Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: 8yBGFjLWaPi2zP01Rc5I/5MCWNVVL1y1AWDcjEuMSRY=
Subject key identifier: D4:0A:70:A0:F4:CF:6E:ED:92:7F:26:F6:C5:7A:53:92:90:A1:DE:58
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019E1ED99EE779E9A38F60144AA75C4D94CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0D86
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: wthC1wlu3bTLITurF09KWd9yl6oODLq+vhQ9RvnY1TQ=)
2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9e:e7:79:e9:a3:8f:60:14:4a:a7:5c:4d:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=d40a70a0f4cf6eed927f26f6c57a539290a1de58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:c5:89:95:67:cd:d7:f4:c1:f3:6a:c2:2b:
b3:3f:b1:2c:3b:a2:f5:f6:22:33:2f:e2:a8:02:5f:
a3:f8:29:a3:ff:31:bd:7f:5d:67:33:c3:5a:44:ff:
e9:cb:01:b6:a0:1f:c9:49:12:95:0c:4e:92:ae:46:
82:d9:ea:34:42:8e:d8:be:ed:c4:12:f0:5d:8f:76:
24:e2:f9:8f:c4:3e:b3:bf:f5:e1:f5:d4:6e:88:89:
d8:ee:61:d9:87:68:6d:62:c9:ec:b6:c4:56:de:3d:
17:69:9b:f7:eb:f6:bb:04:8a:c6:61:a5:b9:8d:52:
1b:46:af:c7:c4:eb:fa:33:2c:6d:7f:f4:fb:52:20:
f5:96:df:05:02:9e:9e:4d:66:15:c0:e1:2d:16:b9:
db:90:a3:9f:61:2c:b8:2a:bf:e0:ad:91:43:c1:01:
aa:3f:ca:ff:8c:36:88:cc:a0:a8:62:9d:7f:97:9d:
e4:ac:cb:cf:c2:16:20:6a:06:66:e4:36:af:fd:02:
e9:3f:30:bc:c7:19:dc:3b:95:65:b5:59:97:84:8f:
c3:76:99:42:f4:36:08:85:38:21:29:e3:fc:ff:bd:
d1:dc:50:99:cc:22:5e:6f:40:86:a5:a6:b3:ff:94:
e2:03:db:60:21:fe:41:76:98:bc:93:10:a8:eb:c6:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0A:70:A0:F4:CF:6E:ED:92:7F:26:F6:C5:7A:53:92:90:A1:DE:58
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a0:6d:6c:aa:68:b9:38:ab:c1:b2:33:7f:fb:f1:f8:12:a3:
a3:21:25:60:bd:1f:cf:d0:76:05:68:d6:1f:b7:4d:19:24:3e:
c1:ec:0a:37:f9:ee:1e:5a:61:7f:51:60:bd:62:52:b6:75:a3:
f7:b5:be:53:aa:de:04:fa:e4:ba:86:a6:3d:1e:da:7f:7b:0e:
eb:05:ef:91:89:fb:e0:5d:f3:1e:9a:2e:6f:61:69:8d:4b:0c:
21:7a:bb:e5:9b:08:2f:d7:ea:42:ad:91:05:cf:e6:a9:8c:15:
8b:26:40:38:4c:2d:72:af:db:76:20:33:78:af:8b:ab:92:9a:
96:07:ea:ec:ac:95:7d:28:df:24:e0:c6:b2:e3:fd:8a:ff:02:
1e:8e:3a:7f:a3:e9:37:a7:72:24:42:24:84:6c:40:2b:c8:6b:
3f:e3:67:f9:f7:2d:b3:76:08:39:58:e6:02:f7:68:7c:9d:89:
be:4b:ce:0e:dd:32:fe:2f:71:4b:8c:fd:e6:41:67:22:62:92:
10:e5:19:f2:14:a8:75:a9:0f:c6:09:12:28:74:e8:e1:bc:05:
b7:b4:88:3b:44:cd:f6:45:c9:7c:31:11:1b:19:10:84:db:eb:
d2:99:ce:59:2f:33:c2:1b:02:3c:b3:e3:5e:6b:50:e2:aa:43:
3f:ce:17:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2Z7neemjj2AUSqdcTZTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz
MDBkNmIwHhcNMjYwNTEzMDEwMDM4WhcNMjYwNTE0MDEwMDM4WjAzMTEwLwYDVQQD
EyhkNDBhNzBhMGY0Y2Y2ZWVkOTI3ZjI2ZjZjNTdhNTM5MjkwYTFkZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvrFiZVnzdf0wfNqwiuzP7EsO6L1
9iIzL+KoAl+j+Cmj/zG9f11nM8NaRP/pywG2oB/JSRKVDE6SrkaC2eo0Qo7Yvu3E
EvBdj3Yk4vmPxD6zv/Xh9dRuiInY7mHZh2htYsnstsRW3j0XaZv36/a7BIrGYaW5
jVIbRq/HxOv6Myxtf/T7UiD1lt8FAp6eTWYVwOEtFrnbkKOfYSy4Kr/grZFDwQGq
P8r/jDaIzKCoYp1/l53krMvPwhYgagZm5Dav/QLpPzC8xxncO5VltVmXhI/DdplC
9DYIhTghKeP8/73R3FCZzCJeb0CGpaaz/5TiA9tgIf5Bdpi8kxCo68ZgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQKcKD0z27tkn8m9sV6U5KQod5YMB8GA1UdIwQY
MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt
ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0
LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqBtbKpo
uTirwbIzf/vx+BKjoyElYL0fz9B2BWjWH7dNGSQ+wewKN/nuHlphf1FgvWJStnWj
97W+U6reBPrkuoamPR7af3sO6wXvkYn74F3zHpoub2FpjUsMIXq75ZsIL9fqQq2R
Bc/mqYwViyZAOEwtcq/bdiAzeK+Lq5Kalgfq7KyVfSjfJODGsuP9iv8CHo46f6Pp
N6dyJEIkhGxAK8hrP+Nn+fcts3YIOVjmAvdofJ2JvkvODt0y/i9xS4z95kFnImKS
EOUZ8hSodakPxgkSKHTo4bwFt7SIO0TN9kXJfDERGxkQhNvr0pnOWS8zwhsCPLPj
XmtQ4qpDP84XuQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:16 2026 by rpki-client