Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: W2pgbb/8CRwEYOP/awS0H/Wx0d6N1CqXkOJhV7S5zfg=
Subject key identifier: 6C:4D:09:DC:3F:06:E5:F3:BC:7C:BC:66:5F:45:8E:14:44:7E:BC:58
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 019E1F112B7F4E0DE030DB0C8BBA4774E846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1897
Signing time: Wed 13 May 2026 02:01:19 +0000
Manifest this update: Wed 13 May 2026 02:01:19 +0000
Manifest next update: Thu 14 May 2026 02:01:19 +0000
Files and hashes: 1: J2vsYiO_j7zPiKzW4JGDK-XoS3M.roa (hash: CDGBFZZXjqUOo82TFc4xaYNNSk3nq1xi7rB9+MvdQeA=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: 613Dnn1ASvGne8yUlpD1f1o6+IXPIozlkTLl+GJDukw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:2b:7f:4e:0d:e0:30:db:0c:8b:ba:47:74:e8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: May 13 02:01:19 2026 GMT
Not After : May 14 02:01:19 2026 GMT
Subject: CN=6c4d09dc3f06e5f3bc7cbc665f458e14447ebc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:57:65:97:79:d3:4f:64:5b:f9:f4:a3:d8:
62:f8:69:1b:de:f5:05:f2:ee:93:a4:40:4b:7f:1d:
21:78:ac:6b:ba:a2:9f:f6:d3:0c:35:2c:8f:51:f5:
65:d2:05:a4:dd:73:9b:91:5e:90:d5:d0:e0:a9:56:
45:8f:2a:01:cf:57:d9:2c:e4:71:b2:1a:01:e1:21:
0a:60:31:4f:1f:0c:43:0e:45:5f:01:b4:1f:2e:70:
d8:ec:de:05:55:c1:39:88:29:3f:d4:88:9c:fa:26:
97:89:46:55:b2:51:fa:2e:2c:6c:fd:a2:d2:5b:0f:
80:5c:61:58:cf:7d:81:0b:d9:b2:b4:f4:92:88:f5:
fe:dc:9e:5f:2b:10:94:56:ce:7d:5f:40:87:75:cd:
cd:d1:64:b9:69:38:b0:b9:76:ac:57:63:67:44:5a:
62:15:38:d4:07:94:cc:87:85:6c:c6:72:77:6d:38:
0c:ab:2c:cf:69:30:44:34:3b:27:69:62:33:d6:51:
60:1f:54:71:5d:86:57:06:e4:2e:56:08:e6:a7:bc:
dc:d3:ba:a4:41:ed:ae:f2:c2:b9:bb:c2:12:d2:2d:
f1:b2:97:2a:39:30:42:2b:7a:48:c5:42:f4:f2:b5:
ae:bd:4a:7f:cc:c7:b5:35:c5:69:81:0f:ae:8d:70:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:09:DC:3F:06:E5:F3:BC:7C:BC:66:5F:45:8E:14:44:7E:BC:58
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:e1:7a:cd:2f:b3:ab:20:0a:f3:73:09:74:7d:63:8b:90:
8b:12:fe:59:79:86:db:47:8a:43:36:e8:22:cd:c0:5e:e7:da:
61:49:9e:87:08:81:40:dc:c2:a9:12:77:b5:b8:37:51:62:3e:
cd:49:06:ba:cc:7f:98:ff:26:3e:46:04:c2:14:9d:91:5e:96:
a6:01:e4:16:61:be:8f:b6:a3:c0:c0:ef:75:00:36:01:18:46:
83:e1:8a:4e:87:68:9d:e1:1c:28:e9:f1:29:e8:34:a3:48:f0:
c4:f9:ed:9d:59:86:5a:d3:a7:c6:d1:cc:ee:8a:d2:f1:50:c7:
74:1a:f6:99:9f:43:42:5a:f3:0e:d5:dc:cc:2d:a8:2d:63:68:
30:b8:00:5f:82:60:42:e7:8c:fd:42:58:d5:8f:1c:b7:8b:ba:
d5:e5:4f:54:1f:86:f5:2b:e8:79:5f:ba:a1:c9:c4:39:a7:4c:
80:74:91:6b:d8:d7:19:21:f7:e9:5b:c6:97:8a:c1:d2:17:b0:
80:ab:ed:34:9a:89:57:33:c4:f7:a2:8e:16:0e:80:b8:35:05:
c6:86:e4:db:ed:59:e8:cf:bd:6c:00:04:e8:10:50:bb:ef:01:
c0:3e:d8:6e:01:a7:0a:34:f3:f8:af:0e:b3:bd:5c:e2:eb:f3:
7b:ff:77:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fESt/Tg3gMNsMi7pHdOhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzg1NmU5NTZjNGFkZGI2MTU5OGYzYzI0ODlmMmJkZjZl
ZDFkMTgwHhcNMjYwNTEzMDIwMTE5WhcNMjYwNTE0MDIwMTE5WjAzMTEwLwYDVQQD
Eyg2YzRkMDlkYzNmMDZlNWYzYmM3Y2JjNjY1ZjQ1OGUxNDQ0N2ViYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqhXZZd5009kW/n0o9hi+Gkb3vUF
8u6TpEBLfx0heKxruqKf9tMMNSyPUfVl0gWk3XObkV6Q1dDgqVZFjyoBz1fZLORx
shoB4SEKYDFPHwxDDkVfAbQfLnDY7N4FVcE5iCk/1Iic+iaXiUZVslH6Lixs/aLS
Ww+AXGFYz32BC9mytPSSiPX+3J5fKxCUVs59X0CHdc3N0WS5aTiwuXasV2NnRFpi
FTjUB5TMh4VsxnJ3bTgMqyzPaTBENDsnaWIz1lFgH1RxXYZXBuQuVgjmp7zc07qk
Qe2u8sK5u8IS0i3xspcqOTBCK3pIxUL08rWuvUp/zMe1NcVpgQ+ujXC/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxNCdw/BuXzvHy8Zl9FjhREfrxYMB8GA1UdIwQY
MBaAFLPIVulWxK3bYVmPPCSJ8r327R0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMt
MWIwZWY0NGY3ODg0LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMtMWIwZWY0NGY3ODg0
LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7rhes0v
s6sgCvNzCXR9Y4uQixL+WXmG20eKQzboIs3AXufaYUmehwiBQNzCqRJ3tbg3UWI+
zUkGusx/mP8mPkYEwhSdkV6WpgHkFmG+j7ajwMDvdQA2ARhGg+GKTodoneEcKOnx
Keg0o0jwxPntnVmGWtOnxtHM7orS8VDHdBr2mZ9DQlrzDtXczC2oLWNoMLgAX4Jg
QueM/UJY1Y8ct4u61eVPVB+G9SvoeV+6ocnEOadMgHSRa9jXGSH36VvGl4rB0hew
gKvtNJqJVzPE96KOFg6AuDUFxobk2+1Z6M+9bAAE6BBQu+8BwD7YbgGnCjTz+K8O
s71c4uvze/93KA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:19:05 2026 by rpki-client