Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: mmYyLPo+WPHIenTM0A+GOSJ11969K7QoyXcZgZftA/g=
Subject key identifier: B5:3B:5F:9F:AB:33:35:F3:6E:A6:83:4F:6F:90:0A:3B:08:AA:A2:19
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019E1DC71A396D127CC49CC962DD22419FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0A85
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: yWcBwFpC3SQnhVndRVX8F0pfuAjVBmu0FxptlKyaPOU=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1a:39:6d:12:7c:c4:9c:c9:62:dd:22:41:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=b53b5f9fab3335f36ea6834f6f900a3b08aaa219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:85:1f:8e:a0:ac:96:db:3b:97:fc:74:9d:
fb:d0:a6:53:ec:51:a4:9e:bd:50:4a:22:b7:58:63:
78:02:aa:c6:e7:c0:70:cc:29:63:c8:b2:24:83:93:
6c:40:c4:f4:6c:d3:67:fe:1b:7a:5b:88:74:5d:90:
07:84:19:12:97:b9:e6:ab:a2:0a:aa:0a:6e:94:f6:
fe:25:94:7e:64:27:9d:9f:9f:e6:3f:90:a0:ca:49:
b9:93:ec:6c:f0:a6:9f:e5:96:e3:3f:72:24:76:ba:
20:2c:40:e5:15:8c:f7:e7:01:ae:48:6e:63:0d:46:
e3:b5:ba:39:bc:cd:3b:93:c1:ff:06:60:5a:ba:c4:
a6:94:1d:35:db:30:18:00:18:bf:2a:f1:c0:32:1a:
38:95:7a:8b:b4:57:45:af:f1:b4:e8:2d:af:e0:ab:
b0:d5:ec:21:6a:86:5d:00:92:16:c6:8a:98:4b:10:
1b:38:e3:6f:d8:f4:77:fe:94:4d:a0:89:bd:94:91:
a6:b2:91:58:8e:59:82:74:e7:77:c9:21:20:33:43:
7e:ef:3c:61:e9:a4:cf:a1:e5:f8:98:eb:92:11:cd:
32:6e:f8:85:ad:ef:a0:1a:b4:60:5e:3c:61:10:af:
e7:21:1b:15:5e:c0:5c:41:00:0e:98:28:dc:7b:7d:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:5F:9F:AB:33:35:F3:6E:A6:83:4F:6F:90:0A:3B:08:AA:A2:19
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bf:ad:33:68:18:58:e7:0d:99:97:42:88:39:45:62:48:a1:
fc:be:e2:b2:cb:3f:42:fd:62:aa:38:57:57:8a:e1:8b:ed:12:
e7:cc:b9:a7:71:98:bc:9e:ac:79:bd:aa:60:1c:b7:b7:b8:30:
eb:2e:21:90:0a:d2:54:26:d7:ff:3d:12:25:1b:19:8f:c9:9e:
2f:6e:65:e0:96:d5:a6:be:9e:0d:d4:95:02:c5:49:8a:97:9a:
5c:e3:81:b6:cc:93:28:32:7a:39:62:1f:95:bb:ee:e5:75:e3:
12:ae:9d:33:2b:28:2f:ba:9a:dd:1d:96:f5:31:23:0f:12:ff:
76:4c:6f:3b:68:5f:a7:4c:a0:b3:d0:a9:8a:17:3e:5e:4d:90:
63:98:25:88:74:3e:32:d0:a3:4f:c6:6f:a4:ea:32:a4:7b:e5:
ee:0f:82:ab:4f:c7:f7:c7:16:40:81:ae:62:be:5a:1c:fc:66:
9a:98:5e:f6:ed:48:39:0a:44:ae:da:66:df:22:ec:51:fa:12:
ec:e4:a5:ea:50:b8:f2:4d:05:48:42:71:4d:ac:84:b8:19:9b:
cd:2d:9d:f9:79:99:2a:cb:48:73:6e:a9:e8:76:7e:0e:74:20:
6d:33:57:b8:52:9f:2f:77:3a:b5:64:ef:d1:18:ca:45:b6:a6:
80:2c:7a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxo5bRJ8xJzJYt0iQZ+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjYwNTEyMjAwMDQ4WhcNMjYwNTEzMjAwMDQ4WjAzMTEwLwYDVQQD
EyhiNTNiNWY5ZmFiMzMzNWYzNmVhNjgzNGY2ZjkwMGEzYjA4YWFhMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fSFH46grJbbO5f8dJ370KZT7FGk
nr1QSiK3WGN4AqrG58BwzCljyLIkg5NsQMT0bNNn/ht6W4h0XZAHhBkSl7nmq6IK
qgpulPb+JZR+ZCedn5/mP5Cgykm5k+xs8Kaf5ZbjP3IkdrogLEDlFYz35wGuSG5j
DUbjtbo5vM07k8H/BmBausSmlB012zAYABi/KvHAMho4lXqLtFdFr/G06C2v4Kuw
1ewhaoZdAJIWxoqYSxAbOONv2PR3/pRNoIm9lJGmspFYjlmCdOd3ySEgM0N+7zxh
6aTPoeX4mOuSEc0ybviFre+gGrRgXjxhEK/nIRsVXsBcQQAOmCjce30HHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU7X5+rMzXzbqaDT2+QCjsIqqIZMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7+tM2gY
WOcNmZdCiDlFYkih/L7isss/Qv1iqjhXV4rhi+0S58y5p3GYvJ6seb2qYBy3t7gw
6y4hkArSVCbX/z0SJRsZj8meL25l4JbVpr6eDdSVAsVJipeaXOOBtsyTKDJ6OWIf
lbvu5XXjEq6dMysoL7qa3R2W9TEjDxL/dkxvO2hfp0ygs9Cpihc+Xk2QY5gliHQ+
MtCjT8ZvpOoypHvl7g+Cq0/H98cWQIGuYr5aHPxmmphe9u1IOQpErtpm3yLsUfoS
7OSl6lC48k0FSEJxTayEuBmbzS2d+XmZKstIc26p6HZ+DnQgbTNXuFKfL3c6tWTv
0RjKRbamgCx64w==
-----END CERTIFICATE-----
Generated at Wed May 13 01:34:36 2026 by rpki-client