Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json)
Hash identifier: kpTtizgeISDfRdEYMBnmgnKg5rRDizzF3fqLJ1Vrz5k=
Subject key identifier: A6:00:CA:DC:4C:F6:CD:A5:3D:47:02:6B:5D:A3:B2:4D:7E:E4:BE:78
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019DCDF587201FFAC3D72AD1FD80BD5633EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
Manifest number: BD
Signing time: Mon 27 Apr 2026 08:01:53 +0000
Manifest this update: Mon 27 Apr 2026 08:01:53 +0000
Manifest next update: Tue 28 Apr 2026 08:01:53 +0000
Files and hashes: 1: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: HvwtyAGKyR7OIe9rHKH19AwFemD7QvcCS9Xwl0cfWuU=)
2: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=)
3: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=)
4: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:87:20:1f:fa:c3:d7:2a:d1:fd:80:bd:56:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Apr 27 08:01:53 2026 GMT
Not After : Apr 28 08:01:53 2026 GMT
Subject: CN=a600cadc4cf6cda53d47026b5da3b24d7ee4be78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:04:1a:3e:b7:04:89:64:f4:08:45:0d:8a:
e1:f7:d9:e2:fb:06:ae:b4:7f:79:e5:34:b0:22:f3:
eb:05:da:98:95:c1:7a:49:40:c1:f6:52:9b:e9:00:
ad:c2:4b:54:de:00:3f:f5:9e:39:1b:eb:53:b4:e2:
70:aa:29:2d:f0:9c:51:56:fe:0d:65:61:94:b8:b3:
b4:01:86:3d:25:94:2f:ca:13:e2:99:d1:e6:55:e6:
ea:07:ab:47:47:b4:d0:aa:56:54:cf:18:96:ca:8a:
a7:c3:db:8d:cc:e6:61:e7:d0:db:b7:35:3f:fb:55:
82:5a:3a:65:a3:0a:4e:d8:55:55:47:1e:30:35:ad:
04:df:22:45:26:c6:d6:97:87:32:3a:48:09:c7:d0:
fe:a6:77:6d:86:c9:e0:32:71:c0:0d:90:af:a6:63:
de:d3:b9:e0:07:4e:8a:6d:3e:21:50:7c:80:c4:9b:
24:05:72:bc:02:c9:da:46:26:2c:ea:32:90:c0:cc:
5f:89:2d:37:7c:d0:68:74:2b:b6:ac:89:3f:64:41:
3c:65:39:2b:0a:c7:51:50:9b:b6:ad:30:2c:35:5e:
d8:e9:a4:92:a9:c7:ed:b7:1d:72:e0:fb:8a:e0:36:
74:40:d1:0b:be:6e:40:58:5a:3f:27:65:b2:da:12:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:00:CA:DC:4C:F6:CD:A5:3D:47:02:6B:5D:A3:B2:4D:7E:E4:BE:78
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:3a:ca:7b:da:d8:7c:9b:71:82:8b:72:87:3c:12:51:9c:
04:e7:82:81:c1:2c:aa:e4:46:02:81:40:a6:55:9e:42:ef:c9:
31:23:ae:18:40:2f:6a:db:db:31:fe:be:ec:48:bf:e6:7a:29:
61:bb:8b:4a:f4:7a:ba:e4:30:e4:d2:74:64:8c:3e:6b:20:b7:
e3:83:54:17:11:f3:e6:13:d4:82:ac:8e:27:4c:76:35:e4:4e:
c1:bb:4a:f1:6d:1d:62:e7:2c:ae:ab:8d:c3:8b:45:4b:fc:6e:
aa:0d:7a:a0:00:98:48:d1:4d:0d:aa:8f:4d:95:0e:b3:11:18:
4d:67:4a:15:87:25:50:96:6d:e1:1d:ed:51:bf:d0:3b:b2:70:
ed:0f:36:be:ea:58:23:dc:a8:fc:42:43:9a:97:2a:06:c3:27:
2a:7f:d3:f3:e2:41:a4:f1:86:4d:bd:77:61:27:9d:81:e9:b5:
ff:a9:2e:a5:21:70:30:39:cf:83:de:fd:78:88:76:3d:47:d5:
04:af:a9:6b:3d:b5:c7:cd:79:43:1e:dc:c1:c2:89:6f:1d:c2:
ea:3a:ac:d0:b0:69:20:24:fc:e8:ac:62:ee:14:77:7e:68:4b:
49:d1:ef:8a:87:6b:7b:90:bd:8f:7e:11:0f:bc:aa:95:dc:7e:
71:b6:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:05 2026 by rpki-client