Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: tP6Nu6qKa5meU0Q+BGzAS9oOJuWZKhbMTFco2syHXXI=
Subject key identifier: 2C:1F:21:D9:F6:84:B7:B0:02:7B:41:64:98:EC:EB:7D:82:89:C8:8E
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019DCF07ADE17A38FBEF2189B8FAFA3769D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 13:01:19 +0000
Manifest this update: Mon 27 Apr 2026 13:01:19 +0000
Manifest next update: Tue 28 Apr 2026 13:01:19 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: wlmeK9nGK4wjK8MEMjxevgyOHJDMm9qgOR1itcTTBxo=)
2: QKTIYLK1WrJ4lEHTpt0XBIkbbcY.roa (hash: Aq9b63DbV2PHKSgFXgnbBX80EJsS6u4ad6/+U2GDTlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:ad:e1:7a:38:fb:ef:21:89:b8:fa:fa:37:69:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Apr 27 13:01:19 2026 GMT
Not After : Apr 28 13:01:19 2026 GMT
Subject: CN=2c1f21d9f684b7b0027b416498eceb7d8289c88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:c9:f2:9c:58:6f:6a:78:fb:0c:36:93:69:
57:13:2c:0b:d3:1f:61:b9:4d:4d:38:0a:e6:5c:b5:
c2:24:e1:9b:b6:8a:60:1a:c0:a3:36:bd:21:87:bd:
cb:3d:95:e9:0a:7c:f4:92:51:35:ec:2d:19:36:cc:
fd:07:26:a1:be:8a:ee:9b:ff:e5:4d:13:ee:6d:52:
f7:23:8c:7a:e7:03:0b:91:c5:7d:6c:3f:9f:cf:cf:
1c:07:30:a3:72:41:77:e5:71:96:50:08:9d:f9:b0:
09:3e:41:df:b0:2f:7f:1b:d9:dc:af:95:1a:bc:bc:
36:25:c0:34:ff:e9:c7:09:2c:3d:60:6c:4f:36:3b:
53:84:bf:f3:7b:e7:ca:58:8f:36:db:03:63:c8:5d:
c4:a4:e6:2d:4b:4e:4b:b6:df:d9:02:eb:8e:98:46:
f0:5d:79:65:35:ed:8f:0f:98:46:64:09:5f:66:fd:
d7:26:66:e3:19:09:4a:07:9a:26:21:c7:07:8b:0a:
e3:24:02:c3:71:a8:2e:21:53:da:ad:e3:4a:b7:96:
f2:e7:fa:7b:d2:e1:b9:4b:ef:87:1f:a2:67:29:75:
59:87:ca:6c:cf:ff:e5:a9:3d:9d:73:5e:67:95:79:
d6:fc:9d:d3:0f:6d:a6:28:78:58:2a:d8:8e:da:77:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:21:D9:F6:84:B7:B0:02:7B:41:64:98:EC:EB:7D:82:89:C8:8E
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:39:2c:de:2e:2d:96:6d:ca:ca:e9:d2:84:62:dd:80:07:
9d:ee:af:a5:c6:9d:f2:cb:7e:e0:2a:5d:19:f4:19:58:df:b1:
47:67:2a:67:f8:7d:2f:d4:16:0f:90:08:56:bd:d6:dd:91:46:
20:a7:19:53:a4:c1:ac:05:70:b9:94:c0:5b:2d:4a:72:f2:0c:
90:98:b9:b0:56:70:68:c7:9d:70:50:b3:1f:0e:fd:19:3b:0b:
f1:34:75:f4:80:97:ed:0d:fb:28:ac:8d:83:42:dc:b0:dd:af:
9d:64:bf:94:c1:4a:0a:f9:2f:39:77:9f:38:d5:16:84:e1:44:
e9:5a:cf:0d:63:ca:55:0a:8e:6a:81:1c:26:63:8d:6d:37:f6:
2a:a7:0e:a1:e4:af:c3:3e:24:f4:61:f7:cd:5b:87:8b:43:1d:
26:3c:15:20:2e:94:ed:d9:be:b5:34:ab:53:9f:85:82:ce:19:
56:c1:a9:be:6e:ec:1e:7a:ed:69:3d:b8:43:8c:19:2e:ba:5b:
ad:22:37:76:66:83:11:a5:66:75:ad:2e:46:8f:ee:18:ed:cc:
fd:92:da:e8:34:b7:00:e8:38:9e:9b:63:94:70:1a:23:0e:ed:
da:83:03:ec:c4:5c:01:19:27:cf:c2:67:83:6b:ea:4a:18:42:
d5:5a:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:43:41 2026 by rpki-client