Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: Say7SAujDxFz3mDPu12uLlOTm23uZc5G7JD6JnXPwkM=
Subject key identifier: 96:D8:51:0C:B8:17:E9:12:5B:2B:D1:F2:3F:B8:88:F7:DC:B6:5C:03
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019E1E35F1B7D282E30D8BE4AC7A713B0F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 09C7
Signing time: Tue 12 May 2026 22:01:52 +0000
Manifest this update: Tue 12 May 2026 22:01:52 +0000
Manifest next update: Wed 13 May 2026 22:01:52 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: oiFGsLQOhXBqXvnqjRja/4m47N/wmcOk3PBgDsIyq6g=)
2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f1:b7:d2:82:e3:0d:8b:e4:ac:7a:71:3b:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: May 12 22:01:52 2026 GMT
Not After : May 13 22:01:52 2026 GMT
Subject: CN=96d8510cb817e9125b2bd1f23fb888f7dcb65c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:f2:bb:26:0a:69:5e:17:2c:da:dc:dd:36:
55:40:c3:0a:0e:ac:33:68:eb:70:d9:b4:70:b9:ff:
9a:83:32:d8:cb:33:ae:04:1d:22:8d:14:17:94:58:
bf:ba:c3:93:ce:d1:80:cf:f7:34:14:5c:16:89:f9:
aa:56:32:b1:89:c1:94:2e:b9:76:4e:6f:28:4c:7b:
5f:9e:f6:dc:f5:5f:30:a0:1b:6d:61:dc:97:e8:3a:
3a:3b:01:e0:3f:38:cf:d3:68:1f:de:5d:bc:7d:77:
34:09:85:cc:4d:49:26:61:12:a9:4d:25:b5:88:e9:
ec:8b:9c:bf:7c:d4:f4:95:65:a3:13:ba:da:99:26:
bb:85:e1:a3:41:61:67:c2:f3:81:3a:24:27:10:81:
01:98:e8:42:51:0c:28:26:38:76:7a:84:7f:24:24:
10:89:d3:6f:09:1e:ab:83:f4:1a:ee:e3:7c:31:ce:
86:86:63:99:84:24:1c:b4:c1:ac:24:8e:df:01:e1:
01:01:69:a4:48:f1:9b:2c:44:3b:69:21:62:14:79:
93:4d:0a:c7:8b:02:9f:ce:d5:7f:d1:99:66:ed:ea:
5c:ea:a4:bf:e6:6c:c3:78:e2:1a:4a:33:e8:81:5c:
d0:42:33:02:a7:02:f6:bc:4c:b9:45:84:79:5d:89:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:51:0C:B8:17:E9:12:5B:2B:D1:F2:3F:B8:88:F7:DC:B6:5C:03
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c6:3b:24:e4:ba:0d:d7:58:8e:59:a4:fc:c0:e5:4e:54:6b:
f4:87:3a:d5:9b:14:d1:99:af:ac:f9:fd:39:58:e7:29:f4:4a:
cf:c4:a7:f5:8a:96:ed:78:5f:68:4b:4e:5b:f7:73:e9:f6:de:
65:0e:f2:b1:4a:c8:6f:9a:0d:14:94:80:e9:1a:f1:0e:67:89:
73:77:0c:5c:7d:0a:17:c3:ca:a2:94:d1:2a:f0:b5:2a:29:89:
d1:dc:c6:b1:f5:2d:6b:a0:92:e0:76:0d:38:93:c9:cc:95:c0:
62:aa:c5:1c:4f:08:ed:e1:9e:22:1e:72:71:c9:d1:9f:b4:bf:
ff:68:27:56:48:17:b8:db:4e:a3:f4:ca:97:d2:b9:9a:c4:cd:
99:48:02:c3:76:5a:95:8b:ff:0d:e1:a4:32:15:61:22:45:25:
f9:3c:a0:1e:a3:45:1d:14:5c:32:b6:bd:9a:03:9e:d5:4d:bd:
fe:ad:9e:95:1d:7b:00:21:05:43:54:6e:5b:9e:de:11:aa:5f:
8f:30:53:93:6f:1a:ed:65:80:67:9f:86:78:e9:ea:5e:07:e3:
3e:98:ff:b6:aa:df:6d:16:d0:6f:16:6e:07:3a:80:97:a3:2a:
97:bb:b7:f2:2c:07:d9:b9:af:a6:3e:25:11:77:0a:e5:d3:f1:
9d:0e:5f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNfG30oLjDYvkrHpxOw97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjYwNTEyMjIwMTUyWhcNMjYwNTEzMjIwMTUyWjAzMTEwLwYDVQQD
Eyg5NmQ4NTEwY2I4MTdlOTEyNWIyYmQxZjIzZmI4ODhmN2RjYjY1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB3yuyYKaV4XLNrc3TZVQMMKDqwz
aOtw2bRwuf+agzLYyzOuBB0ijRQXlFi/usOTztGAz/c0FFwWifmqVjKxicGULrl2
Tm8oTHtfnvbc9V8woBttYdyX6Do6OwHgPzjP02gf3l28fXc0CYXMTUkmYRKpTSW1
iOnsi5y/fNT0lWWjE7ramSa7heGjQWFnwvOBOiQnEIEBmOhCUQwoJjh2eoR/JCQQ
idNvCR6rg/Qa7uN8Mc6GhmOZhCQctMGsJI7fAeEBAWmkSPGbLEQ7aSFiFHmTTQrH
iwKfztV/0Zlm7epc6qS/5mzDeOIaSjPogVzQQjMCpwL2vEy5RYR5XYllPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbYUQy4F+kSWyvR8j+4iPfctlwDMB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMY7JOS6
DddYjlmk/MDlTlRr9Ic61ZsU0ZmvrPn9OVjnKfRKz8Sn9YqW7XhfaEtOW/dz6fbe
ZQ7ysUrIb5oNFJSA6RrxDmeJc3cMXH0KF8PKopTRKvC1KimJ0dzGsfUta6CS4HYN
OJPJzJXAYqrFHE8I7eGeIh5yccnRn7S//2gnVkgXuNtOo/TKl9K5msTNmUgCw3Za
lYv/DeGkMhVhIkUl+TygHqNFHRRcMra9mgOe1U29/q2elR17ACEFQ1RuW57eEapf
jzBTk28a7WWAZ5+GeOnqXgfjPpj/tqrfbRbQbxZuBzqAl6Mql7u38iwH2bmvpj4l
EXcK5dPxnQ5fLg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:04 2026 by rpki-client