Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: jYxfmwAMLBvC3lSCdXLtN/OPBU4cnPPFzuROPfYZgxk=
Subject key identifier: 23:41:CF:26:83:41:07:67:4D:D6:56:31:DB:1D:30:D3:8B:76:B0:58
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 019DCED04255412331F52ACC715A6291431E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0440
Signing time: Mon 27 Apr 2026 12:00:48 +0000
Manifest this update: Mon 27 Apr 2026 12:00:48 +0000
Manifest next update: Tue 28 Apr 2026 12:00:48 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: o9XZp7yjXgSoq31BuUCi60+f8BNELF3om1ZnuuGDjEw=)
2: sdMta7c0gW915yu9rkbP8a3pD1A.roa (hash: dpcGKoEnYqxFtG+MmQSOKo58GUsu+Url2Igp0+ElIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:42:55:41:23:31:f5:2a:cc:71:5a:62:91:43:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Apr 27 12:00:48 2026 GMT
Not After : Apr 28 12:00:48 2026 GMT
Subject: CN=2341cf26834107674dd65631db1d30d38b76b058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:7a:36:0f:53:ba:d1:08:46:71:23:59:5a:
2b:7e:07:96:c2:36:02:51:79:b9:0d:de:a2:36:76:
4e:2b:79:25:50:90:e4:2c:5b:d0:15:ad:1f:8f:32:
42:3e:0a:d0:e5:28:55:c4:8a:a8:bb:68:e6:c9:ff:
94:08:90:44:ef:53:b4:81:fc:a0:9e:25:1b:eb:4c:
a3:a2:40:29:23:b3:76:ce:08:6a:af:87:23:2f:b7:
8a:5f:0a:4d:e2:de:7a:8b:99:d5:c8:e1:89:1d:dd:
ae:1a:17:15:8d:fe:c7:e1:b5:2a:ba:af:fe:72:a3:
1d:2b:95:b8:cc:3e:81:b4:30:5c:82:4c:ff:5c:2e:
db:f9:50:29:11:e1:df:5f:3d:ea:9a:a8:0d:29:9f:
b2:0f:8b:66:8a:24:98:e8:e3:21:a0:9a:05:f1:90:
92:86:3e:3b:95:79:ae:2e:27:40:40:77:f9:1f:10:
6c:94:95:bf:ac:d7:62:85:4d:ad:01:39:4f:9b:7e:
c0:c1:6e:13:60:e5:b0:3e:72:77:f6:14:27:4a:e9:
ad:72:8b:30:50:3c:f4:b4:c2:fb:b0:6e:c9:95:4b:
67:09:db:56:d3:f7:99:34:fb:47:cd:9c:39:04:53:
c5:20:02:31:08:4d:24:fd:49:1d:1b:f4:be:24:4e:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:CF:26:83:41:07:67:4D:D6:56:31:DB:1D:30:D3:8B:76:B0:58
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:ec:04:98:c9:c5:23:e6:a6:c9:08:37:a4:1e:c4:a9:b5:
f8:ce:5c:5a:c4:2a:33:29:23:5d:64:ff:02:89:d9:12:1b:dd:
26:1a:09:85:63:bc:ae:78:c3:43:f5:8e:94:0c:8b:1f:bc:96:
3e:cf:d3:3c:28:4d:fd:85:e4:15:92:9c:51:03:b5:ba:e8:d6:
4f:d3:a7:29:5d:1d:9a:d8:26:7b:46:47:20:18:02:50:b1:6d:
00:fe:17:6c:c5:1d:3c:f0:39:43:f0:ec:40:34:f9:fc:d4:4d:
d4:95:2f:91:24:95:23:19:4b:55:bf:37:34:52:f1:1e:4f:b2:
c4:eb:b4:9a:7e:e3:f3:f8:8b:6f:ec:41:a2:8d:86:70:f3:40:
d7:9f:46:9a:b7:51:f6:b1:0f:fa:61:25:52:19:97:6e:29:85:
7e:8f:cc:ec:34:62:2f:59:e2:3f:e1:93:b1:b2:13:ef:d5:64:
07:91:9f:2c:69:da:2d:fa:61:9b:f4:7c:25:5a:26:10:1b:60:
8d:76:12:8c:de:cf:b6:7a:7d:ab:76:77:3c:5a:16:b7:e5:aa:
b1:f7:70:e8:5a:90:fb:5c:51:42:32:e8:06:5a:87:4b:68:aa:
97:f1:56:e8:58:eb:b2:16:30:c9:b1:23:49:44:48:77:ff:6f:
47:b5:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:10 2026 by rpki-client