Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: q4X3ewUHjC0S6dBwv3E/G6ozJkke9Rujo4432lqOOXY=
Subject key identifier: 00:A0:4F:2C:AF:8A:0A:C3:81:5F:E2:FE:10:D4:18:CA:EA:B5:EF:7C
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019E1D22C5AD03B922EA8B9C586BE427B587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0FFE
Signing time: Tue 12 May 2026 17:01:18 +0000
Manifest this update: Tue 12 May 2026 17:01:18 +0000
Manifest next update: Wed 13 May 2026 17:01:18 +0000
Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 0wRvgY3bqTDq0TIFZ/pysgq18CuE60nU5nYsdJ56kXk=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c5:ad:03:b9:22:ea:8b:9c:58:6b:e4:27:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: May 12 17:01:18 2026 GMT
Not After : May 13 17:01:18 2026 GMT
Subject: CN=00a04f2caf8a0ac3815fe2fe10d418caeab5ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ff:d9:8f:d9:7b:d7:07:78:c9:52:2d:1a:
a7:31:22:ca:b3:5f:25:10:1b:39:eb:67:f5:c7:ca:
32:15:c6:92:b8:cd:24:43:67:72:e6:98:92:c1:e1:
a0:95:d4:54:8d:3c:e7:9b:e1:48:d1:44:82:6e:79:
75:d0:a6:19:ae:8e:33:14:45:f7:37:fe:54:8c:1a:
2a:b7:f7:7c:68:3d:4f:be:f7:74:a8:6e:3a:a7:8f:
9c:a3:57:06:3c:c1:e5:a2:bc:67:7a:3e:88:da:7d:
44:ee:02:6f:41:10:18:ea:b6:d9:f2:61:ca:a4:e4:
19:9d:36:6e:ac:db:51:2a:1f:11:44:18:33:e3:7d:
b7:7d:5a:4f:ca:62:1a:3c:e2:30:2c:81:7c:3a:e8:
d2:8b:fc:cb:81:79:19:88:9a:33:a4:de:f4:bc:88:
6e:46:54:3e:ab:8e:f6:5c:fa:87:f2:db:8f:99:9c:
e9:60:11:49:ae:55:41:ae:f9:82:5c:f8:d3:61:6b:
c3:bc:f8:8d:2f:03:8c:e3:e8:81:07:96:ff:7c:93:
6a:49:2a:9d:92:b0:66:7b:30:24:8b:2a:e4:6d:36:
bd:0b:ba:d9:b9:18:f3:b0:ad:cb:07:7c:77:96:b9:
2b:11:88:14:7a:05:a5:b7:da:fc:c6:3f:8e:eb:61:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:4F:2C:AF:8A:0A:C3:81:5F:E2:FE:10:D4:18:CA:EA:B5:EF:7C
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:30:22:4a:64:d4:ca:9a:3e:38:ad:53:18:b2:79:c2:90:
62:9e:80:12:15:c5:26:c1:04:6e:d1:56:b7:62:10:30:b3:bb:
b9:c6:2e:ed:e6:a9:b2:e9:74:6a:51:50:d9:a3:aa:ee:2b:fe:
96:18:d1:e9:02:31:cc:72:20:4b:bc:48:55:56:1c:d6:f4:66:
69:75:08:b2:7e:fd:bc:d5:14:b3:bf:46:a9:f8:cd:d8:da:30:
d0:84:18:f9:3d:d9:bd:ed:bb:80:e5:fc:df:16:ad:cd:99:99:
9d:e2:59:4e:c2:ff:ca:d8:e2:e2:2f:10:9e:02:74:fc:da:5d:
5f:3c:6d:3c:f6:0c:c2:95:7d:38:b1:fd:1e:47:3c:8c:66:04:
f0:ae:91:bd:39:15:11:fa:b7:d6:ac:0b:7a:05:4a:63:63:f3:
50:83:63:f3:19:62:34:00:0f:bf:e6:54:ee:df:6c:df:b1:d2:
00:bb:6b:00:1a:69:f7:ef:64:60:f7:05:d5:48:8b:af:e3:9e:
d9:08:8c:e1:72:4c:d1:f0:56:64:63:60:86:31:7b:3e:85:61:
16:74:1a:61:30:59:1e:f5:b9:42:28:d1:2a:4e:72:19:68:f6:
34:8d:75:b5:35:f0:46:33:f1:51:aa:bf:13:b1:45:f5:73:a2:
da:df:0f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIsWtA7ki6oucWGvkJ7WHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjYwNTEyMTcwMTE4WhcNMjYwNTEzMTcwMTE4WjAzMTEwLwYDVQQD
EygwMGEwNGYyY2FmOGEwYWMzODE1ZmUyZmUxMGQ0MThjYWVhYjVlZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriT/2Y/Ze9cHeMlSLRqnMSLKs18l
EBs562f1x8oyFcaSuM0kQ2dy5piSweGgldRUjTznm+FI0USCbnl10KYZro4zFEX3
N/5UjBoqt/d8aD1Pvvd0qG46p4+co1cGPMHlorxnej6I2n1E7gJvQRAY6rbZ8mHK
pOQZnTZurNtRKh8RRBgz4323fVpPymIaPOIwLIF8OujSi/zLgXkZiJozpN70vIhu
RlQ+q472XPqH8tuPmZzpYBFJrlVBrvmCXPjTYWvDvPiNLwOM4+iBB5b/fJNqSSqd
krBmezAkiyrkbTa9C7rZuRjzsK3LB3x3lrkrEYgUegWlt9r8xj+O62GiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACgTyyvigrDgV/i/hDUGMrqte98MB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8EwIkpk
1MqaPjitUxiyecKQYp6AEhXFJsEEbtFWt2IQMLO7ucYu7eapsul0alFQ2aOq7iv+
lhjR6QIxzHIgS7xIVVYc1vRmaXUIsn79vNUUs79GqfjN2Now0IQY+T3Zve27gOX8
3xatzZmZneJZTsL/ytji4i8QngJ0/NpdXzxtPPYMwpV9OLH9Hkc8jGYE8K6RvTkV
Efq31qwLegVKY2PzUINj8xliNAAPv+ZU7t9s37HSALtrABpp9+9kYPcF1UiLr+Oe
2QiM4XJM0fBWZGNghjF7PoVhFnQaYTBZHvW5QijRKk5yGWj2NI11tTXwRjPxUaq/
E7FF9XOi2t8Ppg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:27:14 2026 by rpki-client