Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier: TdswdvQaD/hGsnqMA0wvoeta1JrMY8eWatStFu8xPII=
Subject key identifier: 3B:C7:E1:0B:2F:EB:76:44:6F:2C:D1:56:B4:70:51:0A:C5:75:8C:C1
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 019DCED0191EC967E9EFC443054608CC6C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number: 18F1
Signing time: Mon 27 Apr 2026 12:00:37 +0000
Manifest this update: Mon 27 Apr 2026 12:00:37 +0000
Manifest next update: Tue 28 Apr 2026 12:00:37 +0000
Files and hashes: 1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=)
2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: 8AM4ZIqHy1lYxcy41AGqTZDvVHjgZufqiF8Z4qCX1/A=)
3: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=)
4: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=)
5: u9ivcp0Mnia0HnQ0D4IzKd6ABQI.roa (hash: 7vFIT7RVuGNWtyZo6py9uIoAR5B/gd1YarQbs2RvWTM=)
6: ue1ofATco1WyASgglUMXvaTcbAA.roa (hash: 7NG4eNgD3uRpxbInL8ONmLKALYMO6RfhX+P8iMxG0cg=)
7: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:19:1e:c9:67:e9:ef:c4:43:05:46:08:cc:6c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Apr 27 12:00:37 2026 GMT
Not After : Apr 28 12:00:37 2026 GMT
Subject: CN=3bc7e10b2feb76446f2cd156b470510ac5758cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:e7:64:63:9e:8f:33:e2:67:43:37:20:4a:
6a:e0:22:99:9f:57:73:37:17:d3:a7:a3:33:37:d9:
be:20:79:ae:d2:94:49:08:06:16:a1:e0:70:eb:97:
f8:c0:2e:c2:ed:56:73:8a:b7:73:5f:ac:fe:ab:c9:
fe:3b:b2:0c:9c:30:9a:ed:36:a8:22:24:cf:92:06:
7a:6f:9b:04:0c:7c:e1:df:f5:30:7d:15:ef:ca:bb:
be:e7:6e:54:e3:30:c0:26:9a:d6:b7:c6:83:38:5c:
86:cc:55:75:57:70:a5:1f:ac:10:04:98:a7:d9:cc:
3e:48:96:df:18:1e:d5:13:00:ce:d4:a4:c9:81:98:
6f:17:4e:aa:2f:b9:31:30:b7:d3:34:04:bc:da:0c:
22:3f:0b:ea:e4:5c:9d:09:fc:cf:90:cf:94:84:c3:
5c:ba:74:1a:a0:45:d3:e9:c5:9b:5a:ac:1d:ba:44:
e2:ca:f1:f9:49:91:0f:24:b7:4a:74:a6:e9:3f:45:
3d:c3:62:bb:8d:66:ef:b2:ac:dc:f7:81:3d:c8:53:
e4:4c:d1:f7:5f:56:17:82:35:65:8f:af:22:85:19:
e1:91:64:52:5d:9b:d3:49:88:9c:d2:22:19:f7:86:
f2:26:01:8f:d4:60:fd:6a:73:54:87:b7:7c:a0:2b:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:E1:0B:2F:EB:76:44:6F:2C:D1:56:B4:70:51:0A:C5:75:8C:C1
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:a6:81:78:3d:cb:e1:db:3f:c6:7a:98:7e:ef:ab:47:10:
ff:3c:c5:76:0c:db:cd:5f:65:1a:cf:30:e8:38:19:8c:cf:bf:
04:17:e0:e0:38:98:b8:4e:45:f9:71:76:84:b8:87:dc:86:89:
95:af:2c:5a:2e:b0:db:c8:57:c9:82:de:32:ec:d6:7b:31:77:
88:dc:a2:b6:a9:4f:7a:b9:5f:b4:71:25:82:7e:0f:ea:31:5b:
44:48:01:89:ef:19:88:eb:d3:0e:1f:44:9c:14:ab:f8:27:e6:
7c:9a:f7:b3:2f:15:81:91:d3:69:fe:6d:ed:99:9c:ae:87:4c:
bc:ee:00:96:2c:b9:80:e4:43:34:72:68:70:aa:f4:0d:54:cb:
0e:e3:79:da:b7:d2:3c:a1:da:cc:69:ef:c3:12:28:fa:c7:88:
6b:65:d2:12:be:c5:57:08:6f:d8:ae:95:10:eb:14:b5:1a:00:
7c:f1:8a:3a:74:65:c6:ea:00:35:0f:3b:30:84:c2:82:7f:f0:
ff:d4:6f:e7:a1:38:b7:e2:45:01:e8:bb:ac:e9:c7:0e:be:93:
7e:b6:6c:3e:ad:10:67:fc:27:c8:2b:7c:a8:90:58:53:5f:be:
fc:fe:b4:e0:2f:d2:a1:83:eb:01:38:37:56:08:2c:84:d9:74:
82:75:77:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0BkeyWfp78RDBUYIzGxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy
OGIwNDYwHhcNMjYwNDI3MTIwMDM3WhcNMjYwNDI4MTIwMDM3WjAzMTEwLwYDVQQD
EygzYmM3ZTEwYjJmZWI3NjQ0NmYyY2QxNTZiNDcwNTEwYWM1NzU4Y2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNznZGOejzPiZ0M3IEpq4CKZn1dz
NxfTp6MzN9m+IHmu0pRJCAYWoeBw65f4wC7C7VZzirdzX6z+q8n+O7IMnDCa7Tao
IiTPkgZ6b5sEDHzh3/UwfRXvyru+525U4zDAJprWt8aDOFyGzFV1V3ClH6wQBJin
2cw+SJbfGB7VEwDO1KTJgZhvF06qL7kxMLfTNAS82gwiPwvq5FydCfzPkM+UhMNc
unQaoEXT6cWbWqwdukTiyvH5SZEPJLdKdKbpP0U9w2K7jWbvsqzc94E9yFPkTNH3
X1YXgjVlj68ihRnhkWRSXZvTSYic0iIZ94byJgGP1GD9anNUh7d8oCv/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvH4Qsv63ZEbyzRVrRwUQrFdYzBMB8GA1UdIwQY
MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt
NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx
LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF+mgXg9
y+HbP8Z6mH7vq0cQ/zzFdgzbzV9lGs8w6DgZjM+/BBfg4DiYuE5F+XF2hLiH3IaJ
la8sWi6w28hXyYLeMuzWezF3iNyitqlPerlftHElgn4P6jFbREgBie8ZiOvTDh9E
nBSr+CfmfJr3sy8VgZHTaf5t7ZmcrodMvO4Aliy5gORDNHJocKr0DVTLDuN52rfS
PKHazGnvwxIo+seIa2XSEr7FVwhv2K6VEOsUtRoAfPGKOnRlxuoANQ87MITCgn/w
/9Rv56E4t+JFAei7rOnHDr6TfrZsPq0QZ/wnyCt8qJBYU1++/P604C/SoYPrATg3
VggshNl0gnV3ow==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:11 2026 by rpki-client