Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: cpftmVPZ6PxnenPsdkCPzCk+olvC4VoiIdN3YTJFiLg=
Subject key identifier: A6:4C:39:11:A1:8B:57:40:D3:35:1C:C2:92:10:2B:EB:E3:15:21:AA
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019E1CEB338E56DCF2A7A08F5037253380A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 1014
Signing time: Tue 12 May 2026 16:00:36 +0000
Manifest this update: Tue 12 May 2026 16:00:36 +0000
Manifest next update: Wed 13 May 2026 16:00:36 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: tv0/4/H6RbSBvbB3dZWKfhudF94XOZ9Y4ua4M5c+io8=)
2: hnmsrWHh9cW2sc4LB6owd8gyChI.roa (hash: xlbnosIlGk9ZC7A6OHGfdwXPEb8ekb2nSgNGlRxpL4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:33:8e:56:dc:f2:a7:a0:8f:50:37:25:33:80:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: May 12 16:00:36 2026 GMT
Not After : May 13 16:00:36 2026 GMT
Subject: CN=a64c3911a18b5740d3351cc292102bebe31521aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:8f:d0:dc:af:15:b9:77:fb:f1:32:76:eb:
92:a5:b4:0e:83:df:ff:70:ce:16:03:12:9d:f2:00:
2e:18:53:9c:87:4c:f4:19:0e:e9:09:dc:8e:23:6f:
f0:a1:54:de:c8:6b:31:01:ca:29:47:d6:c8:35:33:
e3:b8:28:f3:4c:41:dd:f1:06:da:5c:d0:e4:c8:d5:
6e:0c:d9:4d:c1:51:66:44:ca:aa:56:bb:d7:cf:d1:
1f:58:9e:17:f4:f5:f4:49:09:86:82:24:39:d8:e8:
c3:86:dd:ca:30:03:35:f1:5f:bd:db:25:b6:86:a5:
2a:f9:9f:e9:f4:32:bc:9a:0d:83:62:43:02:15:20:
7a:33:81:87:b5:3f:26:5d:3f:a7:23:7b:34:ff:9c:
1e:88:69:8e:99:8a:db:77:51:e1:51:51:d6:3c:3f:
47:72:33:43:46:cb:64:93:72:99:25:8b:b9:4c:ad:
72:b8:6d:d2:9a:e4:c2:8e:0b:12:ce:cf:80:eb:ef:
e9:02:9c:7e:f5:06:9f:04:36:48:d0:83:c9:30:e9:
a9:23:22:cf:7d:c0:73:f5:42:9f:83:8e:c5:d4:e3:
c1:d6:dc:c8:5c:25:29:13:d5:68:98:dd:2d:23:92:
4e:83:3a:fe:60:a4:1d:2e:f6:e0:97:bd:d8:0a:dc:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:39:11:A1:8B:57:40:D3:35:1C:C2:92:10:2B:EB:E3:15:21:AA
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:74:60:53:02:c0:c0:78:79:ff:7b:a7:67:a6:5e:78:3e:
60:fe:66:ab:d2:a8:99:0e:c9:da:60:6a:4f:f1:bd:fe:b2:e2:
98:06:5d:bd:03:13:64:a0:70:78:07:27:79:a5:ee:9e:f1:97:
92:93:f8:bc:97:9f:d0:ad:64:1b:96:47:39:63:44:3b:6c:b9:
23:8e:6b:aa:bd:41:bf:85:34:13:9f:b2:36:b4:f8:e5:68:d0:
93:d6:fe:de:41:35:f5:37:7f:ea:58:b8:1a:65:05:95:73:16:
d5:07:59:98:d1:17:e9:d2:7d:34:01:dd:50:d8:60:46:29:62:
26:59:4e:76:f0:68:2d:cb:68:0d:c1:15:25:8b:04:73:c9:27:
e8:2b:c1:ac:9f:98:e6:5f:62:27:f2:61:76:4b:be:71:9d:58:
79:07:81:41:ae:e6:46:77:8d:91:aa:8b:10:03:f4:4d:78:e1:
b7:6f:3a:21:20:23:11:0c:f4:e8:94:b6:5d:36:66:08:42:15:
65:bb:02:a7:bb:34:c1:71:d3:89:ad:2c:0b:72:c5:a2:de:e7:
e8:10:bd:3c:01:fb:b7:ce:32:f1:39:56:04:91:cb:b0:2e:45:
62:7b:3c:3f:9d:56:77:5f:6f:42:15:ac:0a:15:56:82:60:53:
91:cb:ee:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6zOOVtzyp6CPUDclM4CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTUwYjNhOTQxOTYyN2ZkYmNkYjY1ODBlODc4YTFjOWZh
MGNjNTgwHhcNMjYwNTEyMTYwMDM2WhcNMjYwNTEzMTYwMDM2WjAzMTEwLwYDVQQD
EyhhNjRjMzkxMWExOGI1NzQwZDMzNTFjYzI5MjEwMmJlYmUzMTUyMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+P0NyvFbl3+/EyduuSpbQOg9//
cM4WAxKd8gAuGFOch0z0GQ7pCdyOI2/woVTeyGsxAcopR9bINTPjuCjzTEHd8Qba
XNDkyNVuDNlNwVFmRMqqVrvXz9EfWJ4X9PX0SQmGgiQ52OjDht3KMAM18V+92yW2
hqUq+Z/p9DK8mg2DYkMCFSB6M4GHtT8mXT+nI3s0/5weiGmOmYrbd1HhUVHWPD9H
cjNDRstkk3KZJYu5TK1yuG3SmuTCjgsSzs+A6+/pApx+9QafBDZI0IPJMOmpIyLP
fcBz9UKfg47F1OPB1tzIXCUpE9VomN0tI5JOgzr+YKQdLvbgl73YCtxKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZMORGhi1dA0zUcwpIQK+vjFSGqMB8GA1UdIwQY
MBaAFPAVCzqUGWJ/2822WA6HihyfoMxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMt
ZWRjNWFiOTk1ZGJmLzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81NzUxNzItZjdhMi00ZTQzLTk2MmMtZWRjNWFiOTk1ZGJm
LzEvOEJVTE9wUVpZbl9iemJaWURvZUtISi1nekZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKox0YFMC
wMB4ef97p2emXng+YP5mq9KomQ7J2mBqT/G9/rLimAZdvQMTZKBweAcneaXunvGX
kpP4vJef0K1kG5ZHOWNEO2y5I45rqr1Bv4U0E5+yNrT45WjQk9b+3kE19Td/6li4
GmUFlXMW1QdZmNEX6dJ9NAHdUNhgRiliJllOdvBoLctoDcEVJYsEc8kn6CvBrJ+Y
5l9iJ/Jhdku+cZ1YeQeBQa7mRneNkaqLEAP0TXjht286ISAjEQz06JS2XTZmCEIV
ZbsCp7s0wXHTia0sC3LFot7n6BC9PAH7t84y8TlWBJHLsC5FYns8P51Wd19vQhWs
ChVWgmBTkcvucQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:06 2026 by rpki-client