Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: bZacWSFljeopl18sVk3v935SIRNqRj2InpjG9B8yr1w=
Subject key identifier: 7E:8D:3A:7D:4D:C1:92:93:F8:13:5E:66:58:31:4B:16:AA:D8:71:F9
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 019DCE2B3AC76BBB94A9C223EFC68BE8E1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 186E
Signing time: Mon 27 Apr 2026 09:00:32 +0000
Manifest this update: Mon 27 Apr 2026 09:00:32 +0000
Manifest next update: Tue 28 Apr 2026 09:00:32 +0000
Files and hashes: 1: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: f6EDbS4ZcdO4sza0O9zJvNFIopmnA5cDLo5SR86edrs=)
2: IVsntpINLVptcAxi9F9OffThDww.roa (hash: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:3a:c7:6b:bb:94:a9:c2:23:ef:c6:8b:e8:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: Apr 27 09:00:32 2026 GMT
Not After : Apr 28 09:00:32 2026 GMT
Subject: CN=7e8d3a7d4dc19293f8135e6658314b16aad871f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:e3:e0:34:2a:81:85:65:89:45:02:02:b1:
c1:1e:30:91:54:87:43:43:2b:df:28:b1:72:d6:88:
e6:d0:a1:8b:81:02:88:15:88:1c:0a:91:04:43:dd:
14:a1:ef:33:da:3d:60:d2:3a:9d:32:c5:40:b3:5b:
52:04:57:0b:81:5b:d8:ae:76:1f:a0:d2:89:1b:33:
cc:77:36:48:d7:be:f9:70:5d:85:4e:6a:2b:82:f1:
63:d2:57:57:bd:b4:21:47:06:be:5f:29:09:ea:ba:
ea:2a:ee:d5:63:35:43:d8:a1:4b:2a:7e:b7:6c:24:
f6:50:ac:45:73:16:fe:93:98:54:b1:5d:35:25:ce:
d8:34:9c:cb:6a:ff:5a:92:28:2e:b3:37:ea:cf:84:
d9:80:01:83:12:93:ad:e3:6d:35:9d:02:3f:fe:1d:
e6:6f:cf:d5:23:0d:82:4e:f4:d1:4a:17:50:50:dc:
35:21:f1:b0:e6:8d:e9:5e:ce:05:d1:3a:cf:ae:82:
8d:6d:4b:4d:9c:c3:b2:48:fe:bf:42:d8:af:79:de:
51:ed:c2:5d:1c:8a:fd:49:63:ce:7b:2e:4d:b3:43:
47:99:c8:9a:d5:bf:15:10:c1:51:d0:42:59:cf:6d:
ba:e5:c6:09:08:0b:a9:b7:3b:de:35:ad:c4:da:31:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:3A:7D:4D:C1:92:93:F8:13:5E:66:58:31:4B:16:AA:D8:71:F9
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:88:05:f2:86:2a:a7:98:f6:d7:cc:10:fe:ed:4c:fd:de:ce:
0a:d0:82:1a:92:b2:f8:7f:e3:8e:47:66:31:8a:95:2c:0d:76:
d4:5c:ca:61:66:f2:c5:05:fd:df:c0:81:03:b1:4a:22:7d:a7:
66:77:71:0d:5f:97:20:2d:a6:97:cd:7a:4a:a2:9f:61:2f:21:
ea:fa:a6:f0:34:48:ad:c6:50:8e:db:85:8d:54:d5:d4:31:33:
ea:44:45:a5:00:3f:15:78:fc:8d:e1:ad:57:60:95:e9:71:10:
d9:b4:14:47:29:63:1f:de:9e:f5:cb:9b:2d:9c:28:53:96:bd:
ae:4c:44:00:c8:12:f1:1a:66:a7:62:dd:ec:c6:dc:c9:2f:48:
06:69:cf:85:33:63:9f:8a:79:f3:64:81:bb:fe:cf:90:d9:51:
a3:ee:a3:15:a3:90:a0:a8:a4:4b:8f:d9:a4:30:e2:b5:e5:f2:
18:cf:77:79:a5:48:38:2d:51:95:10:8d:75:ce:9a:da:f8:db:
f7:fb:67:89:11:4e:cc:62:51:62:e3:99:89:8a:ff:a3:4e:32:
f0:e2:7a:94:85:5d:92:10:b0:fe:2d:b8:c6:a7:d0:e0:e6:49:
2f:7f:ce:4f:45:4f:1e:ee:44:59:79:fe:bc:fb:e0:2d:8a:ea:
58:4b:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:55 2026 by rpki-client