Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: Q5Va2a8ZUr9O8/ulRV/Ezt2fxGOMmxBPWxoW9Dr1MkY=
Subject key identifier: BE:F2:45:8F:60:70:D7:DA:41:D7:BE:05:9D:6F:F8:35:6C:48:E8:A4
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019DCDF4BF39F01D37CBBF8A3C5A9D341D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 08:01:02 +0000
Manifest this update: Mon 27 Apr 2026 08:01:02 +0000
Manifest next update: Tue 28 Apr 2026 08:01:02 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: RvdUiFY43Eau9rY8c19lO3WxgeVLclOq+OaDmGhPqQk=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:bf:39:f0:1d:37:cb:bf:8a:3c:5a:9d:34:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Apr 27 08:01:02 2026 GMT
Not After : Apr 28 08:01:02 2026 GMT
Subject: CN=bef2458f6070d7da41d7be059d6ff8356c48e8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:27:90:15:12:8e:39:44:fb:9a:8e:b1:02:
90:c6:1f:c7:32:4b:1d:93:39:57:18:b2:68:35:cf:
00:b1:87:2a:7e:c2:67:5f:d3:78:14:23:e3:34:f3:
7a:d3:6b:f8:3a:88:81:f8:8e:39:c1:97:a5:e3:4a:
33:f9:05:a4:7e:48:dd:77:a1:39:bb:ec:cf:81:47:
be:e0:fd:ef:9a:42:00:73:56:46:48:a2:ae:21:e9:
70:ea:60:00:fd:e0:76:a9:a2:d6:30:d0:2e:66:cc:
47:c0:c4:c4:56:4d:46:22:c7:70:da:98:bb:ef:73:
6f:e4:a1:4b:c3:28:59:79:70:03:91:29:7b:33:d9:
f1:f4:74:dc:e9:21:91:30:9e:0f:5e:83:2c:31:e4:
68:de:67:f9:78:76:62:35:a8:8e:0c:a6:e4:b2:93:
21:d4:95:e6:52:55:11:26:a1:85:25:bc:44:00:aa:
3d:1e:a3:6c:07:26:f1:08:42:f9:07:d9:63:f9:14:
ed:ef:0c:26:8f:a1:59:7e:72:5b:5c:65:89:7b:7d:
6c:a7:9a:2d:42:d5:d4:ae:0f:da:51:bf:34:be:8c:
0d:f8:82:dd:89:a1:2b:c7:97:67:42:e8:b0:a1:32:
62:99:16:0b:a7:ac:18:b6:99:44:fb:b9:3e:6d:51:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:45:8F:60:70:D7:DA:41:D7:BE:05:9D:6F:F8:35:6C:48:E8:A4
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4f:c6:53:25:d7:ee:59:1f:fa:fb:68:c3:75:33:78:10:c6:
1e:48:15:f1:fe:f0:06:a5:7e:0d:5d:d5:d5:82:56:5a:8e:0d:
70:cd:00:a2:4e:8f:56:5e:dd:1b:6a:56:ff:55:fc:59:d7:47:
49:41:6e:45:53:f0:27:b1:53:8d:44:13:fd:6f:05:bb:8e:b1:
18:e7:65:4a:36:7d:8a:89:f6:ed:78:2c:cb:db:a3:d3:59:9a:
02:cb:8b:96:ba:28:29:df:1d:38:24:28:00:86:32:83:8f:51:
6e:ed:dc:bc:a5:6e:be:32:59:dd:c1:01:b1:04:31:34:64:9a:
c6:eb:87:01:33:96:c3:a5:20:f8:3d:c1:c5:9e:79:6a:a6:81:
6e:c6:14:b3:0a:e3:e7:01:8e:c7:ca:f8:f4:1b:17:47:7b:b9:
d2:41:cb:14:d8:78:3a:2a:da:11:d2:bf:20:1c:59:74:39:b5:
8e:a3:90:f6:b9:4f:e5:fd:3b:d7:19:d3:66:be:88:33:6c:93:
35:16:3d:d9:51:42:7c:55:3a:be:08:2b:97:43:05:c3:73:9a:
47:d4:c2:a3:84:c7:59:1f:3d:a0:55:a9:15:d0:01:a6:2f:c4:
3d:f0:20:b1:84:15:9a:a4:49:8f:b3:cb:c6:68:7a:9a:31:bf:
3c:07:ef:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3N9L858B03y7+KPFqdNB09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1
YzcxNGMwHhcNMjYwNDI3MDgwMTAyWhcNMjYwNDI4MDgwMTAyWjAzMTEwLwYDVQQD
EyhiZWYyNDU4ZjYwNzBkN2RhNDFkN2JlMDU5ZDZmZjgzNTZjNDhlOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQnkBUSjjlE+5qOsQKQxh/HMksd
kzlXGLJoNc8AsYcqfsJnX9N4FCPjNPN602v4OoiB+I45wZel40oz+QWkfkjdd6E5
u+zPgUe+4P3vmkIAc1ZGSKKuIelw6mAA/eB2qaLWMNAuZsxHwMTEVk1GIsdw2pi7
73Nv5KFLwyhZeXADkSl7M9nx9HTc6SGRMJ4PXoMsMeRo3mf5eHZiNaiODKbkspMh
1JXmUlURJqGFJbxEAKo9HqNsBybxCEL5B9lj+RTt7wwmj6FZfnJbXGWJe31sp5ot
QtXUrg/aUb80vowN+ILdiaErx5dnQuiwoTJimRYLp6wYtplE+7k+bVExVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7yRY9gcNfaQde+BZ1v+DVsSOikMB8GA1UdIwQY
MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt
ZmU0NDc3MmQ1YWUxLzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx
LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACU/GUyXX
7lkf+vtow3UzeBDGHkgV8f7wBqV+DV3V1YJWWo4NcM0Aok6PVl7dG2pW/1X8WddH
SUFuRVPwJ7FTjUQT/W8Fu46xGOdlSjZ9ion27Xgsy9uj01maAsuLlrooKd8dOCQo
AIYyg49Rbu3cvKVuvjJZ3cEBsQQxNGSaxuuHATOWw6Ug+D3BxZ55aqaBbsYUswrj
5wGOx8r49BsXR3u50kHLFNh4OiraEdK/IBxZdDm1jqOQ9rlP5f071xnTZr6IM2yT
NRY92VFCfFU6vggrl0MFw3OaR9TCo4THWR89oFWpFdABpi/EPfAgsYQVmqRJj7PL
xmh6mjG/PAfvZw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:09 2026 by rpki-client