Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: 3vSE+wM1qKV3uanUbIb5PJHtYHdhh8ao4/zjq+BSnBI=
Subject key identifier: 35:8D:78:9F:C2:33:78:A0:6A:72:5D:B3:64:63:BD:05:D2:40:77:52
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019E1BD942B9E2DF21B6AB49A9F8F3A92AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 11:01:23 +0000
Manifest this update: Tue 12 May 2026 11:01:23 +0000
Manifest next update: Wed 13 May 2026 11:01:23 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: PJ0Fl5GSEE1y7h6Ew36EA+YPb7K8oqwkWGrgF/h9cWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:42:b9:e2:df:21:b6:ab:49:a9:f8:f3:a9:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: May 12 11:01:23 2026 GMT
Not After : May 13 11:01:23 2026 GMT
Subject: CN=358d789fc23378a06a725db36463bd05d2407752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:c9:e3:f2:98:c0:46:24:a6:c5:29:e8:3a:
a1:77:07:9c:47:71:63:7f:fc:1d:ad:96:68:a5:a1:
56:9d:74:e5:4a:47:27:b1:77:cb:81:4b:df:f7:2b:
95:33:d3:07:db:45:8e:4f:95:1f:68:da:3f:88:0d:
89:ab:d4:c3:be:9f:5b:59:0d:2f:af:bb:b4:dd:62:
59:92:4e:e9:e9:5b:c9:9a:f7:da:62:e1:bc:48:b1:
30:cf:9e:2f:8f:35:e5:91:80:95:a7:00:d9:e9:f1:
55:81:08:3c:c2:f8:4f:c3:e5:55:45:93:92:0b:c3:
5f:a3:41:61:0f:65:f3:be:53:f3:c5:c8:56:78:ae:
99:aa:76:e1:de:f4:0b:7f:bc:89:1b:4e:c9:84:be:
03:92:77:57:76:9e:a6:f1:16:84:0b:26:6d:1d:3e:
7f:24:ba:50:2c:4f:54:4d:06:08:50:71:11:a3:27:
df:26:6a:f2:16:2d:a8:28:1f:11:07:9b:f9:68:5a:
53:8a:ee:c7:ce:9c:e7:d8:c2:97:a6:04:01:0e:3e:
10:b8:a0:9b:10:9d:ea:08:82:b3:e4:8d:95:36:88:
39:0c:65:67:d6:68:9c:21:6d:00:8f:a6:2e:49:0b:
07:3f:70:36:9d:ce:1f:53:e8:48:fc:04:fc:52:49:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:78:9F:C2:33:78:A0:6A:72:5D:B3:64:63:BD:05:D2:40:77:52
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a0:0b:b1:a5:a8:31:d0:38:b3:1b:46:9d:f6:0f:92:fe:ab:
ca:75:df:25:57:01:a5:75:3b:61:15:3c:60:79:75:35:d6:9d:
62:ab:86:47:1e:76:b8:2b:d2:48:35:b5:74:3a:3e:08:f3:01:
13:24:41:9d:16:a7:84:e0:19:d2:60:2e:c6:e0:1f:38:b7:7a:
e9:2b:d9:11:38:e4:8b:c0:b6:aa:ed:6c:79:44:c3:7d:ab:c9:
b3:e7:83:aa:60:f9:f3:d7:63:96:95:6e:9d:d9:d6:3f:8e:17:
77:e4:5e:26:62:90:4c:1b:53:f4:ce:ad:75:a4:11:43:ba:cd:
97:e0:f1:ca:d6:c5:05:ba:fc:e6:19:df:b2:14:1f:33:0c:03:
bd:a6:0c:9d:d8:cb:7d:fa:01:02:ca:f6:cd:d9:8c:34:20:b6:
0d:2a:b3:66:03:c3:7f:c6:a6:f6:0c:de:05:a7:fe:e0:9c:4d:
5b:b2:68:57:bf:d3:46:c6:72:4b:70:3f:1b:01:a5:05:0b:a3:
02:27:89:d9:b6:35:cb:9b:1c:b1:47:01:9a:39:e7:09:8c:dc:
64:a0:db:68:40:52:ab:70:43:4b:0a:c7:99:8b:5b:b9:ed:db:
85:bf:15:45:06:7d:7d:3f:69:fe:3e:e7:bb:c2:18:3d:2a:8b:
fa:db:92:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2UK54t8htqtJqfjzqSrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0
MDFhMzcwHhcNMjYwNTEyMTEwMTIzWhcNMjYwNTEzMTEwMTIzWjAzMTEwLwYDVQQD
EygzNThkNzg5ZmMyMzM3OGEwNmE3MjVkYjM2NDYzYmQwNWQyNDA3NzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly3J4/KYwEYkpsUp6DqhdwecR3Fj
f/wdrZZopaFWnXTlSkcnsXfLgUvf9yuVM9MH20WOT5UfaNo/iA2Jq9TDvp9bWQ0v
r7u03WJZkk7p6VvJmvfaYuG8SLEwz54vjzXlkYCVpwDZ6fFVgQg8wvhPw+VVRZOS
C8Nfo0FhD2XzvlPzxchWeK6Zqnbh3vQLf7yJG07JhL4DkndXdp6m8RaECyZtHT5/
JLpQLE9UTQYIUHERoyffJmryFi2oKB8RB5v5aFpTiu7Hzpzn2MKXpgQBDj4QuKCb
EJ3qCIKz5I2VNog5DGVn1micIW0Aj6YuSQsHP3A2nc4fU+hI/AT8UkloCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWNeJ/CM3iganJds2RjvQXSQHdSMB8GA1UdIwQY
MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt
NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5
LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6ALsaWo
MdA4sxtGnfYPkv6rynXfJVcBpXU7YRU8YHl1NdadYquGRx52uCvSSDW1dDo+CPMB
EyRBnRanhOAZ0mAuxuAfOLd66SvZETjki8C2qu1seUTDfavJs+eDqmD589djlpVu
ndnWP44Xd+ReJmKQTBtT9M6tdaQRQ7rNl+DxytbFBbr85hnfshQfMwwDvaYMndjL
ffoBAsr2zdmMNCC2DSqzZgPDf8am9gzeBaf+4JxNW7JoV7/TRsZyS3A/GwGlBQuj
AieJ2bY1y5scsUcBmjnnCYzcZKDbaEBSq3BDSwrHmYtbue3bhb8VRQZ9fT9p/j7n
u8IYPSqL+tuSyg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:27:31 2026 by rpki-client