Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: idsHYjMzu0lWDe/vOB+a9/f0kmwPJZLVyXd4B2XB4KM=
Subject key identifier: 86:27:CE:77:DE:3B:79:A3:15:AD:36:15:DA:B4:99:A8:5F:7B:7E:43
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019E1E3571A965B20BE5CD5C8E75792C9F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 16B2
Signing time: Tue 12 May 2026 22:01:19 +0000
Manifest this update: Tue 12 May 2026 22:01:19 +0000
Manifest next update: Wed 13 May 2026 22:01:19 +0000
Files and hashes: 1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: DfivbTcHMrjuML9iBlMlXQKBGRFdGDSa8VA0NE6CJ5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:71:a9:65:b2:0b:e5:cd:5c:8e:75:79:2c:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: May 12 22:01:19 2026 GMT
Not After : May 13 22:01:19 2026 GMT
Subject: CN=8627ce77de3b79a315ad3615dab499a85f7b7e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:0a:26:7b:a6:86:60:7a:6e:14:01:15:00:
d6:bb:1a:0e:2a:66:1d:cd:01:0a:1c:f3:46:77:55:
c6:90:b7:ed:30:db:0f:18:d3:68:e0:1e:9a:a3:f6:
ed:74:51:e4:04:83:6d:dc:f7:2c:23:c8:6a:35:90:
ff:63:97:a8:55:02:de:1d:10:10:71:f5:9f:cb:53:
bb:7f:ec:66:c0:78:11:61:a5:4f:93:8d:79:de:16:
c1:54:c8:e5:7d:12:5d:00:0f:61:74:47:57:da:73:
60:61:bd:91:13:fc:ef:17:e6:c8:fa:3c:6d:64:16:
99:ee:1e:50:ab:5d:4d:0f:54:02:b0:25:6d:f7:8e:
5a:9c:2c:4a:84:aa:17:e6:0a:ce:20:82:33:10:e8:
09:c4:d7:ae:4b:64:ee:d0:dd:35:07:c8:ad:0e:28:
38:99:04:55:4d:d6:b0:90:b4:a5:6c:2b:c7:40:c7:
7f:ba:98:f1:ea:76:da:45:6a:3b:e6:cd:e8:a5:2a:
c5:51:c0:95:5f:48:70:1e:19:8c:3c:4d:d9:39:e4:
f4:d4:bb:1e:2b:14:1a:5a:63:59:c1:17:20:75:a6:
d1:de:f5:e8:0d:46:66:5f:be:e1:a1:f2:70:ab:73:
f6:89:f3:b8:3a:9f:ad:41:ff:95:89:b7:2a:2d:57:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:27:CE:77:DE:3B:79:A3:15:AD:36:15:DA:B4:99:A8:5F:7B:7E:43
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:56:40:89:25:02:24:53:95:c9:1b:9e:66:af:d4:fb:7c:1e:
11:8c:d9:fe:1d:8c:e4:67:c5:62:22:0d:c6:b6:fb:5b:86:73:
99:17:42:a9:d0:f6:29:82:4b:d5:a7:61:19:8a:1b:c8:51:3d:
51:33:db:50:cf:72:29:99:53:87:05:96:19:3a:b2:00:ed:e7:
d4:28:c3:87:62:76:62:83:33:6d:ff:dc:94:76:76:86:62:be:
41:7d:a4:be:da:ed:81:17:8f:1b:4a:2a:60:99:70:22:2e:fc:
7e:b2:ec:8f:d9:e6:f7:c8:2e:35:2e:27:05:39:af:c2:24:42:
ad:ca:11:70:2a:87:10:9f:b4:07:1e:3b:a8:75:b5:28:f9:17:
69:3f:6c:a0:78:76:67:96:f5:f1:15:b3:51:53:eb:43:59:66:
5e:53:2d:50:88:09:3c:14:af:d0:97:7c:72:f2:83:00:43:4c:
75:08:ab:ca:9d:f2:9a:bc:3a:cc:53:52:55:d6:84:19:56:75:
38:3c:b3:84:04:1c:66:26:d7:70:1d:bd:70:42:50:82:92:67:
05:f6:d2:d0:37:90:40:f8:bc:76:76:87:a6:b5:3a:5f:4f:ad:
5a:0c:1b:26:11:4e:36:ce:3d:e7:a1:5e:4f:2c:de:c3:ce:49:
39:99:c3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNXGpZbIL5c1cjnV5LJ9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm
Y2FhOWYwHhcNMjYwNTEyMjIwMTE5WhcNMjYwNTEzMjIwMTE5WjAzMTEwLwYDVQQD
Eyg4NjI3Y2U3N2RlM2I3OWEzMTVhZDM2MTVkYWI0OTlhODVmN2I3ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbgKJnumhmB6bhQBFQDWuxoOKmYd
zQEKHPNGd1XGkLftMNsPGNNo4B6ao/btdFHkBINt3PcsI8hqNZD/Y5eoVQLeHRAQ
cfWfy1O7f+xmwHgRYaVPk4153hbBVMjlfRJdAA9hdEdX2nNgYb2RE/zvF+bI+jxt
ZBaZ7h5Qq11ND1QCsCVt945anCxKhKoX5grOIIIzEOgJxNeuS2Tu0N01B8itDig4
mQRVTdawkLSlbCvHQMd/upjx6nbaRWo75s3opSrFUcCVX0hwHhmMPE3ZOeT01Lse
KxQaWmNZwRcgdabR3vXoDUZmX77hofJwq3P2ifO4Op+tQf+VibcqLVc9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYnznfeO3mjFa02Fdq0mahfe35DMB8GA1UdIwQY
MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt
YmM1YjY5MTQ0NTg3LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3
LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlZAiSUC
JFOVyRueZq/U+3weEYzZ/h2M5GfFYiINxrb7W4ZzmRdCqdD2KYJL1adhGYobyFE9
UTPbUM9yKZlThwWWGTqyAO3n1CjDh2J2YoMzbf/clHZ2hmK+QX2kvtrtgRePG0oq
YJlwIi78frLsj9nm98guNS4nBTmvwiRCrcoRcCqHEJ+0Bx47qHW1KPkXaT9soHh2
Z5b18RWzUVPrQ1lmXlMtUIgJPBSv0Jd8cvKDAENMdQiryp3ymrw6zFNSVdaEGVZ1
ODyzhAQcZibXcB29cEJQgpJnBfbS0DeQQPi8dnaHprU6X0+tWgwbJhFONs4956Fe
Tyzew85JOZnDGg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:15 2026 by rpki-client