ce:3d:be:9e:a6:42:3d:e7:f4:09:
f4:f7:78:9f:0b:51:c0:bf:72:12:1a:72:6f:2d:4e:
9e:ce:b4:dd:b5:52:63:3d:19:7c:b2:52:a0:ae:02:
10:c4:63:8e:ae:62:7d:74:f1:71:6c:ae:2b:8f:97:
41:5b:42:8f:d0:5b:44:da:a8:7a:73:29:c4:6f:32:
6e:93:ab:d2:81:23:8c:68:94:1c:d3:8c:d6:9b:ee:
a9:34:e1:35:2e:f7:04:d8:e0:5c:57:b5:12:2f:19:
df:62:7a:e2:31:aa:d1:ae:06:86:22:8e:a2:26:72:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:19:A7:B8:A8:D8:50:05:12:1D:28:D8:5D:23:84:11:19:57:57:96
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:68:60:c4:1e:6a:3d:17:fa:f2:0d:96:a4:09:c0:8e:c1:e0:
e3:06:c8:64:cc:4a:5a:e5:d4:48:7c:61:0a:77:bb:69:53:b3:
8d:c9:66:26:48:14:02:c8:19:00:04:99:f0:a3:1a:8f:41:5c:
c5:2a:53:54:a3:25:f3:68:22:6b:01:28:b9:b4:95:a0:1c:13:
af:d3:46:24:bb:d2:c4:53:00:39:8f:c3:c5:4a:6d:2d:83:d7:
ef:75:39:4a:56:fb:fd:21:b5:f4:c1:77:cd:bb:34:4f:5a:9b:
53:67:52:2d:c9:14:e8:c1:78:aa:1c:5b:6e:0d:f2:2f:61:dc:
a1:a9:aa:09:19:bf:cd:f8:05:bb:84:14:d9:b3:55:9e:53:98:
1e:44:0a:42:94:d8:b6:e1:ed:e3:b9:fd:70:d2:99:9b:bc:ad:
cb:a8:ed:cd:70:8b:3a:49:25:9b:9f:4f:78:44:2a:ec:51:d5:
53:7e:08:3e:d3:47:44:92:16:db:0d:ea:7f:a7:94:63:b7:a9:
7a:50:53:b8:cf:03:33:77:92:8d:02:ef:3a:ea:34:1e:63:92:
a7:3a:de:00:d0:9c:86:1c:43:42:c8:8c:60:ad:61:1a:5e:bf:
0a:1b:6f:b0:e3:8c:51:19:35:98:3b:9e:c5:a4:2c:0f:57:d8:
f3:e2:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:10 2026 by rpki-client