Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: owqQVBkUPBFBQZD4+jVmuMTeiCzU9feyLaauzTxwFwo=
Subject key identifier: 0D:4F:83:3E:E6:8A:F3:46:BE:81:FD:C7:0A:8C:DF:82:9F:4D:13:DA
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019DCF3E464C15C139D99ACFD8CFB2322170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 17C8
Signing time: Mon 27 Apr 2026 14:00:57 +0000
Manifest this update: Mon 27 Apr 2026 14:00:57 +0000
Manifest next update: Tue 28 Apr 2026 14:00:57 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: 4a8InGjAMGM7UuSgwY9VcaOTroLCwumoVDapXJr+NyI=)
2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:46:4c:15:c1:39:d9:9a:cf:d8:cf:b2:32:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Apr 27 14:00:57 2026 GMT
Not After : Apr 28 14:00:57 2026 GMT
Subject: CN=0d4f833ee68af346be81fdc70a8cdf829f4d13da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:01:c1:5b:d8:82:f4:15:09:12:3e:29:e0:
25:4d:81:18:5f:82:e3:74:4d:e3:99:39:9b:fe:e0:
e7:27:d0:b9:ea:ee:36:90:6e:4d:b2:0e:4a:e0:c8:
82:d2:1c:d4:64:8d:c4:a7:24:56:d4:cc:81:96:b5:
38:08:6a:a4:b6:3d:80:09:ca:98:43:50:c0:ed:8c:
f4:3a:b9:95:03:81:0e:bc:45:dc:f7:ad:a4:07:17:
37:18:a5:77:db:dd:ae:e9:b7:8a:e2:18:3d:6d:51:
4c:52:92:ba:94:93:a9:28:d5:8f:e2:4b:7a:5f:aa:
b8:0d:a2:97:b0:ba:4e:07:81:da:9d:a5:90:73:f3:
8d:f2:54:77:08:73:c6:58:b3:8e:b4:e0:8a:e3:79:
50:2f:27:7e:10:30:e7:84:5f:e4:1a:ef:38:66:da:
c6:f1:71:da:05:84:25:33:e6:70:d0:dc:02:6a:8e:
a9:21:f3:8e:9b:62:21:2e:44:38:11:94:9e:79:57:
d3:39:e9:88:dd:00:9d:83:00:18:07:3f:15:ac:3f:
56:92:ae:82:a4:c0:83:29:ec:53:dc:2b:42:c8:3c:
3a:43:30:c7:3d:7c:d5:38:ab:24:83:95:06:73:a8:
92:96:95:81:66:2d:42:13:f9:fc:cc:3c:eb:40:e0:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:83:3E:E6:8A:F3:46:BE:81:FD:C7:0A:8C:DF:82:9F:4D:13:DA
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:ef:80:51:c1:52:66:2d:3e:35:da:45:75:b9:a1:78:8f:
09:0d:9d:bf:97:fb:ea:2a:ef:14:1f:7c:8e:ac:b1:de:a8:38:
9b:a6:d7:4d:70:f8:b7:16:47:48:be:f4:0f:8b:1d:dd:a2:cd:
d3:4e:ef:04:52:a7:be:43:87:55:c7:68:08:88:a0:0a:d7:ee:
4b:5e:35:1a:e7:0e:f7:8a:40:87:4c:3b:89:ac:78:5f:5b:07:
6e:db:52:60:01:95:27:66:a9:36:ee:bb:1d:33:b4:8b:28:5b:
2c:c7:af:2d:13:32:64:b9:25:97:70:36:6d:5f:ca:49:1f:d3:
08:ae:cb:15:0c:3a:57:28:ed:90:01:6c:ef:6d:d8:99:f3:a7:
3f:f5:71:cc:4e:c4:f7:45:07:ef:70:21:83:66:1c:05:a5:bd:
24:48:28:c0:8b:e1:5d:2b:69:a0:66:06:2a:74:bd:bc:d2:be:
d6:b7:5c:9f:77:73:c3:8a:9d:7e:79:eb:0b:cd:b9:bd:15:65:
b4:a5:57:90:36:fb:cb:63:54:c6:eb:7b:4c:8e:22:95:1a:82:
4f:f7:75:69:7d:e1:62:0e:87:a1:51:25:07:9f:91:54:7d:a2:
33:f5:5c:71:82:3c:2d:7d:6c:5c:1f:5e:fd:9c:ab:14:fb:33:
fa:d3:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:11 2026 by rpki-client