Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier: eqiZn8UnPl10bGq/ZC8YnPSebbp8lYF4rObMIMX8SrY=
Subject key identifier: 50:B0:92:89:6A:26:BF:84:2F:8D:E6:8F:80:E4:80:1D:1B:3D:E3:90
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial: 019DCED0D1F2E86A33E9FE27518B4DB51971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number: 0277
Signing time: Mon 27 Apr 2026 12:01:24 +0000
Manifest this update: Mon 27 Apr 2026 12:01:24 +0000
Manifest next update: Tue 28 Apr 2026 12:01:24 +0000
Files and hashes: 1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: FFY7yFVhow/T/rvjZw+MrszxUVRUOgpKtGSALauEfF0=)
2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
3: dHpkVz1qG-AF-2ObL_WKlgFCa5A.roa (hash: pDto/Hqi4osJfNZa1fOxjtdmxoHJy3MfMIgMhgvqHY8=)
4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:d1:f2:e8:6a:33:e9:fe:27:51:8b:4d:b5:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
Validity
Not Before: Apr 27 12:01:24 2026 GMT
Not After : Apr 28 12:01:24 2026 GMT
Subject: CN=50b092896a26bf842f8de68f80e4801d1b3de390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:77:57:ad:e4:f6:bf:8b:4e:35:66:d8:eb:
f3:7c:dd:0e:8a:da:cb:82:3c:b8:20:88:a3:5d:ea:
5a:d0:52:d1:41:e2:55:6f:e7:0c:47:f2:8f:67:65:
f6:01:1c:ce:8d:13:ca:47:5f:29:8a:ca:04:90:c6:
7f:c4:b1:94:5e:2c:e1:e8:48:66:f9:0d:e6:6e:94:
72:fb:7b:a4:0a:06:4b:30:33:ac:6f:3f:07:8f:25:
ca:bf:f6:9c:1a:3a:e8:9c:4b:87:e9:64:cd:60:8e:
f0:5f:fd:ff:d8:b6:7f:91:c5:94:6e:d6:90:6e:fb:
36:c1:a2:3c:7b:0b:81:c5:4e:93:1b:0d:bd:2f:49:
fc:9c:28:12:72:b1:57:40:30:45:1b:15:31:22:d6:
ef:79:2d:f8:c4:73:3c:77:4a:3c:63:a5:e4:8f:df:
a4:36:de:92:a3:bc:7e:81:a2:c9:35:12:06:f7:65:
be:7f:bd:3a:df:ac:66:ef:85:34:2d:65:a4:a9:92:
f2:78:61:96:1e:f2:83:9c:e9:86:0b:9c:f3:db:7d:
e9:79:db:cb:91:92:99:51:b9:22:70:68:82:92:92:
a1:82:5a:e9:5c:d3:11:a3:7b:2a:fb:7b:83:93:7e:
e6:22:09:e2:93:27:14:21:ef:57:8b:6b:f0:06:30:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:92:89:6A:26:BF:84:2F:8D:E6:8F:80:E4:80:1D:1B:3D:E3:90
X509v3 Authority Key Identifier:
keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:f9:07:de:9d:b5:7e:d0:00:59:dc:eb:68:ad:ff:58:b7:
47:47:1b:c2:30:a7:45:45:b1:e7:99:d2:6c:2d:e1:d3:64:5c:
c4:e5:d2:f4:d9:a4:9d:3e:bd:e6:90:6c:7d:30:df:1d:8e:48:
e3:4b:5f:d3:85:db:7b:5a:dc:91:ad:f7:ab:4c:40:41:d4:0f:
73:3e:cb:82:05:e4:f0:3c:c2:54:7f:41:0c:c5:eb:4f:c0:68:
31:9e:ba:68:90:14:a0:71:53:0d:ee:08:86:bb:37:90:28:3e:
a1:7a:34:cd:41:ef:99:4a:75:93:f8:71:ef:47:07:4c:f1:83:
7a:e2:1b:ba:7b:bc:d9:a5:de:cc:6c:76:c0:a9:37:9d:2c:71:
08:58:69:64:b9:b9:03:5b:26:bf:88:d9:67:74:6a:1c:49:42:
a1:d4:e7:37:cd:04:aa:d7:49:33:11:ff:d0:c4:0b:18:b4:55:
fe:f0:46:33:88:ad:17:8f:74:6a:d3:63:3f:1c:e2:ba:5d:99:
b5:36:7c:54:e4:6b:95:8d:c9:47:d5:ae:bd:0d:9b:1e:98:33:
f4:b1:45:de:ca:9e:14:60:76:96:85:14:fa:9c:b0:cd:4e:97:
f8:7c:ca:ff:3a:4c:2e:e9:a8:c9:dd:a2:d1:56:c3:80:63:be:
e8:d5:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:50 2026 by rpki-client