Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: R/qfzw4cDPhPxFgPWi8slYrLOz9RjeMPV1C+4aj1iV0=
Subject key identifier: D8:BC:4D:4B:02:D1:AF:0C:5E:1E:EA:7A:57:95:1B:29:6F:31:CD:3D
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019DCE2BC7DC6A3DAE7AAD6D5ED8B5129C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 8A
Signing time: Mon 27 Apr 2026 09:01:08 +0000
Manifest this update: Mon 27 Apr 2026 09:01:08 +0000
Manifest next update: Tue 28 Apr 2026 09:01:08 +0000
Files and hashes: 1: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: GBy503ESYymyUzsRBsw/djeeDSvMzYT0UbeX4wEjCm4=)
2: cEhdSETnWKK4jrdkC6FnzE635Q4.asa (hash: bWN8e6H8xy6wbC86M9g/MXHvY7mj1QVH0ZniAmaPgBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:c7:dc:6a:3d:ae:7a:ad:6d:5e:d8:b5:12:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Apr 27 09:01:08 2026 GMT
Not After : Apr 28 09:01:08 2026 GMT
Subject: CN=d8bc4d4b02d1af0c5e1eea7a57951b296f31cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:71:64:be:15:40:aa:0b:4b:99:d8:f0:fa:
57:b5:6a:1f:f6:96:5d:d7:2d:f4:2b:67:38:98:f6:
65:fa:9c:53:77:c4:4d:9a:7e:2c:98:4a:17:c5:09:
e7:74:e3:37:30:84:d5:5d:a7:33:40:d4:48:12:3e:
b2:f6:56:18:ed:d9:23:22:2f:c2:50:e7:41:ce:84:
ca:e1:34:f1:01:04:a1:7f:53:ae:2a:1a:00:72:fb:
19:dd:ed:11:19:80:7e:b2:14:af:b5:96:03:c2:bf:
a1:c7:3b:0f:c4:e2:7b:6e:0e:6a:84:3e:64:f2:24:
b4:c0:22:45:8b:ec:94:41:9f:fa:7b:78:24:6d:44:
74:9c:f9:14:85:c6:46:e8:09:4e:d4:af:cd:5e:b4:
05:f4:56:8c:82:c2:3f:b7:ac:84:09:f4:c6:e8:63:
d1:4a:96:14:b6:cb:62:95:42:2e:93:8a:ae:89:89:
89:7f:da:e5:4a:90:6c:de:e2:79:2e:84:e1:b1:21:
b0:2d:6a:8c:2e:d9:51:77:fa:3e:7f:40:87:c0:94:
ee:05:a9:19:cc:82:e7:00:f1:11:8a:ce:4e:0f:c8:
ae:46:4f:82:bf:e0:b5:89:25:3a:ad:45:f3:d2:2e:
3a:bf:5f:5f:27:51:81:60:ed:30:e2:e6:7e:77:2b:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:4D:4B:02:D1:AF:0C:5E:1E:EA:7A:57:95:1B:29:6F:31:CD:3D
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:62:a1:bb:c9:ed:18:3e:08:49:2e:e6:9d:b1:87:93:bb:f4:
7b:d9:8f:6f:60:55:2a:a7:67:d9:f2:85:ef:5c:9f:42:9b:bb:
73:ca:53:77:91:b2:61:39:99:96:ff:46:37:45:14:84:1b:5a:
1d:e9:d4:72:a0:84:50:25:45:9d:01:f8:27:c9:86:59:f0:5e:
35:61:4e:83:95:17:2c:46:ce:54:54:5f:ec:e9:83:8c:34:d2:
b8:00:80:aa:c6:cb:55:eb:e4:f6:f7:3d:7b:e0:ec:70:54:6b:
d6:fe:ad:20:71:33:92:4a:1f:e6:8b:65:ca:da:f7:1a:a0:88:
46:d4:62:e1:31:ff:17:f7:98:b4:5a:3a:c5:d3:38:be:a5:a7:
e9:74:29:ca:c6:04:ac:4b:fd:7a:97:b8:d3:10:ee:82:55:7a:
8e:40:49:4b:31:2c:db:bb:ed:71:8d:0d:08:27:d9:91:50:ed:
a0:c7:17:2b:dd:45:54:c6:92:48:9e:c8:7c:e7:d5:36:6f:44:
ad:26:84:f5:c5:71:e3:14:87:e2:33:ed:46:05:64:6d:f2:b8:
ef:1e:fd:c9:de:39:6d:da:34:e7:55:c4:ad:07:13:6b:56:ef:
de:6c:bc:06:79:65:e2:ce:53:0a:5a:88:c0:cc:44:77:87:5c:
32:0c:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:54 2026 by rpki-client