Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: /03zFQDc+PjdST8lBoPrALc7PpZYYXaCItq71RNQNfo=
Subject key identifier: 4C:72:6C:4B:8F:C7:CE:D3:2B:50:18:3E:8B:E4:C4:6B:DD:34:98:86
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019DCD18B779210EDBD3A82024F2793727D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 099D
Signing time: Mon 27 Apr 2026 04:00:42 +0000
Manifest this update: Mon 27 Apr 2026 04:00:42 +0000
Manifest next update: Tue 28 Apr 2026 04:00:42 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: WG/AywnjzhpumXU/tCklQtZ4F4gJWSaaVuYZT3/Gnl4=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:b7:79:21:0e:db:d3:a8:20:24:f2:79:37:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Apr 27 04:00:42 2026 GMT
Not After : Apr 28 04:00:42 2026 GMT
Subject: CN=4c726c4b8fc7ced32b50183e8be4c46bdd349886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:8d:a6:5f:5b:b9:57:88:7c:25:f1:78:6b:
e9:e7:66:3e:e7:ff:c0:91:17:16:cf:23:90:28:04:
63:87:ac:bd:e2:2c:26:a5:3c:43:df:42:9b:69:82:
9d:db:42:41:68:9d:fe:ce:8d:25:35:52:34:48:80:
07:11:d3:a7:0b:96:3d:03:52:de:42:7b:0d:5d:5f:
fc:84:c3:b5:0e:2d:5c:ff:c8:0f:b2:a4:a9:20:3d:
dc:2a:24:6e:c5:24:30:77:71:5d:36:8a:fb:92:24:
52:5f:83:ac:0e:56:a4:5c:41:09:fb:d2:67:76:37:
c8:08:ef:0a:47:10:e3:c1:c8:d7:93:6e:46:66:9e:
17:97:83:fb:83:e2:15:5b:9e:69:1e:a8:2f:6f:db:
41:78:17:36:be:58:73:74:44:41:a0:bd:06:7b:13:
ed:fa:65:11:4d:5f:de:88:e4:25:be:05:d8:5b:a9:
1d:99:3d:a9:e8:33:f8:03:54:5b:86:03:8f:22:3d:
3e:43:f0:5e:f4:c5:02:80:8e:8a:07:e4:88:77:a5:
9c:d8:b8:d8:ba:85:57:36:6b:8e:c7:00:8d:70:48:
a3:d5:40:81:f3:cc:fe:f3:1f:b6:94:3b:e1:e5:8b:
92:c8:31:9d:ef:f9:6e:7e:f6:cf:60:46:be:92:e5:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:6C:4B:8F:C7:CE:D3:2B:50:18:3E:8B:E4:C4:6B:DD:34:98:86
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:3b:e5:80:6f:1a:d2:67:ea:f7:72:62:7e:77:bf:c5:1b:
06:b5:2c:fe:f8:b4:4f:75:ec:c7:fe:6e:d4:ae:30:cc:86:55:
b5:e9:85:c4:25:ed:11:77:ec:fc:fe:8e:b3:f7:95:fb:57:4b:
4a:ec:34:ef:11:89:92:62:ee:a5:b0:29:ea:91:56:80:84:41:
d4:86:05:9e:63:1a:88:20:64:0b:a9:e6:d7:38:e4:df:12:2f:
ab:13:e1:ba:7d:e0:f1:68:a5:82:3f:2a:49:bd:fc:a9:34:4c:
b0:1d:46:9f:96:d3:08:44:b5:87:20:31:eb:f7:97:e1:ac:4b:
45:f2:c2:97:b9:74:22:79:65:16:c3:03:ea:8a:8d:18:bf:49:
bc:3c:72:ea:13:dd:2f:6d:5d:c0:31:13:63:d3:5d:67:88:03:
52:30:ab:ac:9d:2a:1b:9c:1a:e1:62:e6:b3:81:44:e3:7e:59:
cf:0e:d1:b9:ac:62:94:67:84:d8:a3:4d:c4:e9:df:ff:d5:8a:
f8:0d:43:78:7c:3a:54:17:18:12:4e:17:94:4d:cd:6e:05:5e:
c4:ec:3d:d2:fa:bc:37:7c:94:13:8e:69:1f:b1:1c:1b:d3:41:
77:aa:79:02:2d:50:77:51:ed:1f:9e:c7:0c:34:b3:38:81:6d:
94:33:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:56 2026 by rpki-client