Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: JEOm1D8z6r1gor0BudY41oqQW9bSwiNVeHAfK1PVkfA=
Subject key identifier: 0C:50:95:87:89:E8:B7:DD:56:F9:96:F8:51:BE:C7:F3:07:46:4B:67
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019D8BA6C45E1D61D83C50D4C60EBE1F78EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 18BC
Signing time: Tue 14 Apr 2026 11:00:55 +0000
Manifest this update: Tue 14 Apr 2026 11:00:55 +0000
Manifest next update: Wed 15 Apr 2026 11:00:55 +0000
Files and hashes: 1: 1wC70OGBB84YZ8LzzI7GRE1FXLw.roa (hash: 61O42HPTbjFtxU4oF7cNiKUH0sHQufjgX2XI1LEtyCM=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: HsMPYgsNDRTlWwWyEbZt8kNokwA11UCmUequsd3kLlY=)
3: YVZ-GH3S7Iq0JxeBAHpFVD2_Lx4.roa (hash: kM6UtuYisVsArbzf8eESDr1kRHymSG53rA/gBdAULqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:a6:c4:5e:1d:61:d8:3c:50:d4:c6:0e:be:1f:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 14 11:00:55 2026 GMT
Not After : Apr 15 11:00:55 2026 GMT
Subject: CN=0c50958789e8b7dd56f996f851bec7f307464b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:6a:c3:cc:5d:3b:2e:e0:73:e3:e0:5f:23:
0e:28:e1:ca:3e:51:0c:b7:1c:0e:66:e0:9f:49:d6:
7c:74:84:04:5b:91:8c:5d:69:25:48:ad:1b:b1:d5:
0b:09:97:fb:e8:3d:ba:8f:78:f0:64:94:d8:d6:e7:
c2:51:04:f0:e7:47:e8:8f:95:77:af:73:21:60:9a:
99:43:cd:8f:3b:7f:ff:13:ce:86:bf:80:0b:d5:6e:
5a:79:2e:63:5f:5d:08:44:cc:a6:d4:ce:36:30:a0:
e3:99:db:09:6c:e6:60:53:9d:3a:fa:6c:6d:a3:8a:
ba:2e:65:0e:4b:f1:62:6e:1f:4d:28:e5:21:bb:80:
b0:69:60:24:4f:18:07:e0:0a:15:8c:6c:6b:d9:bc:
91:1a:c2:f8:98:bc:36:81:bb:48:31:01:8e:3f:df:
ad:c9:d9:d5:1e:5c:5c:15:03:35:46:df:02:e3:c0:
b5:83:af:ee:91:d3:f2:2c:92:cf:56:39:4f:39:a6:
05:c8:60:49:99:33:d4:9b:d7:f3:c5:5a:34:ad:59:
43:61:18:d3:ea:e7:60:01:69:1f:d6:93:78:1a:65:
3f:22:b5:5a:19:25:22:69:ec:3a:da:1e:81:b4:7b:
51:e0:43:2f:fc:ff:62:aa:94:71:5b:53:2f:6c:b9:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:50:95:87:89:E8:B7:DD:56:F9:96:F8:51:BE:C7:F3:07:46:4B:67
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:70:a2:20:8f:6a:c0:93:66:d4:8b:cb:9f:be:9d:e4:af:
d5:91:74:a6:b5:f1:f7:cc:78:82:96:0f:83:90:dd:32:c5:67:
1c:75:17:cd:8b:47:22:74:00:b3:6e:78:4d:94:fb:60:7f:fd:
37:af:41:6e:da:91:4e:2a:90:55:aa:84:5d:eb:0c:93:e1:58:
d5:b1:7a:b0:ec:46:91:8f:97:17:8d:dc:56:26:2a:1e:74:93:
7d:72:d1:2e:d9:0f:7f:8a:cb:4c:be:7e:fb:c5:34:a6:19:cf:
61:3b:b3:3f:f6:3a:02:e1:b5:80:c8:9b:d5:d9:02:34:e3:9a:
b0:95:8c:25:0f:f5:92:7b:06:b4:dc:de:a7:72:31:0c:cb:f0:
3e:19:b6:c9:55:29:bb:dd:e4:06:4b:20:95:e1:cd:e2:27:0f:
cd:51:00:25:22:63:f9:57:0b:c2:c2:87:1c:1a:79:d7:58:ff:
4c:b9:89:d0:bf:93:7b:01:82:a7:a2:de:e1:d1:9c:37:e6:34:
62:ee:a3:ab:0c:dc:f1:5f:27:78:5c:bc:bb:ec:0b:cf:15:94:
cc:5c:ae:ac:c8:d9:0f:bb:e1:17:ed:fc:95:3c:a3:8b:d4:88:
b0:a8:6c:84:67:17:72:41:bc:de:ee:a3:8a:9e:17:82:91:71:
ff:a8:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 18:40:21 2026 by rpki-client