Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: TGF1wFt6KeTgoo4ZORaCAJ7+M3kESyt3T/8Ww9ij7lk=
Subject key identifier: 26:E0:4D:8B:8D:80:0E:5E:A5:41:AC:8C:3A:F6:73:64:4D:3E:0B:93
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019E1C4751C14C43D5F5417CEF24F58E6E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 163B
Signing time: Tue 12 May 2026 13:01:36 +0000
Manifest this update: Tue 12 May 2026 13:01:36 +0000
Manifest next update: Wed 13 May 2026 13:01:36 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: OkLzfs2RELT767pFudCZ7h3aGlm7l3lY4LjFtjD5OGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:51:c1:4c:43:d5:f5:41:7c:ef:24:f5:8e:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: May 12 13:01:36 2026 GMT
Not After : May 13 13:01:36 2026 GMT
Subject: CN=26e04d8b8d800e5ea541ac8c3af673644d3e0b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:b5:7f:97:ce:3e:1b:79:39:a1:9c:20:ed:
82:47:54:a2:94:62:a2:5d:d4:3c:1b:a1:00:31:83:
cc:8c:9a:f0:4f:6a:85:e0:58:9e:a4:56:78:c5:6c:
22:cf:d0:3e:57:16:b5:70:b7:c8:20:ff:25:e1:21:
18:26:54:da:11:30:c5:72:34:31:fd:0f:d4:f1:50:
76:d7:15:69:19:9e:dc:dd:86:d2:46:3d:e4:9b:fd:
20:2d:d7:8f:de:d3:a2:36:5f:1f:7a:25:3a:1d:ed:
fe:85:6e:43:88:dc:de:15:ed:c2:89:e0:96:b4:5a:
90:ee:8e:a5:ed:ae:ee:a3:6f:ad:77:01:ad:4f:a3:
44:22:37:21:3c:72:22:e6:8d:3a:ec:c5:92:dd:15:
69:f1:61:e5:26:64:41:1c:e8:1d:d5:b4:00:85:7d:
91:2b:68:95:32:8b:74:0d:8a:2b:77:ef:8e:ff:04:
dd:be:00:ca:4d:e0:1a:bc:13:f2:59:ef:07:1e:19:
48:5b:23:11:79:db:9b:23:69:a9:d1:ce:19:31:26:
6f:fe:98:e7:2c:ad:17:65:09:87:78:e8:c5:3a:43:
d4:87:31:84:7c:32:de:47:6e:0f:c6:d3:c7:5d:27:
4f:bf:b1:16:62:ae:91:df:df:4b:e3:aa:ab:66:8a:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:4D:8B:8D:80:0E:5E:A5:41:AC:8C:3A:F6:73:64:4D:3E:0B:93
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:2f:e1:59:01:a5:1b:99:a7:2c:6c:19:e0:22:71:1c:a7:
42:25:d3:8e:5c:69:14:f0:6e:4d:c9:a5:fd:fc:eb:90:44:4b:
bd:7d:bc:75:a7:57:06:4e:71:c8:87:fd:93:d1:e3:bb:83:bd:
8f:87:59:37:b5:9f:10:0d:e0:aa:a1:16:3c:06:74:37:1b:89:
1f:18:7b:a2:ae:fe:d8:95:d4:e4:82:15:46:01:34:59:ba:21:
3b:9c:df:02:3e:e8:47:b5:41:f8:61:ea:4e:f2:5e:1c:71:1e:
66:b5:aa:ff:f8:6e:4d:18:64:b0:ab:54:a0:b7:cb:a2:04:27:
cc:ed:9c:c2:06:c3:61:50:d1:31:19:d9:28:50:5f:97:66:06:
79:44:d4:10:cd:ab:26:10:6a:b4:88:b0:fe:15:b7:93:85:c5:
1b:8f:78:b3:ad:f5:4c:b8:67:8f:9f:61:1e:34:53:f6:76:1d:
84:53:39:1e:d3:93:d4:60:c3:5a:f8:1c:c8:1a:e5:c0:5c:1b:
98:07:aa:24:13:c7:a5:36:16:53:38:93:b0:1f:06:96:f6:85:
2c:45:c8:32:b8:03:af:cb:ef:6d:12:eb:20:e7:95:dd:34:b3:
12:04:e5:ee:4f:06:a7:55:1f:d9:36:3b:ff:86:7d:90:c4:8a:
a3:b3:56:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR1HBTEPV9UF87yT1jm5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjYwNTEyMTMwMTM2WhcNMjYwNTEzMTMwMTM2WjAzMTEwLwYDVQQD
EygyNmUwNGQ4YjhkODAwZTVlYTU0MWFjOGMzYWY2NzM2NDRkM2UwYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2G1f5fOPht5OaGcIO2CR1SilGKi
XdQ8G6EAMYPMjJrwT2qF4FiepFZ4xWwiz9A+Vxa1cLfIIP8l4SEYJlTaETDFcjQx
/Q/U8VB21xVpGZ7c3YbSRj3km/0gLdeP3tOiNl8feiU6He3+hW5DiNzeFe3CieCW
tFqQ7o6l7a7uo2+tdwGtT6NEIjchPHIi5o067MWS3RVp8WHlJmRBHOgd1bQAhX2R
K2iVMot0DYord++O/wTdvgDKTeAavBPyWe8HHhlIWyMRedubI2mp0c4ZMSZv/pjn
LK0XZQmHeOjFOkPUhzGEfDLeR24PxtPHXSdPv7EWYq6R399L46qrZorgwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbgTYuNgA5epUGsjDr2c2RNPguTMB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcesv4VkB
pRuZpyxsGeAicRynQiXTjlxpFPBuTcml/fzrkERLvX28dadXBk5xyIf9k9Hju4O9
j4dZN7WfEA3gqqEWPAZ0NxuJHxh7oq7+2JXU5IIVRgE0WbohO5zfAj7oR7VB+GHq
TvJeHHEeZrWq//huTRhksKtUoLfLogQnzO2cwgbDYVDRMRnZKFBfl2YGeUTUEM2r
JhBqtIiw/hW3k4XFG494s631TLhnj59hHjRT9nYdhFM5HtOT1GDDWvgcyBrlwFwb
mAeqJBPHpTYWUziTsB8GlvaFLEXIMrgDr8vvbRLrIOeV3TSzEgTl7k8Gp1Uf2TY7
/4Z9kMSKo7NW6A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:37 2026 by rpki-client