Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
File: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft (raw, json)
Hash identifier: 6drGspkSon/rch4dK33q6H9Sy0SuJYC4oVKkA+U91+U=
Subject key identifier: 6D:EC:B2:37:20:16:B1:96:EA:71:2F:7C:C4:D5:BF:73:27:5C:13:08
Authority key identifier: DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
Certificate issuer: /CN=da5f25e8950f69e2d75b93b92f5404199e044762
Certificate serial: 019E1CEB74DE6800490F1A3E37CEC980A0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
Manifest number: 01E8
Signing time: Tue 12 May 2026 16:00:53 +0000
Manifest this update: Tue 12 May 2026 16:00:53 +0000
Manifest next update: Wed 13 May 2026 16:00:53 +0000
Files and hashes: 1: 2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl (hash: RjtYl0tESTpuXXQd3Ghi5Qs7TX8vL2+xGtGTGnPXXmQ=)
2: RstBPFjM6RZLydCSF_gstYqTNio.roa (hash: AQIsrapA+jjaaRR0kQmSSklLBZ57sqiJJ2/Lw3zxZ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:74:de:68:00:49:0f:1a:3e:37:ce:c9:80:a0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5f25e8950f69e2d75b93b92f5404199e044762
Validity
Not Before: May 12 16:00:53 2026 GMT
Not After : May 13 16:00:53 2026 GMT
Subject: CN=6decb2372016b196ea712f7cc4d5bf73275c1308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:c9:fa:12:84:1b:da:d1:d8:c6:4a:45:8b:
83:92:92:5b:e0:61:76:75:57:a6:88:b2:f8:3f:f9:
e4:db:cd:1e:ab:5d:5f:fc:50:66:5c:c8:1b:a0:63:
19:34:e1:c6:e1:6b:7e:82:31:31:4c:8a:c1:84:0f:
91:8c:b0:bb:de:ec:16:a1:d0:08:ac:6b:1b:f0:53:
83:9e:cc:22:09:1b:ba:fb:47:93:af:8d:2c:10:ff:
0c:6a:e7:69:7f:dd:79:09:f0:c9:35:a4:c6:12:16:
d1:bf:e9:25:ce:f5:05:d3:85:f8:14:b9:b2:a6:df:
f2:fc:c8:8f:8d:55:2f:0d:0c:9a:dd:59:6d:bb:7e:
c5:c4:13:d9:e2:e7:af:f7:4f:06:d0:36:1f:dc:39:
34:0b:86:98:00:ba:bb:d3:d1:5d:ae:b5:b6:0b:7b:
8d:7d:f5:37:8a:8a:ca:49:55:75:73:79:ac:da:08:
46:bb:15:18:43:df:b4:2c:e7:3c:79:b3:b1:51:35:
30:73:4b:25:25:64:f7:12:d2:aa:bd:71:32:80:26:
87:1c:55:4a:69:f9:2a:bc:aa:19:dd:cb:3f:88:0e:
f4:55:13:9a:a5:08:89:b6:7b:dd:09:a4:88:da:db:
74:8e:99:99:4f:f6:d9:67:fc:0f:16:11:23:05:fa:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:B2:37:20:16:B1:96:EA:71:2F:7C:C4:D5:BF:73:27:5C:13:08
X509v3 Authority Key Identifier:
keyid:DA:5F:25:E8:95:0F:69:E2:D7:5B:93:B9:2F:54:04:19:9E:04:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b4df4d-8a84-4be3-8e79-e2abc63100bb/1/2l8l6JUPaeLXW5O5L1QEGZ4ER2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:30:36:1c:8e:51:a4:83:1f:63:cf:42:43:ce:2b:9b:f5:24:
