Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: AReFLh7RjXMqG2ZYiFRmBxDPJVG1mc0AgGNtzVNV7UU=
Subject key identifier: 2E:A3:40:6E:39:E7:0F:CF:96:29:04:50:04:4F:64:20:C0:CD:DE:6B
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 019DD19AE976E2CF79F2825AC31B2857D560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 1245
Signing time: Tue 28 Apr 2026 01:01:23 +0000
Manifest this update: Tue 28 Apr 2026 01:01:23 +0000
Manifest next update: Wed 29 Apr 2026 01:01:23 +0000
Files and hashes: 1: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: vao3tHrdve/I5ALryyKmsVibX8KUe4p/O6yTtm9JIpg=)
2: n4jCcgfnjIRQBuc83E5OKmqoWsg.roa (hash: VbvW5BuZ6bctb7kCqPvJChCxCthWd5ZrUCoerfivWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:e9:76:e2:cf:79:f2:82:5a:c3:1b:28:57:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Apr 28 01:01:23 2026 GMT
Not After : Apr 29 01:01:23 2026 GMT
Subject: CN=2ea3406e39e70fcf96290450044f6420c0cdde6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:76:d2:f1:6c:3e:e2:e5:ed:47:1a:0d:ca:
97:5d:56:39:6a:48:d0:9c:62:df:f0:3b:65:80:0d:
b0:5c:56:e3:69:59:76:8d:c0:d0:d8:e9:c9:44:68:
6e:56:2f:9c:7e:1f:98:af:eb:33:fa:7c:bc:50:2a:
3d:eb:6d:65:6e:7a:14:9b:08:95:f7:0b:d6:19:ab:
f8:2f:fb:19:31:b9:e6:1c:8b:77:23:6d:8d:46:3b:
8d:c3:6c:03:2e:b2:8d:d7:69:b2:d3:10:e0:b8:78:
3b:86:e1:9f:e1:fe:c8:ce:08:9c:52:da:46:6b:a5:
bd:30:3e:71:bb:1a:ea:df:1d:97:f1:53:63:03:e8:
18:c0:f6:08:7e:6d:10:19:45:78:18:d9:b7:fb:1f:
b2:7a:b0:e2:9a:2e:78:09:d9:fa:78:5f:dc:7a:ac:
d0:b6:a7:bd:e1:1d:80:f8:bb:a0:c6:31:1e:9e:81:
24:83:bf:7f:13:a2:73:21:fe:18:77:17:0e:63:2d:
6a:20:f5:ad:7c:d5:47:cd:10:c9:00:6f:85:71:0b:
95:5a:91:ce:a9:4a:2e:3e:a3:3a:d8:e4:a1:34:cc:
ef:bc:5b:da:6d:0d:4b:9c:df:d1:fc:b8:e0:ff:9d:
51:92:1f:a8:4f:23:b7:bb:3d:d8:b7:6c:5d:e8:3d:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:40:6E:39:E7:0F:CF:96:29:04:50:04:4F:64:20:C0:CD:DE:6B
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:26:34:54:52:84:57:ac:dd:22:cc:0c:5d:54:fb:38:9d:41:
57:6f:83:75:53:f8:30:25:d4:55:bc:59:10:bf:8b:59:05:29:
7a:1f:92:bb:55:fd:e8:4b:90:32:83:c6:a8:33:c1:33:b9:7e:
0d:36:fc:34:66:23:78:d7:99:ad:7f:ee:50:1f:90:29:c8:a2:
73:34:d7:65:77:ca:fb:23:40:84:22:07:b9:c4:32:35:2c:0a:
37:6c:44:3a:d9:bf:32:94:e3:3c:47:a2:f1:ba:19:ee:49:4e:
fa:4a:25:8f:ba:74:b4:75:cd:5f:90:a2:ab:f6:ea:ef:47:15:
23:af:d0:f3:e1:c9:8a:9b:a9:77:b4:6c:7b:c1:4a:b9:45:3c:
f6:48:fb:d3:9d:2a:80:db:3f:14:77:71:aa:b4:50:19:d7:51:
0a:02:01:77:ab:1e:36:d3:fd:f7:ca:d6:0e:9c:55:03:f9:41:
66:7a:d3:0c:3d:42:ac:0a:59:30:03:ce:17:af:64:7f:2e:88:
d7:11:e1:5c:8d:d1:c6:d5:07:c1:01:53:ec:2f:9e:37:94:e4:
b2:ad:67:6a:f8:73:09:46:03:1d:f2:d2:1f:47:0d:35:3a:6a:
59:4c:a0:c0:03:95:83:ff:33:d9:33:30:b3:1e:fb:c6:3a:11:
23:2e:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:31:01 2026 by rpki-client