Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: Eb+CvqaR2b+YCpVPzSuXzQrSF23I/C4YtHyKFSkzTfI=
Subject key identifier: DF:9C:A3:F0:18:B1:11:09:5B:8D:64:E1:7A:DD:33:CB:20:82:D3:28
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019DD0F5B2037DE0F50B271A2CB19EC03371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 12C8
Signing time: Mon 27 Apr 2026 22:00:55 +0000
Manifest this update: Mon 27 Apr 2026 22:00:55 +0000
Manifest next update: Tue 28 Apr 2026 22:00:55 +0000
Files and hashes: 1: ZozBgriq6kWUkB3EEMv0zuDMpg0.roa (hash: TLlTKsaLK/1ufozvAabU7oKR7zYU0p22HLkLEedOcsQ=)
2: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: +W+Os3xH4oI/s+miJdXRMSSggpA8tt7Z6IIN6VLa+pQ=)
3: nhHCyeQqh6mJ2bYlu-BdXtbSr2g.roa (hash: 6UCtegtaLhqm785oV+vRV6CeZ4+1/GyKLgr46mrjl8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:b2:03:7d:e0:f5:0b:27:1a:2c:b1:9e:c0:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Apr 27 22:00:55 2026 GMT
Not After : Apr 28 22:00:55 2026 GMT
Subject: CN=df9ca3f018b111095b8d64e17add33cb2082d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:f3:3e:71:a8:bd:ad:fc:38:2b:5a:d6:10:
9a:02:68:a5:8e:17:3c:97:28:7d:ff:cd:1f:13:cc:
31:72:8f:08:5d:43:49:c7:44:6c:f5:85:eb:4f:8e:
58:06:3e:f2:98:99:bb:7e:a1:18:34:89:9e:1a:3a:
3e:2e:a5:0a:e1:57:f9:a7:fa:32:0c:f8:f9:f6:78:
ec:c1:34:4a:a2:8c:0d:9a:5a:ea:8e:d4:97:dc:36:
de:2e:36:a7:92:ca:96:7f:19:07:1e:83:b6:89:45:
e9:36:d7:3c:3b:6b:93:44:bf:7e:92:b6:b4:c6:77:
bd:00:b1:f1:2c:3b:e0:d0:06:b1:e0:40:24:d1:cd:
9d:58:e7:4a:00:15:ef:31:74:9f:dd:1c:bf:ac:f9:
19:9f:64:e3:0e:53:2f:de:d3:cd:05:2b:4e:04:32:
03:94:2d:34:d8:05:ec:5f:2a:63:90:14:a1:2c:cf:
c6:95:6e:69:11:80:93:21:f4:90:62:c4:f1:e1:b8:
d8:d5:07:4f:da:81:85:50:2a:4a:94:67:ea:b8:4c:
cf:6b:4c:ee:10:22:39:2c:f2:0b:f4:4e:3c:5a:63:
3e:21:f0:66:74:da:aa:f3:20:b9:ba:74:8d:16:21:
2d:ef:24:31:68:31:79:d2:5e:48:06:e1:99:00:ce:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9C:A3:F0:18:B1:11:09:5B:8D:64:E1:7A:DD:33:CB:20:82:D3:28
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:72:95:64:df:e5:6f:cb:f2:49:3d:17:33:58:b5:2c:6c:
9e:30:4e:2c:07:9c:75:aa:3e:69:b6:73:29:17:db:b5:5b:29:
ac:10:e6:3e:2e:c3:0f:49:4a:76:8e:60:34:28:b1:59:9b:8c:
7d:82:98:00:9e:ed:67:61:7c:a3:67:f1:90:04:8c:43:01:75:
bd:76:0b:ea:cc:6c:45:1f:38:e9:5c:b8:03:b4:e7:cf:3d:b1:
e1:50:2a:6b:56:5b:cf:22:e5:8e:ee:17:da:ad:26:86:59:15:
1b:6c:69:07:6f:67:9a:e8:13:2f:6a:79:92:cd:65:10:90:ca:
0b:d9:84:bf:41:41:ff:a5:e1:45:22:2e:83:23:a3:01:ce:31:
63:c9:85:e9:9a:6b:9d:8c:bc:c7:9f:9a:d6:f3:34:f0:4d:e4:
72:82:c2:bd:d5:bd:c0:3b:80:b7:fc:f8:14:b5:8c:8a:77:c2:
34:23:f1:db:29:3b:9a:0b:9f:1e:58:24:a9:54:cf:7d:56:0f:
9a:e0:1e:c1:42:42:24:28:bb:6c:7f:a0:be:99:6e:26:57:fc:
24:d3:41:81:1a:2f:07:2e:9d:aa:40:49:c0:9d:5d:d6:19:34:
71:da:11:d6:2c:4e:03:ec:16:27:f1:92:ee:a7:33:ee:d8:dc:
60:3e:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:48:11 2026 by rpki-client