60:92:c9:e2:33:80:8c:da:1c:fc:69:a1:a0:81:0b:e2:f4:9d:
d6:34:ac:e7:6b:6f:5f:db:f0:63:89:a3:6b:c2:75:4f:68:83:
01:a3:65:bc:ec:d9:4f:2c:19:2c:c5:45:ce:09:6f:85:6c:44:
51:8d:29:24:a5:24:23:52:bc:13:ad:f1:3f:ca:b5:fa:da:c8:
9f:5d:1f:9c:0f:54:b9:55:37:d1:60:ae:2d:12:7e:a2:1a:48:
19:25:cc:f3:63:9a:d7:56:52:0f:5b:ac:57:31:e5:83:1a:d4:
0e:9e:b7:21:97:68:ad:f9:ba:67:aa:17:45:df:6d:9d:62:6f:
d2:31:63:3c:91:74:77:cb:29:96:20:63:71:2d:d3:aa:d1:44:
56:23:d0:ff:67:99:f8:58:fa:f4:ba:e2:6a:f2:16:b6:74:f7:
4f:a5:92:19:c1:af:b1:e7:98:eb:2e:f5:92:7a:b6:75:4a:7e:
69:74:34:55:e2:ec:7e:40:92:39:49:78:3b:de:60:3e:92:1f:
73:df:35:f7:3e:b3:07:7a:b3:83:5f:e7:ab:d7:9d:aa:ca:e7:
3a:e6:a1:88:d6:2a:0d:e3:b1:1d:56:47:74:f0:e9:1c:26:89:
2a:a8:b1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c63TeaABJDxo+N87JgKCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNWYyNWU4OTUwZjY5ZTJkNzViOTNiOTJmNTQwNDE5OWUw
NDQ3NjIwHhcNMjYwNTEyMTYwMDUzWhcNMjYwNTEzMTYwMDUzWjAzMTEwLwYDVQQD
Eyg2ZGVjYjIzNzIwMTZiMTk2ZWE3MTJmN2NjNGQ1YmY3MzI3NWMxMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPJ+hKEG9rR2MZKRYuDkpJb4GF2
dVemiLL4P/nk280eq11f/FBmXMgboGMZNOHG4Wt+gjExTIrBhA+RjLC73uwWodAI
rGsb8FODnswiCRu6+0eTr40sEP8Maudpf915CfDJNaTGEhbRv+klzvUF04X4FLmy
pt/y/MiPjVUvDQya3Vltu37FxBPZ4uev908G0DYf3Dk0C4aYALq709FdrrW2C3uN
ffU3iorKSVV1c3ms2ghGuxUYQ9+0LOc8ebOxUTUwc0slJWT3EtKqvXEygCaHHFVK
afkqvKoZ3cs/iA70VROapQiJtnvdCaSI2tt0jpmZT/bZZ/wPFhEjBfqHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3ssjcgFrGW6nEvfMTVv3MnXBMIMB8GA1UdIwQY
MBaAFNpfJeiVD2ni11uTuS9UBBmeBEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzkt
ZTJhYmM2MzEwMGJiLzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iNGRmNGQtOGE4NC00YmUzLThlNzktZTJhYmM2MzEwMGJi
LzEvMmw4bDZKVVBhZUxYVzVPNUwxUUVHWjRFUjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDA2HI5R
pIMfY89CQ84rm/UkYJLJ4jOAjNoc/GmhoIEL4vSd1jSs52tvX9vwY4mja8J1T2iD
AaNlvOzZTywZLMVFzglvhWxEUY0pJKUkI1K8E63xP8q1+trIn10fnA9UuVU30WCu
LRJ+ohpIGSXM82Oa11ZSD1usVzHlgxrUDp63IZdorfm6Z6oXRd9tnWJv0jFjPJF0
d8spliBjcS3TqtFEViPQ/2eZ+Fj69LriavIWtnT3T6WSGcGvseeY6y71knq2dUp+
aXQ0VeLsfkCSOUl4O95gPpIfc9819z6zB3qzg1/nq9edqsrnOuahiNYqDeOxHVZH
dPDpHCaJKqix6w==
-----END CERTIFICATE-----
Generated at Wed May 13 00:22:16 2026 by rpki-client