Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
File: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft (raw, json)
Hash identifier: oZR/Ffx/F3Vj47mZcpNLPrtxJE6Fj9gAgK9UnU3cwZA=
Subject key identifier: 47:BC:E9:E1:9A:2B:F5:A5:19:30:2E:1C:8D:81:9F:39:0F:80:D0:7B
Authority key identifier: F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
Certificate issuer: /CN=f23e21affc33677485a15a5e13121143b577ba9d
Certificate serial: 019E1CB52D73749B22D8148B9051D0EA6F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
Manifest number: CA
Signing time: Tue 12 May 2026 15:01:36 +0000
Manifest this update: Tue 12 May 2026 15:01:36 +0000
Manifest next update: Wed 13 May 2026 15:01:36 +0000
Files and hashes: 1: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl (hash: txEYAkfeftotU8ATKCRziGLFUwkvH/9eSftFElKdTg4=)
2: wWZeumQT3MBgVyI61YutHcN7xBc.roa (hash: ZGw/nN7EzuhLxCNfPxU2KnJ6Yzzw3B7hzu5qe4dcGKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:2d:73:74:9b:22:d8:14:8b:90:51:d0:ea:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23e21affc33677485a15a5e13121143b577ba9d
Validity
Not Before: May 12 15:01:36 2026 GMT
Not After : May 13 15:01:36 2026 GMT
Subject: CN=47bce9e19a2bf5a519302e1c8d819f390f80d07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:0f:b6:24:47:97:a3:2d:86:56:dd:a3:fb:
ef:09:7d:19:b1:34:5e:b7:ed:57:6e:7b:3f:60:04:
b0:f4:aa:91:c6:23:6e:e1:eb:15:09:dc:b6:39:1e:
ec:5e:58:9c:af:11:5e:65:bc:3d:a3:ff:f4:f7:79:
ff:bb:23:6a:d9:d7:e2:47:7c:75:61:b4:c8:33:7f:
5b:20:5a:c5:e4:45:6d:3f:1e:01:cb:da:01:75:72:
10:87:d2:92:5f:f7:75:fa:50:97:3c:23:18:33:8f:
50:61:e8:c4:37:8b:4c:cd:f6:ae:d8:ed:4e:1d:77:
9c:68:e5:cb:cb:19:27:c9:76:bc:2d:b2:7d:23:b9:
16:ce:cf:22:9f:36:a7:b7:ad:27:f0:81:77:7a:93:
c4:de:f8:39:fb:cf:27:10:aa:0e:6c:e6:e5:61:31:
73:ce:9b:c7:3b:9e:d5:ef:90:22:85:ef:e3:c5:85:
23:47:15:48:92:73:3a:3e:fb:3d:93:e1:41:e9:81:
8c:4b:7a:96:53:ab:67:f9:3b:ff:0f:d2:fb:fb:72:
41:09:c6:2d:b3:7f:c5:71:21:67:60:45:44:b7:9f:
ff:da:08:80:b6:92:a7:b0:e6:90:d8:c3:94:96:49:
9e:3a:10:56:28:f9:2b:12:14:be:aa:45:b7:41:95:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:E9:E1:9A:2B:F5:A5:19:30:2E:1C:8D:81:9F:39:0F:80:D0:7B
X509v3 Authority Key Identifier:
keyid:F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cb:5b:ac:fd:f5:24:63:77:9d:79:5f:6c:2a:22:8d:60:ef:
5c:e7:b8:1a:f5:46:71:17:6f:1e:a0:84:9f:00:48:82:ed:a9:
