Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 5RQH2OGU/Cd52TIDQvd5J8ynPtMLwIiXL8CUMrHZTdM=
Subject key identifier: 90:EB:E0:71:CE:84:53:BF:CE:7E:41:44:8F:32:C0:DB:9E:79:FE:BB
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019DCF74C8FF8B657452110CECC77C84AEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 1343
Signing time: Mon 27 Apr 2026 15:00:30 +0000
Manifest this update: Mon 27 Apr 2026 15:00:30 +0000
Manifest next update: Tue 28 Apr 2026 15:00:30 +0000
Files and hashes: 1: 2eALhg4Z0Jayl7pXjDpiu6Yce70.roa (hash: T6rTcTEa9u3K98yffE7Z0AFy42tuncNhQhMLuFtVeqs=)
2: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: K69zO0yJqsFoK/+HxdxnbN8F4gekxh2l60c26w5gen0=)
3: OmODl-Dxgvnfb7lh_C-Zh2V9ocU.roa (hash: PmAaIQqyZcT72p+jMNnZFGobOFfukrUMlowL+LPavOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:c8:ff:8b:65:74:52:11:0c:ec:c7:7c:84:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Apr 27 15:00:30 2026 GMT
Not After : Apr 28 15:00:30 2026 GMT
Subject: CN=90ebe071ce8453bfce7e41448f32c0db9e79febb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:13:59:a8:f9:b1:fc:59:5e:70:c4:54:4e:
bd:6e:8c:6e:eb:a6:e3:2c:30:d2:4a:27:50:ae:67:
7d:60:e0:dc:ad:d6:fd:37:34:c5:1d:e5:fc:43:52:
f9:c9:44:68:e2:e8:a5:44:99:4b:2d:9b:2f:10:80:
fd:e5:ed:0c:ae:42:f4:5e:67:99:b9:09:d5:56:d1:
9a:eb:43:e3:9a:31:3f:16:fa:e8:0d:62:0b:e0:b2:
c7:21:8c:41:4d:15:40:8b:6b:a1:1f:9d:77:2a:b6:
b7:d5:ce:c0:45:ab:56:0d:a7:c6:17:24:6c:f9:b4:
7e:aa:0d:2f:b7:b4:0f:a1:1b:39:e5:f1:97:66:01:
88:b5:b9:2e:66:a6:d1:ca:76:bd:ba:e2:fd:2a:3d:
07:93:a6:d4:68:2b:1f:a9:0f:91:63:30:6a:ce:0b:
f4:d4:fd:9e:a6:c9:b1:1c:64:ad:27:47:ea:d1:ed:
84:71:c7:55:2e:e2:8b:78:c9:fd:f2:68:a1:ae:6b:
75:9b:12:ff:2f:43:1d:8a:d3:e9:8d:12:1e:00:d6:
ed:55:06:40:ea:7a:3b:ae:8c:a6:80:05:e3:11:0b:
6f:05:4d:ad:11:6b:1c:a3:b5:f3:d6:30:cc:e7:3f:
e3:1a:95:49:32:dc:7b:8e:aa:d6:f8:3e:1b:3c:73:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EB:E0:71:CE:84:53:BF:CE:7E:41:44:8F:32:C0:DB:9E:79:FE:BB
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:65:91:dc:aa:de:ce:e8:54:ec:2c:26:42:9b:be:ba:e7:0b:
6b:e7:7e:7d:fe:d3:f1:ac:cf:11:fc:5a:b4:df:f0:7a:ef:d0:
b4:d7:61:4e:12:b5:f6:68:11:e9:29:02:15:a8:57:1a:3b:35:
e6:1f:c9:bc:7e:2e:79:3a:93:b2:c9:63:bc:9c:71:af:4c:8c:
fa:bb:6a:f2:cd:a4:7f:87:14:df:ed:03:97:8f:6b:38:23:5a:
50:ee:9d:43:b7:48:39:38:95:01:15:c5:2c:00:25:85:4d:e5:
c2:17:b2:6c:c4:32:a0:9a:cd:25:c5:e6:ea:b9:f6:33:cb:e7:
8c:5b:f6:ea:9a:2c:31:fa:35:eb:99:a3:83:79:0c:27:ff:dc:
de:94:be:8f:cf:c5:57:8d:b4:25:20:21:ae:de:50:78:ce:15:
02:44:6b:45:ce:b7:c5:93:b2:36:64:18:61:98:47:4c:86:c6:
bd:64:9a:bc:bc:e0:6a:ea:38:9d:01:97:09:d7:d8:ae:bb:eb:
35:b6:a2:4c:77:b7:2c:64:ca:6e:42:d6:6d:e2:1e:e0:dd:c2:
da:58:e8:18:45:3a:ab:eb:68:95:ad:d4:e8:c0:76:cf:7e:43:
21:ad:de:b6:35:1e:6f:74:80:c9:51:ee:c1:36:30:89:c4:22:
b0:62:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:47 2026 by rpki-client