Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: U3vPJa4eju+Kl0mwEUWjDOkoJBpOASj4R6F8iDwqA0s=
Subject key identifier: 0E:C6:8D:15:C4:6D:4B:56:EE:03:BA:E4:02:F9:3B:26:6F:A3:0A:0C
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019DCD4FA6A99416B68B3B82C7ECB53501F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 0932
Signing time: Mon 27 Apr 2026 05:00:42 +0000
Manifest this update: Mon 27 Apr 2026 05:00:42 +0000
Manifest next update: Tue 28 Apr 2026 05:00:42 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: pls72FvKDwVsZF7pv4qVc5iwaCbNYCwnOQ/hqaKaHms=)
2: iHVc-I0D4U1Te_vkxACKnVHK0pY.roa (hash: cq22r4Ne1D5UlvzndIcqY6BmHjQFUZ46sNNxAKWhDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:a6:a9:94:16:b6:8b:3b:82:c7:ec:b5:35:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Apr 27 05:00:42 2026 GMT
Not After : Apr 28 05:00:42 2026 GMT
Subject: CN=0ec68d15c46d4b56ee03bae402f93b266fa30a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:37:2b:49:65:ea:30:32:c8:5b:31:c1:b8:da:
7e:9e:3a:6d:0c:bb:47:75:22:a6:eb:6a:cc:13:da:
3c:5a:58:9f:41:08:a8:32:4a:a2:85:72:62:23:0e:
68:b5:80:78:de:86:18:a6:f3:61:36:61:57:6b:98:
c7:2b:7e:db:13:00:74:3d:49:3b:e1:11:27:ef:93:
64:2d:ec:f1:db:eb:05:b4:bb:02:3b:5d:6b:c3:dc:
19:52:f2:b8:40:94:27:8d:ba:78:62:21:35:b2:9c:
f8:78:12:1e:ab:95:a4:1d:8a:c3:f4:55:46:28:7f:
b2:2b:ac:13:b0:91:af:6d:bd:01:73:b1:b3:41:fa:
ae:ec:12:c7:e7:1a:b1:0a:7d:93:4a:da:ab:9b:28:
76:14:8d:0d:d2:86:fc:ad:c6:be:f3:f9:45:70:5e:
65:42:68:7c:18:1f:a7:f3:30:ee:ff:5c:5f:58:04:
eb:32:50:c7:fc:1f:32:0d:32:61:e0:d7:51:de:d1:
bc:4b:db:52:ee:ce:66:03:17:1a:6e:3d:86:59:63:
95:fa:43:ed:b3:ca:0b:e0:13:b2:f8:85:c7:8a:02:
15:69:dc:37:8f:38:ec:39:65:95:f9:23:cb:fe:5c:
df:e4:2d:d9:04:3d:cd:1a:78:d1:06:4d:fb:88:02:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:8D:15:C4:6D:4B:56:EE:03:BA:E4:02:F9:3B:26:6F:A3:0A:0C
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:04:71:3f:3e:f2:b2:51:7e:6f:ba:24:52:ea:95:96:7d:f2:
ae:a0:dd:94:13:9a:de:71:9b:4d:26:b9:25:f5:9e:3e:30:3a:
d2:a6:0d:db:f1:94:da:98:66:0e:8e:f3:a6:ba:fc:e3:80:cd:
30:8f:ba:b8:4b:55:a6:16:53:56:bd:d0:fa:d6:e1:a0:bc:3b:
ac:13:10:4f:c6:fd:25:51:40:8e:67:66:40:a6:c0:80:3d:5e:
a3:bd:61:21:6d:f9:54:98:e0:01:5e:bb:80:33:ad:06:bc:39:
3c:ee:2f:22:fe:e0:17:d6:bd:02:e1:56:fa:c2:57:8e:0c:53:
9e:dc:a3:97:78:e0:55:5e:84:b1:d1:ea:ea:10:c5:84:9e:f6:
35:a5:d3:c7:42:9b:59:e1:18:d9:23:76:52:f3:ea:f8:a6:85:
a2:11:18:bb:e8:86:dc:d1:87:85:fc:5c:d6:78:5e:31:da:d5:
37:5d:b3:9d:0a:aa:9f:00:e2:f6:01:af:db:f9:3a:e4:99:31:
b4:78:71:ab:ef:5c:3e:25:dd:ca:a2:b9:21:35:90:d1:f4:5e:
f5:b7:91:5e:b6:02:f2:0f:a0:a7:c8:9b:13:bd:2f:f8:58:ba:
cb:06:d9:78:6b:42:2a:4d:bb:70:4e:cd:de:70:d5:9c:cd:f1:
e7:84:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:27:50 2026 by rpki-client