Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: eHuw0BBxb3QJjIHaGFFj8+jzppYoA+hpnAC4yMPCKWQ=
Subject key identifier: 59:AC:F4:FC:69:13:E1:06:A3:05:87:92:65:2B:46:C1:C8:52:C8:2D
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 019DB16A9CC31E335312083C1DE42BB05FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 1563
Signing time: Tue 21 Apr 2026 19:00:47 +0000
Manifest this update: Tue 21 Apr 2026 19:00:47 +0000
Manifest next update: Wed 22 Apr 2026 19:00:47 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: yJAnY5opRA3cbv549oS6H7kh7nRIUBhXRSLE8t7/iws=)
2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:9c:c3:1e:33:53:12:08:3c:1d:e4:2b:b0:5f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Apr 21 19:00:47 2026 GMT
Not After : Apr 22 19:00:47 2026 GMT
Subject: CN=59acf4fc6913e106a3058792652b46c1c852c82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:eb:32:7b:64:3c:6d:42:98:98:7e:a9:8d:
3f:e2:0f:79:af:f8:36:9b:21:e2:b5:3b:f3:53:f8:
0d:83:d2:f5:60:af:ae:8e:bb:7b:73:0f:c6:07:4f:
4a:a8:e1:01:de:4d:49:c7:af:7c:8a:ec:19:be:0f:
be:6d:85:0e:9d:9f:c8:ee:b6:ed:c8:2f:41:d4:9e:
5a:d8:5a:69:9d:ac:5b:77:69:1a:7b:23:ac:8a:16:
ff:66:1f:5e:3e:a7:a2:fe:21:42:0d:64:ad:6f:d4:
f1:8b:ab:39:fe:5c:e7:ad:b3:bd:93:0b:f8:4f:9a:
65:bb:b2:5e:98:4a:66:a4:ec:12:f8:90:fa:d3:f6:
a6:6e:4c:d3:0b:1b:c3:8a:c8:be:26:c4:4d:b2:f2:
bb:9b:ae:a1:bd:95:09:57:04:94:cc:04:73:63:5d:
ff:1b:73:18:a4:89:04:66:ae:d5:5c:91:ea:e6:59:
ec:fc:7d:43:cd:f2:8e:c7:50:7e:b5:39:c6:b0:ee:
d1:bc:ef:da:7a:a4:a2:38:35:29:78:4e:77:22:b9:
6d:55:15:39:90:11:2c:ca:25:14:6b:b4:7f:5e:3e:
1c:84:7c:a3:05:6f:12:6f:40:82:83:df:9e:a8:6d:
2d:09:a0:6c:27:24:c4:3b:b9:db:ee:38:b7:82:c1:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AC:F4:FC:69:13:E1:06:A3:05:87:92:65:2B:46:C1:C8:52:C8:2D
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:85:30:81:62:76:63:e5:3f:e1:bc:2a:89:18:09:d2:a0:46:
19:3a:bd:bf:a1:aa:dd:98:96:bf:1e:bc:08:b2:98:da:05:1a:
69:a8:42:5a:66:86:89:2e:6a:fa:38:1f:0d:91:5a:bb:41:f8:
c1:fc:84:03:db:ef:32:ce:e8:b0:e3:2f:dd:82:b7:d7:2a:f0:
b8:5a:18:71:bc:00:aa:6e:ad:d9:b0:ee:0e:10:5e:b9:93:9b:
8d:41:c6:a4:49:d1:cd:c3:4f:87:6a:ea:65:52:f8:be:2d:44:
97:77:6d:48:6e:c7:57:f8:ce:05:f2:8c:d5:4a:42:3a:ce:b6:
69:3e:6d:06:09:db:e5:10:4f:83:45:94:c2:00:f0:5e:8a:65:
d4:a3:90:41:57:b7:e3:1f:7b:ad:fb:d3:a2:3e:b5:1d:f8:6c:
32:5e:8f:6e:63:3e:63:d8:a8:e2:05:e7:55:2b:43:c0:14:74:
12:3e:c9:a1:89:0f:dd:c0:7c:d3:49:22:70:9b:e8:97:cc:95:
46:ab:82:b6:da:e7:3f:76:d8:0a:36:02:09:31:4f:84:53:de:
bc:90:2d:bb:4b:61:9f:ed:06:09:c8:e5:c6:58:6e:da:50:66:
34:83:12:d2:69:cd:f9:eb:6a:09:10:26:37:b8:2b:f4:44:a8:
21:b0:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:00:06 2026 by rpki-client