Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: gdAlbvTuuU3plScrUJUnRD9e7hXgh4Ck8gXqlhc6oU8=
Subject key identifier: 65:01:A8:DC:42:8C:B3:51:09:21:C4:52:09:FE:0B:E8:F4:FD:FD:B9
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019DCDBDBE2D7DE4B8802F9B5EDA45B8E7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 0387
Signing time: Mon 27 Apr 2026 07:00:57 +0000
Manifest this update: Mon 27 Apr 2026 07:00:57 +0000
Manifest next update: Tue 28 Apr 2026 07:00:57 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: UI1CfQw3J/DfXTCPJXB80eovqrIGgBX/yCNUXqu4H3M=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:be:2d:7d:e4:b8:80:2f:9b:5e:da:45:b8:e7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: Apr 27 07:00:57 2026 GMT
Not After : Apr 28 07:00:57 2026 GMT
Subject: CN=6501a8dc428cb3510921c45209fe0be8f4fdfdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:67:ea:ce:bb:6a:e7:2a:73:de:ad:27:e5:
d4:57:d7:8a:91:33:9b:db:95:c1:2a:8e:14:a2:b3:
30:68:32:ea:de:46:b8:81:8c:a1:ac:ef:4f:fa:f4:
ba:77:76:a9:7c:ac:61:33:57:17:9d:85:17:b7:ea:
95:39:e7:01:ca:f5:8c:67:38:c9:5c:06:c7:b7:8d:
3b:67:40:2c:22:6c:31:18:1e:5b:8a:64:f2:8c:1f:
64:26:49:41:b9:b6:19:f5:d9:c6:dc:49:da:a9:88:
78:08:28:fb:f0:de:27:25:ac:b1:5a:6c:83:5e:94:
8e:7b:e5:03:09:40:97:81:0d:37:50:15:e2:96:a0:
a0:0d:ee:7c:c8:23:3e:40:e6:c3:4f:1b:37:eb:e1:
b2:eb:6c:0f:72:a2:18:fb:39:30:b0:52:ef:b9:9b:
8e:0d:11:ec:71:f1:99:4d:a6:24:9a:d9:b9:66:93:
c2:d6:e4:bf:73:20:45:e7:ca:40:ba:0b:c7:93:22:
75:5a:04:20:a5:9e:41:e0:54:e9:c3:7d:64:a7:0b:
58:8d:78:8a:08:53:a5:5e:35:c3:55:db:3e:c4:2e:
fc:e2:80:6b:72:37:61:bb:83:a7:0a:a7:01:8b:34:
36:5f:ea:54:78:45:96:f0:56:55:40:69:ff:23:3b:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:A8:DC:42:8C:B3:51:09:21:C4:52:09:FE:0B:E8:F4:FD:FD:B9
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:de:12:39:41:26:89:7d:89:99:02:98:0a:69:2d:ff:d3:
d6:19:80:33:9e:19:6f:14:29:8b:46:f4:df:5d:27:fa:15:b2:
07:62:8b:73:b0:8a:df:8b:71:68:b3:a6:ba:27:1b:80:1f:43:
22:9a:59:63:d6:1f:c1:94:86:0c:4e:7c:69:f5:40:b9:14:9a:
42:6b:f8:80:b0:db:54:16:14:64:b9:46:dc:51:98:0e:98:21:
e9:55:5d:72:a0:3e:30:81:88:30:b3:01:4a:3b:07:b3:f3:2f:
9c:6d:e2:4c:2b:00:30:9f:60:db:f0:91:68:80:fa:10:a7:20:
7e:33:2f:36:e6:e7:12:b3:36:a0:e6:67:6d:ac:39:c7:c7:04:
6d:09:82:83:00:f5:6f:43:5d:ca:53:68:f1:ab:91:5e:40:fa:
29:63:4d:02:7e:9b:3e:74:34:59:32:7c:1b:9c:65:2d:5c:f8:
51:ca:03:a4:08:f6:9f:80:89:32:71:0f:42:a8:b7:58:f3:84:
4b:fe:bd:7f:17:10:9f:8e:a0:ce:47:d2:ea:5d:e5:f6:18:3d:
50:e3:30:56:c4:94:f4:83:93:4e:b0:68:1f:c5:4c:0f:bd:2e:
1b:ee:3f:13:15:63:e6:cc:ca:2c:44:63:83:d1:73:20:b8:ac:
a5:ba:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:50 2026 by rpki-client