Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: AImsfpwz+VjVDNNZ9/z4/vxpGsyM6de0OOFQ7vHF6EM=
Subject key identifier: B7:F7:BC:DD:20:1F:B6:5D:EE:38:5C:A6:9C:D0:4D:39:05:2A:04:7C
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 019E1E6C384EB0463BDDDF8129DCD5D0A023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 0402
Signing time: Tue 12 May 2026 23:01:09 +0000
Manifest this update: Tue 12 May 2026 23:01:09 +0000
Manifest next update: Wed 13 May 2026 23:01:09 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: 0ptbqlPTg3bziEh/rdYZzWya3Gpofen3QkWx+vNnROY=)
2: w_cDoBQm48qO3UJDie6dGD-GT6A.roa (hash: 4d0oLWhWZ7o8XZ0xXiTGwVR/Fkht5a6EInFhOOT/M94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:38:4e:b0:46:3b:dd:df:81:29:dc:d5:d0:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: May 12 23:01:09 2026 GMT
Not After : May 13 23:01:09 2026 GMT
Subject: CN=b7f7bcdd201fb65dee385ca69cd04d39052a047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:d5:72:ac:7b:0a:01:d6:1a:31:87:a4:72:
24:dc:eb:e4:cc:09:9b:97:fb:2f:bb:f0:cd:20:0c:
e6:5d:cb:5a:d1:30:1e:2d:f0:60:d9:ff:d3:ad:f2:
59:2e:c0:04:09:b5:ec:2e:fe:af:ae:47:61:52:22:
05:77:82:c7:77:fc:fa:00:79:5e:b9:93:24:0d:cb:
1c:02:52:f5:10:0e:d8:46:f8:52:5d:92:82:e1:e8:
b5:3b:be:da:68:98:a6:a5:2a:71:cc:ee:af:d8:c0:
64:1a:6c:1d:8c:e4:1f:a0:7d:6e:c1:a1:a7:fe:2e:
3c:a5:83:f6:4b:4f:22:40:a8:a8:8d:ef:cc:9a:80:
f1:1f:c9:c6:be:ad:5e:2f:39:f3:1a:89:00:77:11:
94:ed:cf:38:c4:c8:66:c4:ca:38:44:02:4f:6d:5c:
69:88:5c:ce:2b:7a:d9:eb:0e:c6:79:f1:76:cb:74:
83:82:48:e4:73:b4:98:7f:b8:84:1a:22:80:09:d4:
f3:d6:ea:5e:c5:42:a4:3d:fe:0b:49:6c:77:29:60:
8f:f4:7d:31:48:96:91:5e:bf:f2:e1:ff:67:27:8d:
9c:7c:e1:ae:0b:4a:b8:bc:60:2f:b1:39:dd:58:87:
ef:1e:d2:e0:d7:24:86:14:30:8f:f7:16:20:71:28:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F7:BC:DD:20:1F:B6:5D:EE:38:5C:A6:9C:D0:4D:39:05:2A:04:7C
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:99:67:57:18:05:5b:e9:96:55:27:a4:31:6e:f4:89:64:
e7:89:69:0e:6f:72:ba:ab:f5:38:4e:2d:70:86:79:c9:8c:40:
72:8c:aa:9c:44:42:0d:d5:35:67:22:1a:d9:75:d5:1e:21:78:
f7:26:e7:47:71:19:bb:81:8f:ed:c9:99:6f:0f:a1:ab:eb:11:
47:d4:5c:e9:83:8c:98:e7:81:b9:13:d9:41:2f:cd:05:cf:5d:
50:7c:af:dd:97:21:62:1d:b0:2d:e5:70:06:2b:fb:06:90:31:
e6:1c:4d:76:3f:f0:b6:c7:03:44:81:8f:7c:22:94:2e:04:2a:
65:0e:47:3b:07:50:10:51:3e:56:71:b5:2b:5d:81:f9:5d:dc:
3f:40:0b:f6:e3:21:c8:9c:ea:61:35:df:fa:a9:af:44:46:7e:
f7:b7:c0:ce:bd:69:7e:a6:24:20:a6:9a:3f:24:c7:06:b3:41:
7c:3f:f6:a3:7f:a7:92:e6:5d:6b:27:be:e0:68:d1:a6:80:f5:
08:6c:66:f0:68:a1:24:89:c2:ff:fd:fd:9a:0c:2b:73:d8:cd:
d8:8b:88:7d:47:b6:e2:16:6f:cb:82:43:86:bf:e1:4b:fc:fd:
81:5e:45:84:2c:1d:03:05:c0:a4:8e:93:1f:a8:3d:32:22:58:
53:99:5b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebDhOsEY73d+BKdzV0KAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGI3MzRkZjRmYTZhZWUxMmVhOTkwNjU3YjAzNWExNjJi
NGE5ZTYwHhcNMjYwNTEyMjMwMTA5WhcNMjYwNTEzMjMwMTA5WjAzMTEwLwYDVQQD
EyhiN2Y3YmNkZDIwMWZiNjVkZWUzODVjYTY5Y2QwNGQzOTA1MmEwNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip7Vcqx7CgHWGjGHpHIk3OvkzAmb
l/svu/DNIAzmXcta0TAeLfBg2f/TrfJZLsAECbXsLv6vrkdhUiIFd4LHd/z6AHle
uZMkDcscAlL1EA7YRvhSXZKC4ei1O77aaJimpSpxzO6v2MBkGmwdjOQfoH1uwaGn
/i48pYP2S08iQKioje/MmoDxH8nGvq1eLznzGokAdxGU7c84xMhmxMo4RAJPbVxp
iFzOK3rZ6w7GefF2y3SDgkjkc7SYf7iEGiKACdTz1upexUKkPf4LSWx3KWCP9H0x
SJaRXr/y4f9nJ42cfOGuC0q4vGAvsTndWIfvHtLg1ySGFDCP9xYgcShyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf3vN0gH7Zd7jhcppzQTTkFKgR8MB8GA1UdIwQY
MBaAFPELc030+mruEuqZBlewNaFitKnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmIt
ZTE1MjUwMzkyODg3LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMmJkOGUtMmViOC00NTE1LTk1NmItZTE1MjUwMzkyODg3
LzEvOFF0elRmVDZhdTRTNnBrR1Y3QTFvV0swcWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiuZZ1cY
BVvpllUnpDFu9Ilk54lpDm9yuqv1OE4tcIZ5yYxAcoyqnERCDdU1ZyIa2XXVHiF4
9ybnR3EZu4GP7cmZbw+hq+sRR9Rc6YOMmOeBuRPZQS/NBc9dUHyv3ZchYh2wLeVw
Biv7BpAx5hxNdj/wtscDRIGPfCKULgQqZQ5HOwdQEFE+VnG1K12B+V3cP0AL9uMh
yJzqYTXf+qmvREZ+97fAzr1pfqYkIKaaPyTHBrNBfD/2o3+nkuZdaye+4GjRpoD1
CGxm8GihJInC//39mgwrc9jN2IuIfUe24hZvy4JDhr/hS/z9gV5FhCwdAwXApI6T
H6g9MiJYU5lbgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:58:06 2026 by rpki-client