Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: iKt4H957kTikHUgKgEcEo1bEV5zATMo0HwaOk8slSFc=
Subject key identifier: 06:59:DC:F4:5C:22:DA:CD:64:9B:60:17:98:92:66:06:AC:92:3C:3D
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 019E1DC71B7D31F5F77EC83635A582FA84FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 0966
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: GuBr2KpMxLtCUXoQZrFh4XnJaPTcRJz03isg3WEgF0g=)
2: t6Z6klZ_0NjLgXvq4YpIkhB8psw.roa (hash: +OTn+I3wq5DYeVWvGcpxMDqEd8XsWHPUTKNQceql21Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1b:7d:31:f5:f7:7e:c8:36:35:a5:82:fa:84:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=0659dcf45c22dacd649b601798926606ac923c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:d9:b4:99:02:32:25:41:91:a7:86:a1:9c:
51:b7:6d:9b:8a:f2:71:86:db:da:c3:29:2c:b2:f1:
c6:97:b5:48:44:01:5b:f7:62:36:6e:a6:9e:a6:94:
1d:91:db:99:83:bf:62:83:fc:9d:49:f9:45:e8:7c:
14:e8:42:f8:a1:31:97:c8:e6:68:5f:aa:4b:b4:59:
77:2f:19:56:ef:97:0b:d3:32:2c:84:ef:69:70:73:
27:da:d0:10:cc:3f:50:03:01:8a:f8:0c:b3:3e:eb:
c0:5d:09:33:77:e2:e1:af:d4:05:dd:e7:96:f4:9b:
58:cf:a8:78:cb:f4:98:af:6d:d4:d2:14:25:87:3e:
56:af:61:68:1e:4f:ef:aa:da:d4:e4:37:5a:ac:dd:
fc:80:e2:9e:88:3a:55:c7:7f:d8:b4:68:f5:4b:a8:
ac:8b:c2:df:0f:06:6b:41:dd:ab:36:a0:6f:cf:36:
19:b3:ec:1a:90:1d:27:20:be:ad:9e:96:bb:4e:27:
70:37:90:45:12:86:4c:4f:37:15:91:13:ff:52:08:
b2:2a:15:fc:6e:6c:d2:32:9d:ba:f8:c9:fc:a4:d8:
68:9a:f8:f7:57:27:af:7d:ec:3c:0b:3b:9b:4d:6b:
de:e9:d5:eb:eb:6e:f6:b4:df:2c:86:b9:db:f7:f4:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:DC:F4:5C:22:DA:CD:64:9B:60:17:98:92:66:06:AC:92:3C:3D
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f2:89:13:61:a6:68:41:73:3a:d2:86:22:66:f8:25:1d:90:
83:53:c8:d3:26:6c:c5:90:52:77:e3:2c:6f:03:22:2e:cc:28:
a0:89:f9:2f:1f:34:89:84:49:f2:c2:8d:40:c2:12:75:bd:7f:
96:96:ca:bb:21:65:2a:a2:db:7c:63:67:05:9d:3f:34:88:45:
cd:b1:14:11:64:c5:70:33:19:46:e4:42:b5:fc:aa:6c:99:7e:
3a:02:82:d3:e5:20:a7:76:ae:81:50:2d:c1:be:12:f9:ae:06:
06:dd:61:d8:a2:4a:fc:f9:eb:25:ff:8a:79:3e:4a:5d:09:c3:
5a:73:b5:85:39:5e:43:d4:09:40:93:c2:58:4f:af:d5:12:eb:
f8:25:52:47:a8:05:df:a4:52:e7:7f:a6:18:90:1a:6b:dc:f9:
4f:f6:6e:a3:9a:fc:05:5b:47:e3:67:9a:9e:05:c0:3b:eb:8f:
1b:52:54:a3:01:60:49:8e:55:00:36:9d:e2:2f:d8:fa:ac:87:
96:9d:12:61:5a:2b:01:6e:df:43:8a:68:9c:94:d0:a5:3c:2e:
2d:d1:8a:ef:40:c7:a0:37:3a:06:9c:bd:7c:90:02:c0:02:88:
57:22:ad:32:eb:37:28:24:46:fb:93:04:dd:f6:4a:66:d3:4e:
2f:9c:2c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxt9MfX3fsg2NaWC+oT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy
OTc4ZDIwHhcNMjYwNTEyMjAwMDQ4WhcNMjYwNTEzMjAwMDQ4WjAzMTEwLwYDVQQD
EygwNjU5ZGNmNDVjMjJkYWNkNjQ5YjYwMTc5ODkyNjYwNmFjOTIzYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oTZtJkCMiVBkaeGoZxRt22bivJx
htvawykssvHGl7VIRAFb92I2bqaeppQdkduZg79ig/ydSflF6HwU6EL4oTGXyOZo
X6pLtFl3LxlW75cL0zIshO9pcHMn2tAQzD9QAwGK+AyzPuvAXQkzd+Lhr9QF3eeW
9JtYz6h4y/SYr23U0hQlhz5Wr2FoHk/vqtrU5DdarN38gOKeiDpVx3/YtGj1S6is
i8LfDwZrQd2rNqBvzzYZs+wakB0nIL6tnpa7TidwN5BFEoZMTzcVkRP/UgiyKhX8
bmzSMp26+Mn8pNhomvj3Vyevfew8CzubTWve6dXr6272tN8shrnb9/T19wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZZ3PRcItrNZJtgF5iSZgaskjw9MB8GA1UdIwQY
MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt
ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh
LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPKJE2Gm
aEFzOtKGImb4JR2Qg1PI0yZsxZBSd+MsbwMiLswooIn5Lx80iYRJ8sKNQMISdb1/
lpbKuyFlKqLbfGNnBZ0/NIhFzbEUEWTFcDMZRuRCtfyqbJl+OgKC0+Ugp3augVAt
wb4S+a4GBt1h2KJK/PnrJf+KeT5KXQnDWnO1hTleQ9QJQJPCWE+v1RLr+CVSR6gF
36RS53+mGJAaa9z5T/Zuo5r8BVtH42eangXAO+uPG1JUowFgSY5VADad4i/Y+qyH
lp0SYVorAW7fQ4ponJTQpTwuLdGK70DHoDc6Bpy9fJACwAKIVyKtMus3KCRG+5ME
3fZKZtNOL5ws6w==
-----END CERTIFICATE-----
Generated at Wed May 13 03:08:50 2026 by rpki-client