70:d5:cb:b3:0d:f5:17:9d:a3:af:50:1d:f7:2e:05:68:b3:ec:
f1:cb:4d:5f:24:1a:bf:98:cb:62:d9:af:fb:af:78:89:f6:1d:
c7:e6:af:5b:75:c4:ef:6d:e6:0e:2a:f0:fa:d6:ca:4f:dc:3b:
58:1b:e9:39:d8:6f:bc:e9:22:78:0b:f0:48:35:5b:62:dd:de:
25:72:b9:2f:34:91:da:68:0b:be:0e:ab:d8:2c:3d:28:0d:6b:
63:56:56:80:8e:a5:6d:55:b5:4a:8e:cb:4a:d3:a1:a9:ee:1b:
e0:fa:91:70:b5:f6:b0:8d:d5:da:c8:3c:c5:80:6e:bd:8c:17:
6e:f6:d8:0b:f4:e8:c2:27:6c:ee:39:a7:ca:e5:72:69:59:97:
df:88:f6:9d:b2:71:ac:29:f6:c4:41:a8:38:bf:ab:ac:96:60:
c4:72:62:b9:be:ca:93:88:48:a7:88:7e:7b:20:f9:0d:a0:1b:
23:ec:fd:f6:36:a7:88:f9:77:62:6b:ef:50:4e:7b:33:6b:2d:
b5:2a:c2:58:a5:2f:42:8a:de:da:3e:0c:87:1c:ff:f6:75:b7:
0b:80:a8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctS1zdJsi2BSLkFHQ6m+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2UyMWFmZmMzMzY3NzQ4NWExNWE1ZTEzMTIxMTQzYjU3
N2JhOWQwHhcNMjYwNTEyMTUwMTM2WhcNMjYwNTEzMTUwMTM2WjAzMTEwLwYDVQQD
Eyg0N2JjZTllMTlhMmJmNWE1MTkzMDJlMWM4ZDgxOWYzOTBmODBkMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdIPtiRHl6Mthlbdo/vvCX0ZsTRe
t+1Xbns/YASw9KqRxiNu4esVCdy2OR7sXlicrxFeZbw9o//093n/uyNq2dfiR3x1
YbTIM39bIFrF5EVtPx4By9oBdXIQh9KSX/d1+lCXPCMYM49QYejEN4tMzfau2O1O
HXecaOXLyxknyXa8LbJ9I7kWzs8inzant60n8IF3epPE3vg5+88nEKoObOblYTFz
zpvHO57V75Aihe/jxYUjRxVIknM6Pvs9k+FB6YGMS3qWU6tn+Tv/D9L7+3JBCcYt
s3/FcSFnYEVEt5//2giAtpKnsOaQ2MOUlkmeOhBWKPkrEhS+qkW3QZVdSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe86eGaK/WlGTAuHI2BnzkPgNB7MB8GA1UdIwQY
MBaAFPI+Ia/8M2d0haFaXhMSEUO1d7qdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo0aHJfd3paM1NGb1ZwZUV4SVJRN1YzdXAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNDk3ZjAtYzBiMi00NDQyLTlkMmQt
ZTc4MmE0N2JjODU3LzEvOGo0aHJfd3paM1NGb1ZwZUV4SVJRN1YzdXAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNDk3ZjAtYzBiMi00NDQyLTlkMmQtZTc4MmE0N2JjODU3
LzEvOGo0aHJfd3paM1NGb1ZwZUV4SVJRN1YzdXAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgctbrP31
JGN3nXlfbCoijWDvXOe4GvVGcRdvHqCEnwBIgu2pcNXLsw31F52jr1Ad9y4FaLPs
8ctNXyQav5jLYtmv+694ifYdx+avW3XE723mDirw+tbKT9w7WBvpOdhvvOkieAvw
SDVbYt3eJXK5LzSR2mgLvg6r2Cw9KA1rY1ZWgI6lbVW1So7LStOhqe4b4PqRcLX2
sI3V2sg8xYBuvYwXbvbYC/Towids7jmnyuVyaVmX34j2nbJxrCn2xEGoOL+rrJZg
xHJiub7Kk4hIp4h+eyD5DaAbI+z99janiPl3YmvvUE57M2sttSrCWKUvQore2j4M
hxz/9nW3C4ConQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:13 2026 by rpki-client