Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json)
Hash identifier: fVfGUN90oyG0nOBQHukHUR/PtzY+wOkt0QU6fedCoxU=
Subject key identifier: D3:F8:4B:5D:FA:32:1E:B5:C4:E4:3B:25:74:C1:3E:84:08:5E:D9:5F
Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Certificate serial: 019E1CEB8C40091EDE0EEAC061D19DDA4326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
Manifest number: 03B0
Signing time: Tue 12 May 2026 16:00:59 +0000
Manifest this update: Tue 12 May 2026 16:00:59 +0000
Manifest next update: Wed 13 May 2026 16:00:59 +0000
Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: JltOT0CwVesDla6XQ09HdEtB5H+JIBVrhMIpLcoIcTI=)
2: Je3xHK2jaM6m5S9GiyhscfWV8Yg.roa (hash: KhcCVOzCZNjhliNrDxOy2a8F19I6yxCDsbXLuV/7DNo=)
3: nTgR9PLLMxj6DumejGUp3QxDic4.roa (hash: 6jyqKs+vhmdq7Zq8Pff708q5roK5Wwnu9eGjYqiN4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:8c:40:09:1e:de:0e:ea:c0:61:d1:9d:da:43:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be
Validity
Not Before: May 12 16:00:59 2026 GMT
Not After : May 13 16:00:59 2026 GMT
Subject: CN=d3f84b5dfa321eb5c4e43b2574c13e84085ed95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:05:b9:31:ad:14:2f:a5:47:52:d1:47:65:
17:68:cd:1f:62:28:63:99:ff:65:8a:4c:fb:4b:5f:
53:f6:97:dc:8b:1b:a1:e9:52:6b:26:25:bf:bb:2e:
0b:ad:6f:d5:32:26:c1:bd:0d:2b:30:0d:24:60:f7:
ee:36:b3:25:5a:86:7b:fc:04:72:e5:a4:10:86:2b:
b9:18:f5:83:da:8a:14:89:16:c5:7b:d8:11:80:04:
3d:54:89:4a:dc:d2:96:85:20:8c:28:06:5a:6d:bc:
97:dd:2f:7e:a2:86:cd:d7:ac:7f:56:19:55:48:86:
03:af:b9:36:c0:01:c5:7e:fd:a1:f4:46:07:d0:b0:
80:93:fa:0b:9a:67:9f:3d:88:53:da:2e:e9:c8:a9:
98:a1:b9:9b:5e:3e:52:a3:3e:41:2e:69:52:c1:d9:
6d:a1:2b:3b:42:d8:20:8f:da:ba:7f:cd:25:e8:3a:
c3:3a:96:ec:20:24:6e:e3:73:1f:c0:9f:4d:b4:80:
20:8c:71:6f:b8:ee:47:e6:b3:20:c8:0b:7f:be:3a:
d9:c7:88:68:89:0b:9e:ae:8d:ec:2d:87:8d:09:5f:
2e:0a:2d:3a:9f:1b:1a:0d:37:71:74:94:e2:dd:5e:
1c:e1:74:ed:d6:e5:93:fc:fb:13:c8:03:6a:de:53:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:4B:5D:FA:32:1E:B5:C4:E4:3B:25:74:C1:3E:84:08:5E:D9:5F
X509v3 Authority Key Identifier:
keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:17:1d:04:71:95:38:dc:41:70:70:0c:9a:6a:87:29:95:bd:
f3:2f:a6:e5:51:d4:3d:5d:79:d6:a6:f2:97:42:81:40:c4:1e:
be:79:35:0b:4f:58:d3:3b:62:51:44:17:43:49:7e:09:f9:b9:
44:d0:8b:98:af:15:b5:ea:bf:fd:ac:09:0c:a5:c8:31:d0:84:
81:00:43:e7:a3:78:50:18:ac:b3:a4:04:49:58:c7:10:f3:83:
ee:a9:ed:32:64:76:28:07:55:63:85:e0:a1:a4:00:83:0d:7c:
66:44:1b:5e:6a:e2:08:eb:c2:55:f8:98:d9:60:d0:c3:35:60:
c1:7b:d5:68:60:50:3e:53:32:3d:0f:85:af:54:45:f3:65:f9:
49:bc:40:eb:a4:5e:9c:f0:05:eb:60:bd:dd:09:62:ab:64:57:
85:25:5c:db:96:f7:ff:88:09:48:f6:37:89:86:e6:25:fb:cb:
d2:f3:02:c0:50:89:07:9f:b4:7d:0c:5e:75:70:c5:22:73:82:
c0:fb:87:96:96:b1:26:66:ad:ae:ce:14:6f:74:5c:5e:5d:39:
31:43:d1:af:02:bb:0f:52:7d:05:58:b2:12:bc:0a:73:76:f2:
03:2b:77:fb:cd:de:b9:11:65:88:f5:c7:c0:a5:c8:24:42:65:
f3:e2:68:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c64xACR7eDurAYdGd2kMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3
Nzg4YmUwHhcNMjYwNTEyMTYwMDU5WhcNMjYwNTEzMTYwMDU5WjAzMTEwLwYDVQQD
EyhkM2Y4NGI1ZGZhMzIxZWI1YzRlNDNiMjU3NGMxM2U4NDA4NWVkOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgsFuTGtFC+lR1LRR2UXaM0fYihj
mf9likz7S19T9pfcixuh6VJrJiW/uy4LrW/VMibBvQ0rMA0kYPfuNrMlWoZ7/ARy
5aQQhiu5GPWD2ooUiRbFe9gRgAQ9VIlK3NKWhSCMKAZabbyX3S9+oobN16x/VhlV
SIYDr7k2wAHFfv2h9EYH0LCAk/oLmmefPYhT2i7pyKmYobmbXj5Soz5BLmlSwdlt
oSs7Qtggj9q6f80l6DrDOpbsICRu43MfwJ9NtIAgjHFvuO5H5rMgyAt/vjrZx4ho
iQuero3sLYeNCV8uCi06nxsaDTdxdJTi3V4c4XTt1uWT/PsTyANq3lPmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP4S136Mh61xOQ7JXTBPoQIXtlfMB8GA1UdIwQY
MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt
YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm
LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRcdBHGV
ONxBcHAMmmqHKZW98y+m5VHUPV151qbyl0KBQMQevnk1C09Y0ztiUUQXQ0l+Cfm5
RNCLmK8Vteq//awJDKXIMdCEgQBD56N4UBiss6QESVjHEPOD7qntMmR2KAdVY4Xg
oaQAgw18ZkQbXmriCOvCVfiY2WDQwzVgwXvVaGBQPlMyPQ+Fr1RF82X5SbxA66Re
nPAF62C93Qliq2RXhSVc25b3/4gJSPY3iYbmJfvL0vMCwFCJB5+0fQxedXDFInOC
wPuHlpaxJmatrs4Ub3RcXl05MUPRrwK7D1J9BViyErwKc3byAyt3+83euRFliPXH
wKXIJEJl8+Jo5A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:14 2026 by rpki-client