Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: nCIsq+QmW4PTgJn+6RQBLz4+h9aND2y9V4rzOVJMR7s=
Subject key identifier: 86:26:B6:B6:42:6F:10:6B:98:34:2A:71:0A:9B:48:E0:27:D1:30:5F
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 019DCE2B2DE96F33F6BB4AE898F492EBBB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 09:00:29 +0000
Manifest this update: Mon 27 Apr 2026 09:00:29 +0000
Manifest next update: Tue 28 Apr 2026 09:00:29 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: vuVvrIffxL/rTT9Hhe+CO4QxfUXduyqmWVrB0HHa8hg=)
2: SulUeNH4yTw4wuibtQPCkvrNimE.roa (hash: /lThE7QiTo8Pw3w2T2Wjjtw5V8Pd4Y+WCHuTrGI19CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:2d:e9:6f:33:f6:bb:4a:e8:98:f4:92:eb:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Apr 27 09:00:29 2026 GMT
Not After : Apr 28 09:00:29 2026 GMT
Subject: CN=8626b6b6426f106b98342a710a9b48e027d1305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:4c:e4:c9:8c:55:07:d3:f1:6e:4e:71:bd:
7a:bb:4b:d8:26:2c:8e:7a:14:8c:5a:a0:79:91:3e:
8c:13:53:43:06:b8:58:23:17:d9:40:27:05:a7:2f:
dc:71:61:48:54:99:4a:66:22:42:83:86:a9:a1:0c:
02:16:94:9c:2d:4b:d3:7f:1d:0e:70:dc:3c:c2:46:
35:ea:6e:36:b7:e9:13:26:d4:ea:2d:c8:37:3d:f5:
38:11:46:85:af:26:63:f9:26:f1:ea:2a:81:83:5d:
f8:ab:a0:e1:9f:bb:4f:a5:2e:ff:f0:c9:c2:74:33:
39:7c:2e:98:8a:f0:af:7f:b0:f9:36:9d:10:8d:4f:
87:dd:99:0a:c9:fd:5e:56:0e:ca:0f:cc:1d:94:7a:
64:66:1c:7f:6a:e2:6c:3d:d4:34:fc:e9:c2:ff:14:
0b:04:5c:69:06:6a:ca:00:06:48:55:c0:1c:fd:8f:
02:3b:e4:aa:47:51:ee:6b:bc:aa:c1:29:cc:ef:88:
cf:0b:d1:23:8f:a5:b6:51:a1:85:25:93:29:10:23:
1c:90:e2:55:7f:14:75:ae:5c:85:8e:a1:5e:0d:36:
25:57:81:42:00:ee:e1:25:3b:c2:6a:8c:35:32:be:
ef:33:76:2b:d1:8f:dc:ed:58:5c:57:27:b8:8b:20:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:26:B6:B6:42:6F:10:6B:98:34:2A:71:0A:9B:48:E0:27:D1:30:5F
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:50:2a:8e:a7:ef:12:e7:78:6a:cc:b5:20:2c:dc:39:5e:8f:
b7:8e:6a:bf:10:cf:77:5e:2e:2c:85:ef:00:ae:55:fd:6a:f4:
db:be:ef:f8:b1:c5:bd:4e:85:78:c5:56:8a:0a:84:a0:6f:3c:
59:ae:eb:44:27:92:10:11:f0:5e:93:e7:f6:9f:9b:52:aa:7f:
42:2d:f4:33:f1:2c:16:9d:27:bd:12:41:af:96:a8:55:8f:45:
48:fd:ca:1c:6a:77:60:97:51:6e:48:3e:e7:e9:6e:d7:c4:00:
b3:a9:95:e9:90:4f:ec:a4:cb:0a:29:48:b9:c0:ea:f3:02:85:
84:d0:04:7b:f0:eb:c5:8e:ee:00:d8:40:be:07:50:c5:e4:06:
b2:a7:e6:24:de:7d:62:d7:1e:4a:bc:31:bc:07:82:61:d0:da:
d7:d1:81:f6:24:51:dc:d4:cf:d5:9e:58:9c:ce:be:24:8b:2f:
54:8f:1f:26:72:bc:48:b7:e7:73:1a:3f:65:98:3c:26:1f:16:
17:95:b4:82:63:4c:2b:1b:00:5b:8d:6a:31:0b:aa:bc:d7:5c:
7b:b4:a7:62:6d:ec:cd:8c:a3:9e:db:49:a1:b6:83:8e:14:35:
a0:0d:15:33:fa:5a:7f:0b:61:73:e5:e8:01:bd:e3:90:c6:b8:
b9:6d:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:35 2026 by rpki-client