Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: FRrJqRSipVwO4ku6MYCeVc9uws7zfdAv/5jHrd+Rlig=
Subject key identifier: 26:4A:A8:B4:75:B9:93:01:70:62:F5:1A:ED:23:25:18:E3:1C:A7:8C
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 019E1D22AFAC3236FE3624C2A0F793B96864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0D13
Signing time: Tue 12 May 2026 17:01:12 +0000
Manifest this update: Tue 12 May 2026 17:01:12 +0000
Manifest next update: Wed 13 May 2026 17:01:12 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: ALKoG/LbZZXKbApqEu9EjEmiBmc3TSwmkJa4n1uV/yg=)
2: lsrjMA86eRQxhGEgie-FVkLeiRM.roa (hash: F6hSSs8gy1aleZ2DoCsRSqj6enBfgmEx5l9tec+wl2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:af:ac:32:36:fe:36:24:c2:a0:f7:93:b9:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: May 12 17:01:12 2026 GMT
Not After : May 13 17:01:12 2026 GMT
Subject: CN=264aa8b475b993017062f51aed232518e31ca78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:d9:7d:2d:74:5b:e6:0a:20:97:99:38:b6:
5b:fd:1a:8a:5b:d0:16:d4:a9:d8:22:c4:67:48:9d:
df:0e:9f:eb:65:60:32:16:c3:33:3a:80:e0:23:00:
af:49:72:31:db:5a:d4:18:e6:ef:18:98:d3:ad:00:
23:d0:ef:1c:88:58:8c:6c:15:c9:0a:97:0c:fc:23:
2b:81:91:27:d1:a3:35:f2:31:a0:a4:45:08:63:f8:
7d:cc:1a:da:10:fb:99:8f:29:d9:9a:8c:b2:4d:6c:
a5:8a:a4:4d:63:94:55:ee:b0:dc:dd:23:c9:aa:55:
d8:2f:d5:f7:f8:90:90:2b:b6:95:80:17:b7:98:55:
c0:46:86:a0:5e:10:26:54:b4:5c:86:0c:35:3c:4b:
1b:ac:a0:6e:c4:8c:c0:7d:ef:20:61:52:2a:58:d8:
4e:16:24:63:dd:91:15:c5:72:4a:4c:f4:72:94:dd:
2f:be:81:0f:d9:7e:c0:4a:35:77:f2:75:de:1b:6d:
db:d8:b5:13:97:ae:f3:cf:cb:ab:aa:2e:1a:52:62:
14:9f:18:e6:3d:d6:90:43:5b:95:03:5e:cd:8f:b5:
1b:51:1e:6b:c1:0c:db:99:10:a2:5a:5e:c1:f5:40:
40:74:1e:9b:36:ea:5d:a8:46:77:de:8f:8e:19:83:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:A8:B4:75:B9:93:01:70:62:F5:1A:ED:23:25:18:E3:1C:A7:8C
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:b2:4c:42:63:90:f3:a1:74:11:4a:00:8b:61:56:4f:3e:
57:b4:a3:e4:8e:9f:09:e9:62:3e:f8:a8:55:11:64:c7:6a:72:
8b:6b:f2:f1:80:7f:93:bc:58:66:5c:01:5e:c8:93:5b:7b:5e:
59:e7:c5:56:6e:5c:ae:75:5b:d8:af:cc:58:ea:0c:6d:3c:cd:
40:91:5c:5f:28:6c:94:90:26:a4:fb:ff:64:6a:07:55:0b:e4:
50:d6:e1:15:da:30:7d:44:48:6a:fd:8b:ed:8c:2a:32:cc:b7:
4f:4f:cc:1f:f7:46:35:1c:b7:8c:9d:4f:4c:79:4b:99:0f:f7:
12:d4:d8:0e:9a:3e:b0:6c:21:2d:9a:f9:80:3c:5b:ea:92:07:
81:29:e8:35:28:6a:58:b8:44:72:4e:ed:dc:19:f4:11:31:49:
d5:ac:94:6d:bd:b3:b2:65:7d:40:3e:70:ee:e3:b4:4a:20:e6:
f5:ea:b6:fa:8b:83:31:94:65:f3:72:82:1d:bc:dd:96:f3:23:
31:3a:54:27:b5:14:6c:c4:1a:14:ed:15:a3:fe:ac:8e:9d:1e:
79:83:2a:cd:38:dc:80:b7:0f:8d:61:a6:fb:2a:7d:4b:f9:18:
3c:cc:15:c7:d0:bc:d2:7a:80:fd:4f:c5:f9:a8:9e:ce:8d:c0:
55:88:09:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIq+sMjb+NiTCoPeTuWhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZDQxMTY5NzVkM2U4N2JkOGEyOGU2NDNjNjlhMzA4MWRl
MDAxOWYwHhcNMjYwNTEyMTcwMTEyWhcNMjYwNTEzMTcwMTEyWjAzMTEwLwYDVQQD
EygyNjRhYThiNDc1Yjk5MzAxNzA2MmY1MWFlZDIzMjUxOGUzMWNhNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvZfS10W+YKIJeZOLZb/RqKW9AW
1KnYIsRnSJ3fDp/rZWAyFsMzOoDgIwCvSXIx21rUGObvGJjTrQAj0O8ciFiMbBXJ
CpcM/CMrgZEn0aM18jGgpEUIY/h9zBraEPuZjynZmoyyTWyliqRNY5RV7rDc3SPJ
qlXYL9X3+JCQK7aVgBe3mFXARoagXhAmVLRchgw1PEsbrKBuxIzAfe8gYVIqWNhO
FiRj3ZEVxXJKTPRylN0vvoEP2X7ASjV38nXeG23b2LUTl67zz8urqi4aUmIUnxjm
PdaQQ1uVA17Nj7UbUR5rwQzbmRCiWl7B9UBAdB6bNupdqEZ33o+OGYMmYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZKqLR1uZMBcGL1Gu0jJRjjHKeMMB8GA1UdIwQY
MBaAFPLUEWl10+h72KKOZDxpowgd4AGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAt
ZmFhYjljYWUxZTgxLzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81OTk2ZTEtMmZmMC00YmI3LWE4ODAtZmFhYjljYWUxZTgx
LzEvOHRRUmFYWFQ2SHZZb281a1BHbWpDQjNnQVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVuyTEJj
kPOhdBFKAIthVk8+V7Sj5I6fCeliPvioVRFkx2pyi2vy8YB/k7xYZlwBXsiTW3te
WefFVm5crnVb2K/MWOoMbTzNQJFcXyhslJAmpPv/ZGoHVQvkUNbhFdowfURIav2L
7YwqMsy3T0/MH/dGNRy3jJ1PTHlLmQ/3EtTYDpo+sGwhLZr5gDxb6pIHgSnoNShq
WLhEck7t3Bn0ETFJ1ayUbb2zsmV9QD5w7uO0SiDm9eq2+ouDMZRl83KCHbzdlvMj
MTpUJ7UUbMQaFO0Vo/6sjp0eeYMqzTjcgLcPjWGm+yp9S/kYPMwVx9C80nqA/U/F
+aiezo3AVYgJzg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:43 2026 by rpki-client