Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: xL3/ESsxSMXBrm4tVkaELXaWE4af3ekdrq6SxP4VFjg=
Subject key identifier: 40:96:6E:73:07:64:77:B9:5D:95:28:95:BB:48:06:F1:C2:F1:DD:D1
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019DCED0A0B182AEF21AD47DD1250BC430EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 104B
Signing time: Mon 27 Apr 2026 12:01:12 +0000
Manifest this update: Mon 27 Apr 2026 12:01:12 +0000
Manifest next update: Tue 28 Apr 2026 12:01:12 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: Aw8pkdZdX/G7i+FR56CwS+1NwRvHdGXO2A3rlFY7oGc=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:a0:b1:82:ae:f2:1a:d4:7d:d1:25:0b:c4:30:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Apr 27 12:01:12 2026 GMT
Not After : Apr 28 12:01:12 2026 GMT
Subject: CN=40966e73076477b95d952895bb4806f1c2f1ddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:6f:57:f8:ad:fa:73:98:d1:90:1b:6c:06:
a0:f3:ad:6d:34:c1:82:8a:89:5a:3b:98:e8:2e:3f:
a9:c1:db:37:2c:ec:c3:e7:df:73:16:d5:7e:b6:0a:
a6:c0:7b:ea:1b:96:22:5f:09:37:e4:5c:cb:28:f3:
fb:e6:10:77:b2:5e:75:a6:d9:c2:66:68:0f:09:9b:
37:24:cc:70:4b:f7:6a:f0:fd:0b:e4:8d:1d:5d:dc:
41:cc:68:0e:71:9f:d6:11:98:de:ca:9e:49:bc:9b:
40:8a:c7:e0:22:7d:10:ec:51:80:b3:30:42:ff:6a:
fb:e9:c0:de:51:45:e7:89:84:9a:04:68:6e:5d:ab:
46:56:22:85:29:b1:29:2f:73:3f:6e:02:cf:58:93:
42:6c:c6:5d:6a:6f:1e:96:75:34:8f:91:8a:07:43:
a8:1d:de:a6:af:89:e5:64:16:79:8c:01:0f:2d:38:
00:3f:58:ff:e3:b8:98:b1:99:3c:ca:e6:0a:27:05:
0e:5b:d5:9d:fe:fb:b1:4d:30:ef:60:ca:f1:c9:5a:
ad:1a:d1:b2:49:83:e3:6a:0f:86:32:de:a6:e6:88:
d1:06:e1:f1:c3:d3:7c:4b:14:e5:c9:32:14:d1:d9:
40:96:76:e5:a3:8e:79:21:2b:7b:06:8e:52:ae:94:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:6E:73:07:64:77:B9:5D:95:28:95:BB:48:06:F1:C2:F1:DD:D1
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cd:75:2a:f1:17:b8:05:e7:1c:1b:52:2a:5f:09:c4:86:99:
9e:34:b0:26:cb:b7:6e:e9:1f:f2:36:b0:c9:f2:95:bd:6d:19:
bc:62:d5:1a:f6:bd:d6:10:62:10:24:6e:90:a8:9f:e9:01:94:
26:e2:54:2d:32:b8:56:d0:57:00:59:ea:93:01:41:12:70:50:
8a:cd:6f:34:bf:b0:6e:17:2d:ed:7b:80:11:6a:e5:93:2e:5b:
35:83:45:bf:47:eb:af:58:2c:0e:ad:6b:a4:a4:fe:c4:17:88:
83:b6:73:b6:ed:c6:69:8b:c0:ba:6c:b5:d9:d6:a9:d0:1e:35:
9f:2d:6b:21:77:5f:63:e1:8d:79:f7:7b:a4:cf:20:be:5f:12:
c5:58:23:e3:40:c3:f7:9e:4c:4b:d7:5f:70:ec:37:45:53:d3:
98:50:ff:02:a9:8e:a3:35:27:58:1f:f9:72:30:db:cd:3c:4f:
04:ae:54:c4:b5:b7:9c:54:38:cc:7c:d4:79:69:df:e5:cf:51:
bc:c1:6e:5c:3d:53:02:3a:0b:99:19:b1:fd:b2:e3:5e:5e:90:
6c:03:82:4f:c1:39:a2:72:03:6c:98:79:01:9d:20:43:dc:85:
28:da:dd:01:16:88:c7:33:55:52:6f:bd:71:79:d3:c5:94:f7:
e4:c2:db:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0KCxgq7yGtR90SULxDDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjYwNDI3MTIwMTEyWhcNMjYwNDI4MTIwMTEyWjAzMTEwLwYDVQQD
Eyg0MDk2NmU3MzA3NjQ3N2I5NWQ5NTI4OTViYjQ4MDZmMWMyZjFkZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4dvV/it+nOY0ZAbbAag861tNMGC
iolaO5joLj+pwds3LOzD599zFtV+tgqmwHvqG5YiXwk35FzLKPP75hB3sl51ptnC
ZmgPCZs3JMxwS/dq8P0L5I0dXdxBzGgOcZ/WEZjeyp5JvJtAisfgIn0Q7FGAszBC
/2r76cDeUUXniYSaBGhuXatGViKFKbEpL3M/bgLPWJNCbMZdam8elnU0j5GKB0Oo
Hd6mr4nlZBZ5jAEPLTgAP1j/47iYsZk8yuYKJwUOW9Wd/vuxTTDvYMrxyVqtGtGy
SYPjag+GMt6m5ojRBuHxw9N8SxTlyTIU0dlAlnblo455ISt7Bo5SrpQq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECWbnMHZHe5XZUolbtIBvHC8d3RMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs11KvEX
uAXnHBtSKl8JxIaZnjSwJsu3bukf8jawyfKVvW0ZvGLVGva91hBiECRukKif6QGU
JuJULTK4VtBXAFnqkwFBEnBQis1vNL+wbhct7XuAEWrlky5bNYNFv0frr1gsDq1r
pKT+xBeIg7Zztu3GaYvAumy12dap0B41ny1rIXdfY+GNefd7pM8gvl8SxVgj40DD
955MS9dfcOw3RVPTmFD/AqmOozUnWB/5cjDbzTxPBK5UxLW3nFQ4zHzUeWnf5c9R
vMFuXD1TAjoLmRmx/bLjXl6QbAOCT8E5onIDbJh5AZ0gQ9yFKNrdARaIxzNVUm+9
cXnTxZT35MLbCw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:30 2026 by rpki-client