Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: LkSXjiR2tJ5IGGZD+WgSntFvDBOlzcAeAjNCxNw+Dc0=
Subject key identifier: 85:C6:8C:10:52:15:CA:B1:4C:FB:E1:69:3B:D9:11:92:10:BB:35:22
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 019E1ED9C3BADD2B219E34359FD4E9EFDFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 01:00:48 +0000
Manifest this update: Wed 13 May 2026 01:00:48 +0000
Manifest next update: Thu 14 May 2026 01:00:48 +0000
Files and hashes: 1: 2SUVJ80PsPV5Sm7U3L8hHtyTcHk.roa (hash: KC9QuJ44Bvhyw7hXPqUGMgqZJZPJd+t4xVPwghxLews=)
2: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: QLaJrvkpgI7p7/4YY/3z+TKYzHbpyGSHMmoQRe0SQko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c3:ba:dd:2b:21:9e:34:35:9f:d4:e9:ef:df:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: May 13 01:00:48 2026 GMT
Not After : May 14 01:00:48 2026 GMT
Subject: CN=85c68c105215cab14cfbe1693bd9119210bb3522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:90:ae:d5:8a:bf:8d:11:c6:2a:96:fb:25:
75:9a:13:00:89:01:dd:6a:75:c1:9e:dd:34:de:d8:
a0:ab:92:b5:67:58:ea:c2:cc:33:94:71:17:87:47:
94:f0:eb:b5:63:ef:a9:25:87:94:e0:60:07:ef:a2:
a6:54:af:25:87:57:8e:1e:c0:1e:a5:f0:eb:01:c1:
c4:98:e7:f6:30:89:ea:62:64:3c:7f:6a:aa:a5:27:
98:50:85:bc:8a:99:bd:b6:d1:10:40:f0:d0:59:1f:
84:54:a4:5a:96:21:d0:dc:0a:0d:a5:3a:19:da:18:
d1:5b:d8:b8:36:eb:6c:c0:7c:03:44:ba:99:63:a2:
5c:11:4e:1b:04:fa:55:19:2a:68:d4:87:4f:5b:bc:
ed:d1:f0:b5:79:b3:82:60:01:b7:86:04:bc:ea:83:
df:7b:e6:17:f6:64:1c:c3:e8:4a:e0:97:25:68:a8:
b4:52:da:fa:1b:cd:01:4b:25:8b:3c:84:29:1f:f0:
e5:0c:36:2a:b1:a6:be:a7:18:52:e3:2b:84:8e:90:
9e:96:10:e5:2b:0c:0c:d3:e8:7d:3d:bb:a9:e6:0f:
af:fa:ef:c0:69:a6:d0:ff:de:28:a8:e3:f8:1b:29:
16:24:38:41:82:b9:6c:4a:c5:ba:a2:26:ae:d7:a7:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:8C:10:52:15:CA:B1:4C:FB:E1:69:3B:D9:11:92:10:BB:35:22
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f0:e0:c0:ba:97:61:c3:40:36:d0:37:8c:f6:a3:70:d3:b0:
05:27:eb:44:44:ce:24:14:57:5b:5c:1d:e3:3e:eb:cb:50:67:
42:1b:cc:10:cc:1d:49:56:d1:3d:3e:d9:30:96:2d:b5:4c:ea:
a0:5b:b8:b2:1f:73:c0:51:a9:98:88:68:68:dd:33:d3:99:06:
2b:81:4e:1c:79:66:3f:90:bf:d7:5b:e1:22:7a:0c:11:7a:e4:
d9:a2:98:ee:6c:72:a2:3b:bb:52:6d:f9:76:84:ce:58:16:50:
91:b3:b1:eb:f6:d8:e6:96:36:89:f2:3b:c6:90:6a:d3:84:87:
95:b2:0e:51:e7:5a:c1:83:b2:90:0d:02:9b:9d:cc:95:1a:65:
ec:d3:4b:77:8f:9d:31:2d:27:8b:71:73:af:19:b5:30:56:67:
9d:91:b6:39:ca:71:2a:7f:84:07:e7:5f:c8:6f:e0:af:9d:08:
dc:c4:01:a6:02:bb:db:65:6a:ef:87:c3:10:76:cd:99:7b:1a:
a5:e1:03:5f:f4:82:0c:27:c6:2f:1e:24:c4:0c:b6:d2:cc:97:
2a:7d:4a:ed:36:99:66:ba:3d:61:10:af:10:f7:dd:81:cf:3d:
b8:88:4e:0c:52:ea:5b:b2:35:c2:0d:08:31:0f:09:ec:1c:a4:
33:59:0b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2cO63SshnjQ1n9Tp79+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZGU4ZWJkZGQwODQxNjNhOTBiOWFlNTAzOTdiMmRiNDlj
YjE3YWQwHhcNMjYwNTEzMDEwMDQ4WhcNMjYwNTE0MDEwMDQ4WjAzMTEwLwYDVQQD
Eyg4NWM2OGMxMDUyMTVjYWIxNGNmYmUxNjkzYmQ5MTE5MjEwYmIzNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRaQrtWKv40RxiqW+yV1mhMAiQHd
anXBnt003tigq5K1Z1jqwswzlHEXh0eU8Ou1Y++pJYeU4GAH76KmVK8lh1eOHsAe
pfDrAcHEmOf2MInqYmQ8f2qqpSeYUIW8ipm9ttEQQPDQWR+EVKRaliHQ3AoNpToZ
2hjRW9i4NutswHwDRLqZY6JcEU4bBPpVGSpo1IdPW7zt0fC1ebOCYAG3hgS86oPf
e+YX9mQcw+hK4JclaKi0Utr6G80BSyWLPIQpH/DlDDYqsaa+pxhS4yuEjpCelhDl
KwwM0+h9Pbup5g+v+u/AaabQ/94oqOP4GykWJDhBgrlsSsW6oiau16fGTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXGjBBSFcqxTPvhaTvZEZIQuzUiMB8GA1UdIwQY
MBaAFPLejr3dCEFjqQua5QOXsttJyxetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGIt
YWYxYWMwZjAwNDE3LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9jNTI2ODItN2VhMS00MmY3LTg0ZGItYWYxYWMwZjAwNDE3
LzEvOHQ2T3ZkMElRV09wQzVybEE1ZXkyMG5MRjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPDgwLqX
YcNANtA3jPajcNOwBSfrRETOJBRXW1wd4z7ry1BnQhvMEMwdSVbRPT7ZMJYttUzq
oFu4sh9zwFGpmIhoaN0z05kGK4FOHHlmP5C/11vhInoMEXrk2aKY7mxyoju7Um35
doTOWBZQkbOx6/bY5pY2ifI7xpBq04SHlbIOUedawYOykA0Cm53MlRpl7NNLd4+d
MS0ni3Fzrxm1MFZnnZG2OcpxKn+EB+dfyG/gr50I3MQBpgK722Vq74fDEHbNmXsa
peEDX/SCDCfGLx4kxAy20syXKn1K7TaZZro9YRCvEPfdgc89uIhODFLqW7I1wg0I
MQ8J7BykM1kLFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:43:44 2026 by rpki-client