Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: yowRDUniQ0V3bLglYY/DFg6JZEU45WngecGfvFgLqs0=
Subject key identifier: 25:BA:EE:86:2B:7C:4E:CF:09:67:DB:89:BE:37:93:82:EE:B7:99:15
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 019E1CEBD3CAE04C054488C2D48F3C4D8551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0CD5
Signing time: Tue 12 May 2026 16:01:17 +0000
Manifest this update: Tue 12 May 2026 16:01:17 +0000
Manifest next update: Wed 13 May 2026 16:01:17 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: 59bNozZ5EpligikeJNmkjWyPDLCUzGvd5XNfEu8y4P8=)
2: n0kXXQBuQDCSgjPwmN3Gr_8c6qI.roa (hash: yccqhpLjnyFJP4HXHx8COGOAuzdsePkEiMVFsxk8r48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:d3:ca:e0:4c:05:44:88:c2:d4:8f:3c:4d:85:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: May 12 16:01:17 2026 GMT
Not After : May 13 16:01:17 2026 GMT
Subject: CN=25baee862b7c4ecf0967db89be379382eeb79915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:19:29:c0:6d:69:b5:94:25:93:1d:14:71:
fe:0f:1d:64:02:6b:f2:b8:fa:33:cf:8b:8c:61:41:
fb:b1:51:9d:0f:e0:a1:24:bf:21:1d:2c:8d:a9:15:
d7:7a:8d:4c:94:28:9c:23:2b:98:e5:96:a4:2a:e7:
88:3b:91:6e:c7:d2:a8:50:f0:11:16:b3:d9:45:37:
cd:f6:13:ad:f1:73:c0:3a:a4:77:1e:bf:21:65:97:
12:53:10:f5:e8:e8:7d:70:74:02:60:49:92:50:d4:
e1:a0:5e:c4:47:2f:1c:81:72:52:2f:2a:f0:50:81:
6e:c7:42:90:d8:a2:df:c7:12:d9:46:f8:91:3c:88:
fb:c4:ea:d0:97:b4:76:85:0d:62:cc:90:b4:99:40:
d1:5e:a2:1d:fa:53:d2:07:40:f3:83:b7:0f:05:f5:
44:6e:ab:e8:36:44:9f:73:91:7e:8b:8a:c1:94:51:
f2:0f:9c:e3:bb:e6:0e:32:9a:8a:21:21:64:a6:a8:
03:c8:2f:5c:83:48:ab:53:2b:09:c7:54:61:2b:81:
43:63:eb:ec:16:79:7a:04:f1:6f:a5:29:aa:77:d8:
82:49:ba:c6:dc:9c:9d:53:94:d5:82:22:0b:a8:7a:
30:45:cc:a7:27:77:26:7e:33:6a:5e:b1:2f:87:95:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:EE:86:2B:7C:4E:CF:09:67:DB:89:BE:37:93:82:EE:B7:99:15
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:62:de:63:b5:85:1a:d9:1b:ca:4c:69:43:34:a6:dd:d6:fc:
65:c8:3a:48:dc:a7:89:ff:a6:85:1f:ef:4e:57:76:a8:da:d8:
72:44:97:e8:d5:fd:84:35:b5:20:52:24:34:fe:3c:1c:6c:9b:
d8:68:d5:6e:ea:2b:27:95:1b:ed:49:3e:6b:d3:45:24:5d:3f:
75:d1:a9:16:29:9f:49:e0:16:ba:c1:e9:4e:a4:33:b3:31:73:
e8:ec:ce:2f:ab:1a:1a:60:4b:51:c6:87:60:7a:51:c6:88:15:
08:4f:1f:ad:d5:e5:2c:54:83:5d:5a:4d:f1:67:cf:ad:92:07:
76:a4:70:87:ef:78:a5:ec:31:11:6b:b8:54:51:f9:12:da:a3:
f0:28:07:9f:3a:df:7d:df:e8:88:a6:8e:90:4c:8f:67:6e:75:
da:da:6f:69:71:fb:03:d8:31:de:cf:8d:3e:9e:f9:34:19:f8:
17:b7:e1:e5:b2:81:3a:0e:58:9b:4e:a0:c3:75:7c:a5:1c:fc:
28:c2:2b:11:17:7b:1d:30:c8:fc:39:9e:13:79:63:8f:a3:89:
55:05:0d:ff:71:a2:3c:3f:e8:7f:7d:17:e9:37:27:3a:8b:9a:
a5:23:41:57:55:57:bc:a1:06:17:b5:4c:4f:d5:7b:65:78:d4:
36:40:8a:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c69PK4EwFRIjC1I88TYVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWYyODlhMDBhMWIxMTViN2YzYTRkMWI4MDExYmY5MGQx
YTJmNzIwHhcNMjYwNTEyMTYwMTE3WhcNMjYwNTEzMTYwMTE3WjAzMTEwLwYDVQQD
EygyNWJhZWU4NjJiN2M0ZWNmMDk2N2RiODliZTM3OTM4MmVlYjc5OTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR4ZKcBtabWUJZMdFHH+Dx1kAmvy
uPozz4uMYUH7sVGdD+ChJL8hHSyNqRXXeo1MlCicIyuY5ZakKueIO5Fux9KoUPAR
FrPZRTfN9hOt8XPAOqR3Hr8hZZcSUxD16Oh9cHQCYEmSUNThoF7ERy8cgXJSLyrw
UIFux0KQ2KLfxxLZRviRPIj7xOrQl7R2hQ1izJC0mUDRXqId+lPSB0Dzg7cPBfVE
bqvoNkSfc5F+i4rBlFHyD5zju+YOMpqKISFkpqgDyC9cg0irUysJx1RhK4FDY+vs
Fnl6BPFvpSmqd9iCSbrG3JydU5TVgiILqHowRcynJ3cmfjNqXrEvh5VnmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW67oYrfE7PCWfbib43k4Lut5kVMB8GA1UdIwQY
MBaAFPEfKJoAobEVt/Ok0bgBG/kNGi9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjct
NzRlODQ5NjcxNjhiLzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjctNzRlODQ5NjcxNjhi
LzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmLeY7WF
GtkbykxpQzSm3db8Zcg6SNynif+mhR/vTld2qNrYckSX6NX9hDW1IFIkNP48HGyb
2GjVbuorJ5Ub7Uk+a9NFJF0/ddGpFimfSeAWusHpTqQzszFz6OzOL6saGmBLUcaH
YHpRxogVCE8frdXlLFSDXVpN8WfPrZIHdqRwh+94pewxEWu4VFH5Etqj8CgHnzrf
fd/oiKaOkEyPZ2512tpvaXH7A9gx3s+NPp75NBn4F7fh5bKBOg5Ym06gw3V8pRz8
KMIrERd7HTDI/DmeE3ljj6OJVQUN/3GiPD/of30X6TcnOouapSNBV1VXvKEGF7VM
T9V7ZXjUNkCKlg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:53:37 2026 by rpki-client