Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: ShshYmQQ79F4P2LhHmcl0PVkG3ObegI0IDcakRWN5yY=
Subject key identifier: 05:31:BE:07:AF:0C:09:85:07:5D:5D:91:C0:20:5D:21:C0:57:0E:53
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019DD01A07167ADA60ED8BC2E5A47CEA50A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 085D
Signing time: Mon 27 Apr 2026 18:00:59 +0000
Manifest this update: Mon 27 Apr 2026 18:00:59 +0000
Manifest next update: Tue 28 Apr 2026 18:00:59 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: NEWrKsjBg/oevnBY2cFq7iV4L1ultxhxNAWYnY2c0j8=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:07:16:7a:da:60:ed:8b:c2:e5:a4:7c:ea:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Apr 27 18:00:59 2026 GMT
Not After : Apr 28 18:00:59 2026 GMT
Subject: CN=0531be07af0c0985075d5d91c0205d21c0570e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:3a:55:0d:91:53:b0:fb:60:22:a1:20:65:
8f:4c:c2:d7:5f:70:01:0e:b8:73:a6:d1:40:63:46:
7b:74:11:7a:c3:7a:32:01:60:97:69:8a:59:86:41:
3d:b0:39:0d:e2:23:a9:a1:f4:31:bc:8a:bb:9a:8e:
e1:ec:7a:87:4c:50:40:77:b5:32:c6:53:f3:c9:b3:
a2:27:77:e9:f3:ab:a7:8f:99:34:60:f5:59:54:a2:
85:08:42:83:ec:94:75:52:ca:8d:27:b8:ce:ac:83:
32:34:87:8e:dc:8a:86:03:c4:7c:0c:e7:93:87:6d:
e3:1a:8d:ce:36:be:a0:90:83:30:61:30:c2:33:2c:
06:51:9c:4a:75:8f:1a:05:04:57:b0:55:ac:6d:5a:
e9:ed:45:0b:21:15:98:0e:3c:c3:ea:26:c5:26:ed:
62:ee:16:2a:79:33:6d:d1:7f:78:f3:f1:6a:e8:57:
a0:68:f7:be:f3:66:ca:3f:c1:40:52:8a:82:5f:bd:
17:93:ca:db:9d:84:f8:4a:48:97:fa:16:dc:22:c7:
19:d6:29:81:6b:1a:2a:5c:6b:3c:4f:6a:b0:90:98:
06:24:c7:97:ca:87:27:03:4e:94:d0:0a:4a:59:52:
f7:16:7e:b2:e0:32:44:08:c7:01:07:cb:36:28:34:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:BE:07:AF:0C:09:85:07:5D:5D:91:C0:20:5D:21:C0:57:0E:53
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:71:a4:37:b8:8c:6c:93:45:2d:cc:2d:7b:48:61:30:85:88:
4e:d9:16:9d:15:83:75:62:67:f4:a8:f6:4b:c1:f9:03:85:a4:
ff:1f:64:f8:0c:b4:fe:66:ac:16:ec:e2:c3:3e:d6:21:7f:86:
d4:3b:85:50:3f:06:01:58:56:34:76:5c:24:54:2b:9f:07:b7:
e0:61:c7:5d:a0:d4:6c:0a:71:da:40:98:a9:54:66:02:74:20:
88:be:b5:0b:ac:8e:a4:0b:d5:46:46:06:08:51:aa:56:99:26:
6c:18:94:76:db:5a:a6:8b:87:66:b0:d3:b2:f8:17:23:a9:f6:
2f:19:8c:ac:d4:05:cf:3a:f9:6f:26:14:0d:aa:71:d7:e8:1e:
59:68:f3:06:a3:28:01:47:c9:90:75:83:ff:8f:55:10:6a:3f:
c2:31:64:c4:04:12:79:c1:c7:f2:76:f3:23:8b:af:3d:ca:4f:
cf:fa:4b:fb:b7:0a:7b:0e:32:df:40:20:26:7d:c6:01:a1:2c:
7b:d3:90:82:75:1a:35:b4:84:76:ca:01:f4:36:50:00:1a:60:
ee:37:f5:ea:ea:70:45:c4:b0:ad:2b:00:e1:d5:20:d4:f2:e5:
cf:96:16:dc:e9:cf:2a:b5:b3:7a:f3:fd:f6:cf:3b:8a:42:9b:
84:81:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:42 2026 by rpki-client