Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: FKn/Hs32lBnnkCJPyiNdcdjr18KtVY3AIU0F+BOQkvY=
Subject key identifier: BE:4B:CB:F2:14:58:B4:FE:09:C4:E1:FD:2D:CB:A6:B5:21:4F:A5:C1
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019E1ED9A754F2AFC7547EA1BA239CEB49D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 1350
Signing time: Wed 13 May 2026 01:00:40 +0000
Manifest this update: Wed 13 May 2026 01:00:40 +0000
Manifest next update: Thu 14 May 2026 01:00:40 +0000
Files and hashes: 1: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: HyqbeZB5nwuP4GFSLYU/cfqWEq7jIpsQO3HHpDy0oj0=)
2: iir-MP9u--5X9N6sLaapXHQB96w.roa (hash: KYgiiMZkt1y8OXMvRPUfLQi6b3EsUMCv28kMOUxnz3s=)
3: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (hash: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a7:54:f2:af:c7:54:7e:a1:ba:23:9c:eb:49:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: May 13 01:00:40 2026 GMT
Not After : May 14 01:00:40 2026 GMT
Subject: CN=be4bcbf21458b4fe09c4e1fd2dcba6b5214fa5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:83:3a:93:50:39:a2:37:31:10:af:ba:24:
b0:a8:6d:ab:c1:a2:ae:83:fe:1e:76:82:76:e8:d4:
76:8d:43:6e:63:e6:37:d0:9b:03:5b:94:9a:fd:46:
fa:26:13:92:72:2e:2b:db:05:b3:8e:f5:2d:70:59:
93:23:f9:fd:e4:69:0c:90:b7:26:d3:07:ed:5a:ed:
40:3a:3d:32:93:4f:f3:53:1b:08:5c:b3:70:a3:2a:
f8:56:f1:f0:98:82:71:55:d8:45:d2:3a:9c:9b:69:
e8:43:39:4b:c4:0c:c1:5e:f1:97:07:b2:b0:24:47:
c7:38:dd:d5:bb:8d:f5:a1:8c:46:24:8c:08:de:3b:
59:a0:16:55:32:14:88:1b:d2:36:56:0a:45:98:69:
92:d8:1f:31:96:2b:ef:e7:59:c7:67:3f:cc:65:c5:
2a:82:be:00:a2:48:ab:47:96:96:08:12:d5:86:2b:
68:74:d1:46:fb:3c:f8:10:bd:2b:9c:94:7e:17:01:
97:e7:04:20:fc:72:ca:fe:2e:bd:c2:ed:f4:61:85:
50:65:6e:59:34:24:2a:b0:3d:94:2e:97:9e:c7:54:
53:78:3d:cc:08:aa:30:21:7b:97:f9:38:99:22:6d:
54:25:cc:15:ff:65:8b:12:dd:69:52:a1:eb:d6:23:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4B:CB:F2:14:58:B4:FE:09:C4:E1:FD:2D:CB:A6:B5:21:4F:A5:C1
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f4:f0:f0:95:bb:32:54:be:5b:07:02:65:c9:01:d2:4e:9d:
46:b9:cd:4f:af:2a:c3:03:87:c7:95:a0:b3:2b:ad:f7:38:53:
97:5e:3b:dc:15:1f:54:e6:16:27:c6:88:c6:1d:c9:30:9c:14:
7f:12:de:9f:e3:5e:04:5f:7b:99:8a:bb:83:77:b1:fb:2d:72:
cf:ea:2f:e9:75:cd:be:8f:71:70:a6:42:3d:38:1a:5e:8d:8c:
4c:a0:09:f7:14:a7:fc:54:90:06:ae:c6:48:44:0d:77:87:7c:
56:c8:39:63:f5:ad:94:67:26:8e:39:53:a7:29:af:6a:58:91:
59:58:f8:35:fb:67:7a:54:07:60:52:21:7c:0e:c6:0a:a2:99:
c8:4d:c0:be:8a:d1:b3:d9:09:3c:4f:77:18:d5:12:0f:c4:41:
bd:9c:ac:3e:69:3c:3f:b7:b4:f1:17:cf:b0:5a:20:22:eb:ac:
c8:1a:1e:f3:57:32:ee:87:fa:1c:4d:c2:7d:7f:27:94:f2:62:
3a:da:54:05:b6:00:bc:e3:d5:63:5a:d7:00:f1:f7:d1:f1:cc:
22:10:3a:dd:25:2e:4c:f1:64:b9:16:0e:2c:4c:40:be:61:29:
97:0f:27:f1:ec:ba:f1:98:38:6b:93:7f:b9:02:a4:53:5f:c7:
ff:bf:01:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2adU8q/HVH6huiOc60nUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy
MTViYzAwHhcNMjYwNTEzMDEwMDQwWhcNMjYwNTE0MDEwMDQwWjAzMTEwLwYDVQQD
EyhiZTRiY2JmMjE0NThiNGZlMDljNGUxZmQyZGNiYTZiNTIxNGZhNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnODOpNQOaI3MRCvuiSwqG2rwaKu
g/4edoJ26NR2jUNuY+Y30JsDW5Sa/Ub6JhOSci4r2wWzjvUtcFmTI/n95GkMkLcm
0wftWu1AOj0yk0/zUxsIXLNwoyr4VvHwmIJxVdhF0jqcm2noQzlLxAzBXvGXB7Kw
JEfHON3Vu431oYxGJIwI3jtZoBZVMhSIG9I2VgpFmGmS2B8xlivv51nHZz/MZcUq
gr4AokirR5aWCBLVhitodNFG+zz4EL0rnJR+FwGX5wQg/HLK/i69wu30YYVQZW5Z
NCQqsD2ULpeex1RTeD3MCKowIXuX+TiZIm1UJcwV/2WLEt1pUqHr1iMuKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5Ly/IUWLT+CcTh/S3LprUhT6XBMB8GA1UdIwQY
MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt
MDI3YTc0M2JhNDYyLzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy
LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Tw8JW7
MlS+WwcCZckB0k6dRrnNT68qwwOHx5Wgsyut9zhTl1473BUfVOYWJ8aIxh3JMJwU
fxLen+NeBF97mYq7g3ex+y1yz+ov6XXNvo9xcKZCPTgaXo2MTKAJ9xSn/FSQBq7G
SEQNd4d8Vsg5Y/WtlGcmjjlTpymvaliRWVj4NftnelQHYFIhfA7GCqKZyE3AvorR
s9kJPE93GNUSD8RBvZysPmk8P7e08RfPsFogIuusyBoe81cy7of6HE3CfX8nlPJi
OtpUBbYAvOPVY1rXAPH30fHMIhA63SUuTPFkuRYOLExAvmEplw8n8ey68Zg4a5N/
uQKkU1/H/78BqA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:40:13 2026 by rpki-client