Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: iijsnZW+bbZjCcEHJkzbVNckmuY0dwavVuvc2IDw5Ws=
Subject key identifier: 3B:80:24:DF:79:D5:D0:6E:BF:ED:A1:57:7F:81:36:B3:CC:E0:F9:FC
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 019E1E35B82202FD0F8F5DBEA7A560D28713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:37 +0000
Manifest this update: Tue 12 May 2026 22:01:37 +0000
Manifest next update: Wed 13 May 2026 22:01:37 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: ShuJjROVXw1L5TZ5YJbUX9Vh2oKx6Ts/9upltF91rec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b8:22:02:fd:0f:8f:5d:be:a7:a5:60:d2:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: May 12 22:01:37 2026 GMT
Not After : May 13 22:01:37 2026 GMT
Subject: CN=3b8024df79d5d06ebfeda1577f8136b3cce0f9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:be:29:38:b9:8a:99:99:56:46:28:b5:27:
91:9d:29:7e:be:63:9b:2f:4d:de:a9:da:77:1f:b4:
bf:af:bc:44:ad:df:3c:ce:bd:b7:fe:50:e3:4d:1d:
b0:63:1d:7c:75:df:40:09:84:f3:e5:f6:83:a4:1c:
41:47:df:f2:c6:c1:cc:c4:85:d5:02:ad:8a:f8:33:
15:57:81:b8:52:29:19:8d:1b:bf:64:35:47:b7:80:
d0:cb:49:75:6a:cb:a3:2e:67:a2:d7:ae:57:b8:c6:
33:16:63:e3:ce:79:ec:a6:f0:99:70:de:af:28:50:
67:02:f9:00:6e:70:6e:be:e1:b0:81:e0:ac:94:fd:
33:dc:84:a0:1d:72:7c:e6:a2:21:7c:99:57:8b:2c:
bb:da:40:85:43:0f:02:1f:9f:77:8d:c1:c3:aa:93:
e7:95:a9:e3:c7:87:94:a3:d3:f1:bc:d9:a9:63:38:
9f:ac:47:4d:86:07:9a:cc:0b:5c:be:22:0e:fc:38:
cb:ea:ef:34:b8:9b:91:f6:44:b4:21:75:19:a7:47:
95:0d:8f:90:a6:a1:02:d9:db:a2:5c:43:5d:f1:31:
da:fb:fd:75:13:d1:6c:20:e3:53:27:3b:99:ee:54:
4a:fa:7f:ae:ff:9a:b1:71:aa:11:25:19:93:36:f5:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:24:DF:79:D5:D0:6E:BF:ED:A1:57:7F:81:36:B3:CC:E0:F9:FC
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:2c:eb:2f:37:85:18:c0:ef:d2:29:11:ec:5e:b3:b6:fd:
aa:f3:cb:3b:32:a2:3d:88:a4:dd:ef:7f:ab:73:16:2d:7c:68:
41:63:91:74:d8:2c:40:da:fc:eb:0c:e9:fc:7d:df:00:4a:77:
09:ea:8a:86:c9:22:d3:7c:b6:66:b2:da:33:4d:36:5b:02:44:
7c:fa:51:2c:de:6c:08:95:22:e8:ae:66:87:b8:97:ad:7b:2e:
4b:29:a7:d6:d6:6a:bf:3c:8e:de:e1:59:8b:58:38:e9:03:0c:
b1:cc:24:d6:39:16:07:d4:ca:53:9d:e0:15:6d:fb:ef:e7:8e:
2f:f1:73:36:2d:e9:a5:9c:e1:19:f9:8c:aa:10:80:5c:97:79:
eb:b0:be:f3:a0:27:db:aa:62:74:49:e4:cd:3c:bc:27:cf:38:
42:24:ab:22:f9:af:6e:ef:80:79:e1:81:0a:da:6c:d8:d5:58:
72:4f:e0:26:ac:17:f9:7d:93:cf:f7:8a:60:57:ed:90:fa:27:
19:fb:3a:27:67:e6:65:09:22:d8:6b:c4:72:13:a1:0c:34:10:
e4:10:22:4d:f1:2a:55:22:44:6c:67:a2:cd:0d:f4:54:c8:f5:
77:94:13:17:5c:9e:96:cc:34:f3:87:2b:f3:66:c9:69:9f:44:
46:f1:80:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNbgiAv0Pj12+p6Vg0ocTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzgwODUxOWYyYjA4MDQ1YzdmYjQxYTYxZmRhNGUwOWU1
MTg5MWIwHhcNMjYwNTEyMjIwMTM3WhcNMjYwNTEzMjIwMTM3WjAzMTEwLwYDVQQD
EygzYjgwMjRkZjc5ZDVkMDZlYmZlZGExNTc3ZjgxMzZiM2NjZTBmOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMe+KTi5ipmZVkYotSeRnSl+vmOb
L03eqdp3H7S/r7xErd88zr23/lDjTR2wYx18dd9ACYTz5faDpBxBR9/yxsHMxIXV
Aq2K+DMVV4G4UikZjRu/ZDVHt4DQy0l1asujLmei165XuMYzFmPjznnspvCZcN6v
KFBnAvkAbnBuvuGwgeCslP0z3ISgHXJ85qIhfJlXiyy72kCFQw8CH593jcHDqpPn
lanjx4eUo9PxvNmpYzifrEdNhgeazAtcviIO/DjL6u80uJuR9kS0IXUZp0eVDY+Q
pqEC2duiXENd8THa+/11E9FsIONTJzuZ7lRK+n+u/5qxcaoRJRmTNvXeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuAJN951dBuv+2hV3+BNrPM4Pn8MB8GA1UdIwQY
MBaAFPJ4CFGfKwgEXH+0GmH9pOCeUYkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjct
NTg1NWMxZDE0YzliLzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81N2JhYWYtZTJlZi00N2VhLWFiYjctNTg1NWMxZDE0Yzli
LzEvOG5nSVVaOHJDQVJjZjdRYVlmMms0SjVSaVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrks6y83
hRjA79IpEexes7b9qvPLOzKiPYik3e9/q3MWLXxoQWORdNgsQNr86wzp/H3fAEp3
CeqKhski03y2ZrLaM002WwJEfPpRLN5sCJUi6K5mh7iXrXsuSymn1tZqvzyO3uFZ
i1g46QMMscwk1jkWB9TKU53gFW377+eOL/FzNi3ppZzhGfmMqhCAXJd567C+86An
26pidEnkzTy8J884QiSrIvmvbu+AeeGBCtps2NVYck/gJqwX+X2Tz/eKYFftkPon
Gfs6J2fmZQki2GvEchOhDDQQ5BAiTfEqVSJEbGeizQ30VMj1d5QTF1yelsw084cr
82bJaZ9ERvGAww==
-----END CERTIFICATE-----
Generated at Wed May 13 01:17:48 2026 by rpki-client