Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: Y9Y6neJuSJzu85LPHmNbR9UnM96zOVwVaTw8COoVQSo=
Subject key identifier: 9C:9C:8E:F5:CA:85:3C:1C:73:F6:98:E9:D3:49:63:36:DD:E6:64:BE
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019E20FFD20798613AD693B33586F829B106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1264
Signing time: Wed 13 May 2026 11:01:36 +0000
Manifest this update: Wed 13 May 2026 11:01:36 +0000
Manifest next update: Thu 14 May 2026 11:01:36 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: w/XM5OdLxRC40D++S5j6P+weqXe1UQF+lMF3j2v3FWE=)
3: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (hash: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:d2:07:98:61:3a:d6:93:b3:35:86:f8:29:b1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: May 13 11:01:36 2026 GMT
Not After : May 14 11:01:36 2026 GMT
Subject: CN=9c9c8ef5ca853c1c73f698e9d3496336dde664be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:46:cd:24:f1:5e:76:98:dc:26:e2:c9:4b:
8d:d1:b6:47:ab:49:fc:ab:5a:0b:f7:27:17:3b:e4:
49:a8:b1:01:70:b3:6d:d3:48:d2:22:32:3e:b9:36:
75:66:e2:a9:58:77:4b:82:8a:3a:d5:08:8e:d7:cd:
0c:ab:d5:48:ef:91:6d:2e:4d:60:c3:67:e6:c8:27:
34:6a:1a:0c:33:0a:f9:69:7c:3b:40:82:62:00:32:
10:00:69:88:6f:ae:f3:1e:2c:b0:f7:9d:b4:ab:91:
24:f6:58:c9:e2:97:cf:0f:d8:82:eb:f1:a5:99:8e:
9b:b8:93:b9:7e:61:45:99:3b:3c:02:d0:6d:e6:35:
3c:f1:30:a5:28:89:22:37:3a:30:52:d8:7f:82:fc:
36:69:10:d1:db:6a:10:66:f6:b4:69:b0:df:da:02:
da:92:70:2a:8c:c2:df:5e:4c:f1:0d:93:9f:3c:f5:
bd:0f:b1:bb:5b:c8:26:f3:e9:04:e1:29:05:46:99:
17:99:46:3b:66:4e:8f:25:c1:60:80:e8:da:72:62:
70:6b:a2:6c:c9:c7:16:2b:4b:ba:b6:23:f6:33:b1:
3a:d1:a6:0b:78:b2:57:d4:93:b6:34:46:3b:13:0b:
db:18:20:63:fb:4c:a5:fb:1d:d4:6e:3b:df:fd:f5:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9C:8E:F5:CA:85:3C:1C:73:F6:98:E9:D3:49:63:36:DD:E6:64:BE
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:38:44:b8:93:5e:c8:f9:86:12:c6:b3:6b:14:3b:4d:14:63:
ca:e0:f3:03:c3:15:65:36:16:8c:63:1c:3e:c7:14:26:79:0a:
5e:86:a6:d5:69:49:ae:14:95:09:fd:41:2f:78:23:0f:2e:46:
01:61:7b:71:e8:01:68:17:bc:58:e6:36:e3:a1:36:fd:59:e9:
21:ac:de:ae:d2:5a:f5:fc:8e:86:7c:dd:4a:51:c7:11:18:9e:
ed:b3:ee:e9:de:1e:4c:42:7f:a2:94:61:06:11:77:52:b3:94:
61:45:ce:bf:a1:3b:3d:4d:ef:00:a6:7e:a3:18:c3:5a:ba:53:
c5:8a:eb:73:78:42:bd:86:0a:eb:e2:52:c9:ee:a6:ad:1b:8f:
26:f1:5e:be:ba:87:12:82:1c:9d:f6:19:7b:17:d4:91:75:25:
de:92:51:5b:d9:d2:68:29:32:bc:aa:c2:ee:26:1b:42:17:3a:
cc:02:2d:c9:e1:d1:3c:88:b7:cc:6c:de:9c:1c:e8:b0:29:1f:
7a:00:c4:8a:7a:b7:41:3a:27:21:53:f1:7d:38:e0:40:02:04:
eb:0b:f4:41:a0:36:f4:7f:26:1a:7d:ba:80:88:0b:9f:d8:3f:
aa:f4:ae:88:8e:af:61:c1:7e:30:13:a1:b0:58:10:f7:07:ef:
5e:da:6f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/9IHmGE61pOzNYb4KbEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw
NDYyZDEwHhcNMjYwNTEzMTEwMTM2WhcNMjYwNTE0MTEwMTM2WjAzMTEwLwYDVQQD
Eyg5YzljOGVmNWNhODUzYzFjNzNmNjk4ZTlkMzQ5NjMzNmRkZTY2NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphxGzSTxXnaY3CbiyUuN0bZHq0n8
q1oL9ycXO+RJqLEBcLNt00jSIjI+uTZ1ZuKpWHdLgoo61QiO180Mq9VI75FtLk1g
w2fmyCc0ahoMMwr5aXw7QIJiADIQAGmIb67zHiyw9520q5Ek9ljJ4pfPD9iC6/Gl
mY6buJO5fmFFmTs8AtBt5jU88TClKIkiNzowUth/gvw2aRDR22oQZva0abDf2gLa
knAqjMLfXkzxDZOfPPW9D7G7W8gm8+kE4SkFRpkXmUY7Zk6PJcFggOjacmJwa6Js
yccWK0u6tiP2M7E60aYLeLJX1JO2NEY7EwvbGCBj+0yl+x3Ubjvf/fXjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJycjvXKhTwcc/aY6dNJYzbd5mS+MB8GA1UdIwQY
MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt
MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm
LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzhEuJNe
yPmGEsazaxQ7TRRjyuDzA8MVZTYWjGMcPscUJnkKXoam1WlJrhSVCf1BL3gjDy5G
AWF7cegBaBe8WOY246E2/VnpIazertJa9fyOhnzdSlHHERie7bPu6d4eTEJ/opRh
BhF3UrOUYUXOv6E7PU3vAKZ+oxjDWrpTxYrrc3hCvYYK6+JSye6mrRuPJvFevrqH
EoIcnfYZexfUkXUl3pJRW9nSaCkyvKrC7iYbQhc6zAItyeHRPIi3zGzenBzosCkf
egDEinq3QTonIVPxfTjgQAIE6wv0QaA29H8mGn26gIgLn9g/qvSuiI6vYcF+MBOh
sFgQ9wfvXtpvGg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:11:24 2026 by rpki-client