Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: TCHUbjEImBwtFj1MK/0wPDKFOXmdDbAlEKBXmNH/+64=
Subject key identifier: AA:9F:2F:E4:DD:16:52:B6:43:8B:97:5D:55:96:AA:26:43:98:4F:D2
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019E1D9111562913A8F9DEC1AD0171CCA903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 0907
Signing time: Tue 12 May 2026 19:01:46 +0000
Manifest this update: Tue 12 May 2026 19:01:46 +0000
Manifest next update: Wed 13 May 2026 19:01:46 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: 1UvhS33VN3VMyuWuErQ1aaw3QkM4E66jVdrg59KE+0c=)
2: CJhFdSugh2xrtXcQtigps8wHu28.roa (hash: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:11:56:29:13:a8:f9:de:c1:ad:01:71:cc:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: May 12 19:01:46 2026 GMT
Not After : May 13 19:01:46 2026 GMT
Subject: CN=aa9f2fe4dd1652b6438b975d5596aa2643984fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:d9:1f:16:77:7c:ba:9b:30:62:34:b5:05:
a2:57:d6:af:71:b4:3e:b5:68:61:0c:be:e7:11:2a:
a6:e7:9d:6c:bb:27:99:a8:9a:32:a7:83:96:d0:6f:
8a:e3:08:52:07:10:52:80:a6:8a:de:8e:b9:0e:55:
25:52:e9:29:fa:ff:61:86:3d:b9:b1:73:32:3e:b2:
ac:f8:37:4c:38:18:50:30:0e:e6:21:c0:9a:c1:1a:
6b:32:88:2e:94:35:ca:60:f7:64:f4:14:5e:7a:81:
72:07:bb:00:16:a7:b5:94:a9:8f:de:4d:64:03:c0:
e7:81:ba:15:b2:1d:03:ce:27:c4:6a:8b:2c:47:60:
b6:05:65:0c:2d:c8:9d:1c:09:05:63:f4:b1:b1:f7:
28:c1:cf:f9:a1:ca:06:5c:c6:23:f7:5b:7e:75:46:
95:6a:5d:e3:65:71:0b:9a:5a:e4:3b:78:17:49:14:
a4:87:9d:db:44:a0:45:5a:90:a9:1a:86:a8:eb:64:
d4:83:c6:86:7a:c1:9a:95:69:52:cc:e2:f5:c0:a7:
cc:a8:cc:a4:eb:ca:74:97:5b:e8:a6:fa:56:f4:d6:
9e:94:40:72:ee:c9:62:df:33:1a:98:d5:e1:39:87:
ab:54:1e:83:ae:e1:4b:be:78:83:35:4d:76:d4:05:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:2F:E4:DD:16:52:B6:43:8B:97:5D:55:96:AA:26:43:98:4F:D2
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:81:c1:7c:e8:2c:70:fd:c4:68:38:1f:0f:7a:1a:16:f4:
07:fb:69:48:0a:f4:80:f9:60:1e:a9:93:95:1e:c4:7f:83:9f:
c0:9f:51:d5:ab:1d:fc:8a:07:50:7d:aa:cb:0d:64:90:fb:5d:
be:fb:f5:25:55:67:43:33:03:85:09:8c:ba:c0:8c:61:4f:c5:
9d:9f:e4:31:c0:bd:41:bf:3d:72:8a:a5:69:18:a7:06:ca:6a:
e6:5c:52:fb:9c:01:72:0d:ae:74:c5:c7:ac:24:2e:74:d1:3c:
c9:7d:e3:53:0a:10:44:9a:57:37:68:25:33:a3:36:0a:6f:66:
41:b0:f1:ac:50:1b:62:da:60:9a:39:13:ed:ea:6a:14:ac:ad:
f5:44:9c:a2:2a:d4:7f:94:cf:c9:38:4e:dc:4b:c4:79:5b:29:
7d:d8:c8:f8:6f:54:db:a9:d5:5b:92:60:0b:3f:d1:4b:0f:20:
0f:e9:91:83:ce:1f:37:29:7d:6d:d8:44:b3:a1:3d:03:90:55:
ed:26:05:6c:b7:c4:89:94:c6:b9:36:31:69:80:ae:2f:21:de:
42:1d:21:53:58:49:7b:20:5c:5a:df:1c:ae:21:91:d1:d0:1e:
bb:b3:66:8a:e8:d6:73:7f:9f:5b:64:eb:09:61:a5:ca:2b:09:
9a:3a:97:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkRFWKROo+d7BrQFxzKkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm
OTgxYTgwHhcNMjYwNTEyMTkwMTQ2WhcNMjYwNTEzMTkwMTQ2WjAzMTEwLwYDVQQD
EyhhYTlmMmZlNGRkMTY1MmI2NDM4Yjk3NWQ1NTk2YWEyNjQzOTg0ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLvZHxZ3fLqbMGI0tQWiV9avcbQ+
tWhhDL7nESqm551suyeZqJoyp4OW0G+K4whSBxBSgKaK3o65DlUlUukp+v9hhj25
sXMyPrKs+DdMOBhQMA7mIcCawRprMogulDXKYPdk9BReeoFyB7sAFqe1lKmP3k1k
A8DngboVsh0DzifEaossR2C2BWUMLcidHAkFY/Sxsfcowc/5ocoGXMYj91t+dUaV
al3jZXELmlrkO3gXSRSkh53bRKBFWpCpGoao62TUg8aGesGalWlSzOL1wKfMqMyk
68p0l1vopvpW9NaelEBy7sli3zMamNXhOYerVB6DruFLvniDNU121AWWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqfL+TdFlK2Q4uXXVWWqiZDmE/SMB8GA1UdIwQY
MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt
ZjA3YTIxOGUxY2M3LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3
LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd2BwXzo
LHD9xGg4Hw96Ghb0B/tpSAr0gPlgHqmTlR7Ef4OfwJ9R1asd/IoHUH2qyw1kkPtd
vvv1JVVnQzMDhQmMusCMYU/FnZ/kMcC9Qb89coqlaRinBspq5lxS+5wBcg2udMXH
rCQudNE8yX3jUwoQRJpXN2glM6M2Cm9mQbDxrFAbYtpgmjkT7epqFKyt9UScoirU
f5TPyThO3EvEeVspfdjI+G9U26nVW5JgCz/RSw8gD+mRg84fNyl9bdhEs6E9A5BV
7SYFbLfEiZTGuTYxaYCuLyHeQh0hU1hJeyBcWt8criGR0dAeu7NmiujWc3+fW2Tr
CWGlyisJmjqXVA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:28 2026 by rpki-client