Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: GnPDO8m6fOOLMKV9ZzE11VqZocWBdUgR2DAYPGkuHzE=
Subject key identifier: BD:A7:84:16:FE:FA:47:78:4E:4B:A0:70:A8:C3:B6:B4:60:BF:88:11
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019E1D9030B348CEBDFA111FEA47465B79BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 14FC
Signing time: Tue 12 May 2026 19:00:49 +0000
Manifest this update: Tue 12 May 2026 19:00:49 +0000
Manifest next update: Wed 13 May 2026 19:00:49 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: DPR2u3hnD8Xi86LkMkN4UQoFIF4XVzV8wgDeTpadX/o=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:30:b3:48:ce:bd:fa:11:1f:ea:47:46:5b:79:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: May 12 19:00:49 2026 GMT
Not After : May 13 19:00:49 2026 GMT
Subject: CN=bda78416fefa47784e4ba070a8c3b6b460bf8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:2c:1c:3b:e5:9d:b4:d2:4d:6a:19:a1:37:
86:08:d6:89:0c:f2:8d:71:98:de:27:fc:66:da:fb:
17:9c:61:fe:f3:37:2a:ba:3c:66:ca:2d:bc:09:95:
0c:70:b9:17:fa:ba:84:0a:82:79:8f:b9:8e:1d:00:
bc:a4:f4:b7:33:98:4d:7e:79:b2:23:4a:2f:3a:de:
03:7c:64:fe:75:d1:96:1e:86:eb:91:d5:36:5b:53:
fb:2f:01:d8:90:3e:51:9a:3c:dc:3d:31:c1:90:d3:
24:25:4b:4a:4b:06:d8:26:3a:24:42:b2:85:5c:79:
11:3b:3c:a1:7a:03:fa:d5:c5:97:23:bd:1a:6f:22:
08:6c:c3:f0:c3:c6:05:0f:05:9d:63:9f:90:4e:73:
e4:33:18:65:19:8b:5d:9c:75:c2:54:c1:2b:24:02:
17:d0:44:dd:32:75:82:e4:c6:22:2a:56:43:e2:6b:
e4:be:66:de:8d:c2:a6:22:3f:9b:76:c1:a9:55:66:
40:86:00:90:ef:bb:18:0c:df:bc:8c:f0:d1:3a:b3:
8c:f6:e7:49:6f:7d:5a:08:4c:59:b0:33:7f:a4:d5:
b5:b0:c4:d5:7b:ef:64:8b:35:70:93:be:a3:1a:13:
76:30:0f:a5:11:25:ff:ba:96:4c:85:c0:1e:86:dc:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:84:16:FE:FA:47:78:4E:4B:A0:70:A8:C3:B6:B4:60:BF:88:11
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:a4:a8:fa:30:91:36:df:55:26:1b:8b:4c:18:c8:a5:a4:
b6:e8:cd:0d:32:77:01:8f:c5:e6:c8:f5:55:37:b4:30:50:0f:
bb:1f:da:ec:c3:52:eb:75:17:da:75:9e:f2:a5:e9:49:f4:0e:
db:16:dc:40:5d:61:c9:5d:44:ab:86:78:c2:7f:f0:dd:a1:78:
6a:9b:fa:51:aa:bf:44:5a:7f:2b:34:8e:78:0c:ab:70:71:a0:
44:99:ec:20:8c:fb:a2:50:e7:5e:f4:44:50:6f:a4:cf:08:83:
d7:3b:4f:a1:6f:1d:ba:27:62:ca:98:a5:ff:f5:82:d9:08:0b:
58:fa:db:0c:c4:11:c3:ac:d6:9f:a0:cd:04:c6:e4:df:33:4b:
ad:67:ea:1f:5f:56:c8:a6:cb:70:ab:c7:46:76:e1:0b:b3:be:
19:e0:ef:c0:5d:31:9e:43:87:f1:ee:65:fc:bf:b3:de:8e:34:
f6:cf:aa:c8:5b:d1:bf:15:30:64:ee:78:64:ea:ab:6a:75:4e:
ae:d9:72:4d:39:28:e8:81:10:90:f2:0e:c3:41:25:ff:80:fe:
6c:80:e6:c5:af:c3:c7:44:55:11:21:00:14:56:b1:9f:01:45:
73:d1:2e:ac:b0:b5:f9:90:af:84:c9:d1:ea:31:f8:ed:3a:6c:
ab:d7:9d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkDCzSM69+hEf6kdGW3m7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjYwNTEyMTkwMDQ5WhcNMjYwNTEzMTkwMDQ5WjAzMTEwLwYDVQQD
EyhiZGE3ODQxNmZlZmE0Nzc4NGU0YmEwNzBhOGMzYjZiNDYwYmY4ODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptEsHDvlnbTSTWoZoTeGCNaJDPKN
cZjeJ/xm2vsXnGH+8zcqujxmyi28CZUMcLkX+rqECoJ5j7mOHQC8pPS3M5hNfnmy
I0ovOt4DfGT+ddGWHobrkdU2W1P7LwHYkD5RmjzcPTHBkNMkJUtKSwbYJjokQrKF
XHkROzyhegP61cWXI70abyIIbMPww8YFDwWdY5+QTnPkMxhlGYtdnHXCVMErJAIX
0ETdMnWC5MYiKlZD4mvkvmbejcKmIj+bdsGpVWZAhgCQ77sYDN+8jPDROrOM9udJ
b31aCExZsDN/pNW1sMTVe+9kizVwk76jGhN2MA+lESX/upZMhcAehtyaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2nhBb++kd4TkugcKjDtrRgv4gRMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxykqPow
kTbfVSYbi0wYyKWktujNDTJ3AY/F5sj1VTe0MFAPux/a7MNS63UX2nWe8qXpSfQO
2xbcQF1hyV1Eq4Z4wn/w3aF4apv6Uaq/RFp/KzSOeAyrcHGgRJnsIIz7olDnXvRE
UG+kzwiD1ztPoW8duidiypil//WC2QgLWPrbDMQRw6zWn6DNBMbk3zNLrWfqH19W
yKbLcKvHRnbhC7O+GeDvwF0xnkOH8e5l/L+z3o409s+qyFvRvxUwZO54ZOqranVO
rtlyTTko6IEQkPIOw0El/4D+bIDmxa/Dx0RVESEAFFaxnwFFc9EurLC1+ZCvhMnR
6jH47Tpsq9edzg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:35 2026 by rpki-client