Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: hngCKhcSQULRCOdHPuFe7BYpJG2kCh6bsd4tjodOtuk=
Subject key identifier: B8:27:60:C0:4E:EB:96:AA:F7:2A:22:7C:B3:25:4A:55:D1:26:B5:1F
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 019E1D23479375645F49B721D051B1C4C00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:01:51 +0000
Manifest this update: Tue 12 May 2026 17:01:51 +0000
Manifest next update: Wed 13 May 2026 17:01:51 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: J6pS5nV+oa2GhRkLH92SRmnkbKvUNEsz8J9wlO6kBfo=)
2: NuU8W7V2quwnNAYLT9_LV52Vbbk.roa (hash: SGhDxlcXeif+7R/rxn7Q7SC8rZycoqSPaENJlB28piw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:47:93:75:64:5f:49:b7:21:d0:51:b1:c4:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: May 12 17:01:51 2026 GMT
Not After : May 13 17:01:51 2026 GMT
Subject: CN=b82760c04eeb96aaf72a227cb3254a55d126b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:0d:37:27:b3:e1:d6:2c:c3:a3:9e:6b:99:
46:89:56:32:cc:4c:89:b2:14:ea:1e:bf:e4:09:c0:
b4:46:4d:87:fa:a8:57:15:ea:e6:f3:1d:71:e1:12:
eb:a1:53:9a:98:49:41:f5:ed:0c:1a:5a:92:02:93:
55:8d:e8:2b:96:45:49:94:3e:ce:55:fd:bc:b9:39:
b0:37:a0:02:8a:9e:c6:c9:6d:fc:3f:ac:40:03:3d:
d4:87:27:5b:a5:f0:76:67:ff:ea:d9:62:07:76:20:
4c:ff:e9:8b:db:40:5c:1b:29:69:74:c3:76:53:fb:
3a:31:e1:75:f2:a6:70:1f:96:15:84:d2:c1:ed:dc:
29:b0:be:2a:b1:db:96:ff:62:f0:e7:40:98:0c:86:
73:10:93:bf:64:d7:dd:25:cc:25:63:bc:ce:c6:73:
7c:0c:90:ab:bc:af:24:4a:0f:9e:e8:7d:e1:f3:f3:
cc:ae:2c:fc:23:62:c8:79:19:01:5a:bf:06:ef:a3:
e6:69:e1:41:44:e5:46:13:81:43:6a:57:07:46:80:
9a:fd:ac:c6:30:3e:ae:d3:09:58:48:65:c1:a3:02:
08:5f:db:6a:a2:f1:9f:b1:de:b3:09:d9:a4:a8:f4:
05:0d:41:ab:e1:d0:0c:f3:0e:d6:c1:1d:55:ed:3b:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:60:C0:4E:EB:96:AA:F7:2A:22:7C:B3:25:4A:55:D1:26:B5:1F
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e8:b7:c7:39:3b:c8:7d:e7:20:18:85:da:ed:7b:34:b7:09:
0f:8b:a8:69:45:60:db:8e:c0:19:46:f4:c7:9d:9a:8d:ee:c9:
43:65:59:2b:cb:02:69:b5:6d:75:2e:71:4d:f5:8c:17:57:98:
4f:3d:5f:83:b9:e9:a7:e7:98:fb:21:cd:65:fe:bb:b6:8a:30:
aa:5a:49:81:62:b8:3d:ab:7c:20:95:6c:55:10:4f:4f:a2:fe:
03:d0:86:d2:59:4c:de:f1:9f:65:05:a6:5b:e1:fa:9e:18:02:
76:41:61:c2:04:35:c7:d6:9f:94:77:1e:3f:07:be:4d:b2:d2:
35:5e:d4:e5:df:c5:ed:a7:f4:e8:50:c0:bc:e7:dd:4f:28:e7:
e8:21:2a:9c:6f:d7:b2:a4:e3:87:82:a1:b7:0d:3c:8e:fe:8e:
d1:96:0a:25:0d:fd:2b:55:fa:e0:fb:1a:13:02:57:ba:92:28:
33:2f:99:2d:59:d7:cf:06:c1:ca:56:f8:20:6d:ba:cf:8f:20:
5d:c0:45:fc:0f:de:57:10:d2:24:ae:0a:29:a3:d3:77:01:4b:
c3:33:8f:a9:08:a5:f3:67:88:02:1c:ec:26:28:8d:e4:61:88:
1b:0e:7e:76:92:1e:77:5b:c6:a6:c7:06:f1:64:8c:6e:9b:a2:
19:34:0b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dI0eTdWRfSbch0FGxxMALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi
NWQzZjIwHhcNMjYwNTEyMTcwMTUxWhcNMjYwNTEzMTcwMTUxWjAzMTEwLwYDVQQD
EyhiODI3NjBjMDRlZWI5NmFhZjcyYTIyN2NiMzI1NGE1NWQxMjZiNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRINNyez4dYsw6Oea5lGiVYyzEyJ
shTqHr/kCcC0Rk2H+qhXFerm8x1x4RLroVOamElB9e0MGlqSApNVjegrlkVJlD7O
Vf28uTmwN6ACip7GyW38P6xAAz3UhydbpfB2Z//q2WIHdiBM/+mL20BcGylpdMN2
U/s6MeF18qZwH5YVhNLB7dwpsL4qsduW/2Lw50CYDIZzEJO/ZNfdJcwlY7zOxnN8
DJCrvK8kSg+e6H3h8/PMriz8I2LIeRkBWr8G76PmaeFBROVGE4FDalcHRoCa/azG
MD6u0wlYSGXBowIIX9tqovGfsd6zCdmkqPQFDUGr4dAM8w7WwR1V7Tt6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgnYMBO65aq9yoifLMlSlXRJrUfMB8GA1UdIwQY
MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt
NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz
LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqui3xzk7
yH3nIBiF2u17NLcJD4uoaUVg247AGUb0x52aje7JQ2VZK8sCabVtdS5xTfWMF1eY
Tz1fg7npp+eY+yHNZf67toowqlpJgWK4Pat8IJVsVRBPT6L+A9CG0llM3vGfZQWm
W+H6nhgCdkFhwgQ1x9aflHcePwe+TbLSNV7U5d/F7af06FDAvOfdTyjn6CEqnG/X
sqTjh4Khtw08jv6O0ZYKJQ39K1X64PsaEwJXupIoMy+ZLVnXzwbBylb4IG26z48g
XcBF/A/eVxDSJK4KKaPTdwFLwzOPqQil82eIAhzsJiiN5GGIGw5+dpIed1vGpscG
8WSMbpuiGTQLlQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:05 2026 by rpki-client