Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: e5yXEnH8voRQWFiC96ujDNu2qflfAlvTrSPJKSzTE48=
Subject key identifier: FC:BC:45:EA:FD:F3:C3:F6:37:71:4A:03:CF:B7:04:ED:6B:3A:A7:07
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 019DD050B8609F224C508DD529E82C0EB752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1872
Signing time: Mon 27 Apr 2026 19:00:44 +0000
Manifest this update: Mon 27 Apr 2026 19:00:44 +0000
Manifest next update: Tue 28 Apr 2026 19:00:44 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: 4BLg6u7EIRAObtx8EyOSzLKShtuXLV+n/4i7+oQg8GA=)
2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:b8:60:9f:22:4c:50:8d:d5:29:e8:2c:0e:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Apr 27 19:00:44 2026 GMT
Not After : Apr 28 19:00:44 2026 GMT
Subject: CN=fcbc45eafdf3c3f637714a03cfb704ed6b3aa707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:79:d7:34:94:54:dd:d6:fb:d2:ab:89:05:
c0:66:5e:dc:4d:c7:8d:ac:f4:18:f6:26:5e:98:47:
a7:9a:3b:0c:0b:f8:43:5f:1c:c1:07:cb:2b:52:32:
fe:e7:dc:12:24:b8:aa:9f:2b:b9:f1:cb:28:2b:2e:
33:16:df:51:3a:98:39:07:4d:bd:b3:82:e8:9b:15:
a0:50:af:b3:3a:5f:41:fc:13:77:fd:5a:6d:d5:1f:
ee:c5:65:8f:a8:ce:1c:df:c7:f5:af:a9:15:ad:02:
7c:14:a1:f1:3c:22:e7:86:4f:b1:0a:74:08:be:cc:
54:12:13:a7:f8:49:55:8a:22:c1:43:c7:ed:52:4f:
d0:29:56:0b:77:62:b0:c4:0b:dc:cd:e4:fc:15:21:
06:86:78:c7:58:0c:c8:89:8c:ef:ce:79:d4:82:b7:
b5:6d:bd:15:ed:0c:4c:ec:9a:bf:54:e5:29:78:c7:
da:85:3f:bd:d4:33:f5:28:74:ab:6e:e0:03:97:da:
53:33:fc:be:39:b2:97:ea:f6:a0:99:e2:72:82:9d:
8b:01:51:79:12:3a:87:0d:d9:67:aa:ab:a6:94:10:
ca:b6:67:3d:3d:83:6e:0a:43:bf:f5:6b:bd:1a:e1:
aa:27:56:48:df:f2:86:0b:0c:24:c9:e9:61:04:e1:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:45:EA:FD:F3:C3:F6:37:71:4A:03:CF:B7:04:ED:6B:3A:A7:07
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:eb:ac:f9:b8:e8:d4:90:20:8d:0e:d0:22:05:22:3a:05:
e4:b3:d7:6e:53:66:3c:01:e3:6f:2c:1f:3e:f9:36:0b:5c:20:
07:e3:3c:9b:40:62:09:1b:5b:dd:85:c7:ac:f6:68:61:3f:55:
db:c9:83:42:ae:14:4b:c2:c2:57:2c:2d:41:62:dd:f7:72:a7:
bd:f7:42:37:ab:24:75:90:83:3b:b6:a3:e8:ab:3d:2f:79:c3:
bb:97:7b:7e:91:d0:8c:64:bd:45:ce:04:3d:87:d6:f6:ce:4e:
29:f0:b0:1c:4e:fc:75:25:84:ce:e4:fb:7f:ad:56:29:9a:98:
40:42:c9:1a:44:20:de:e8:a1:74:e6:65:f1:9b:84:3b:41:8e:
57:e3:7d:e8:6b:5c:06:a9:ca:fd:97:02:94:35:b0:b4:82:2c:
4d:fb:91:c5:af:08:09:90:ae:95:30:96:66:52:3d:30:04:11:
12:43:04:47:de:57:ea:da:23:f5:1b:04:10:8b:a2:b7:06:5a:
66:5f:af:6a:85:5a:51:80:31:52:d0:91:f0:18:fa:d8:e1:7c:
2a:4d:0e:a4:05:59:fc:9c:bf:3b:1c:36:58:db:14:3f:ba:68:
06:d2:93:25:88:fd:54:1d:87:95:ea:d7:85:76:dd:ea:3b:5d:
99:07:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:15:23 2026 by rpki-client