Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: JPrL4/PGc1AFYL60iRd421MUMagGBR3c59jbklZ+aFk=
Subject key identifier: 79:24:D6:C2:56:BE:BE:7C:C9:84:60:FA:AF:33:14:0F:8C:1B:98:8E
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019DDD67AC7FD1189BB5A4B780E6B242A53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 017F
Signing time: Thu 30 Apr 2026 08:00:52 +0000
Manifest this update: Thu 30 Apr 2026 08:00:52 +0000
Manifest next update: Fri 01 May 2026 08:00:52 +0000
Files and hashes: 1: 1rgWG4O3JsVa6Vy192wtJnc-5kY.roa (hash: AGWJbzsxdafZPEtjKhcIbgcH63XtDFxzdaV11GVybsQ=)
2: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: CShQK1li+798Fcjb565vrjO/2TT0TRX4ExWdILTw5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:ac:7f:d1:18:9b:b5:a4:b7:80:e6:b2:42:a5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Apr 30 08:00:52 2026 GMT
Not After : May 1 08:00:52 2026 GMT
Subject: CN=7924d6c256bebe7cc98460faaf33140f8c1b988e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:33:20:d7:b3:17:1d:13:68:4b:ee:65:3f:
0f:7b:6d:88:95:e0:b8:0d:5e:fb:41:4b:be:27:39:
09:32:3d:ef:49:5e:d4:45:19:21:17:a6:9f:63:75:
f7:a3:93:83:17:92:e4:d2:78:a0:43:31:2a:7f:3a:
21:f0:23:67:5b:51:e4:04:f5:b4:43:74:d3:5a:4c:
9d:86:82:12:8e:89:86:32:6f:69:9b:05:4e:c0:58:
42:03:43:f6:af:74:76:c5:4c:cf:60:7d:ca:ba:0c:
51:8c:41:7e:77:e4:1d:22:dc:ff:99:c1:0e:30:f2:
92:c5:f0:6e:27:57:db:62:59:e4:a3:68:34:b7:3a:
1c:7b:4c:c7:07:90:d4:27:a1:b3:7a:32:3f:85:f1:
11:c9:dc:ec:b7:4e:55:e3:b3:26:89:fb:5c:aa:f7:
51:a8:03:9c:26:5d:a8:5c:1b:e5:cd:62:39:2a:46:
f8:13:61:71:c1:c4:20:1d:3c:2c:7c:f9:97:d1:29:
fd:0e:1b:81:f8:d3:7f:fe:eb:50:b6:24:03:7f:ce:
f6:28:3e:b4:4d:c1:25:04:98:f5:b1:38:e3:a8:c8:
87:dd:ff:e1:8d:b8:69:c6:e3:ba:8d:a1:be:0b:fa:
aa:ed:c7:04:dc:8c:79:83:68:ca:df:d7:2c:50:14:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:D6:C2:56:BE:BE:7C:C9:84:60:FA:AF:33:14:0F:8C:1B:98:8E
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:f1:d7:64:5a:f6:8e:ad:37:7a:79:46:7c:83:38:8c:ab:
c2:09:1e:7f:9f:19:3a:21:b4:81:b4:bd:e7:03:b8:e2:10:0e:
17:cf:c6:4f:2f:a0:9e:23:91:83:98:64:29:ea:d6:e0:fc:b1:
4b:af:62:94:e7:91:cc:fc:2c:d1:6b:97:ed:92:de:2c:93:a6:
8b:36:d8:90:68:c0:37:93:85:7f:aa:ed:91:bb:ac:d2:8e:a8:
fa:10:76:66:d8:8b:51:d5:c5:76:83:a0:9c:11:f7:35:bd:c3:
5e:d8:81:a5:b4:98:44:5f:27:87:e5:59:17:ab:3b:2d:e3:4d:
33:45:95:0f:90:d1:4d:87:98:5e:f0:0d:9f:76:94:6b:15:bb:
94:9b:ff:d1:aa:e0:2e:8b:bc:6b:bd:0f:38:55:8f:23:37:71:
d0:14:bb:41:fe:4e:d0:e3:21:27:c8:ed:39:e7:19:d5:b8:9e:
d2:2e:c4:67:b7:08:5c:6b:1a:94:a2:eb:3e:60:1d:76:0f:2a:
b7:a8:1e:d2:71:4a:d8:70:ec:c9:37:fd:33:49:e0:d3:91:6b:
96:02:bd:44:e9:60:8a:64:98:4d:bb:91:0e:82:33:19:8f:a8:
3b:e9:26:08:82:c9:25:1a:ae:8e:16:e9:05:b3:1f:db:b7:f5:
e0:65:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:20 2026 by rpki-client