Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: O0Ibwzx+ZB1UfswST+0oC4JUKMm48Z0c0px5nfOpRqU=
Subject key identifier: 01:31:6A:92:41:0A:1E:6E:30:0F:0E:EE:F0:AD:D3:B4:8B:BE:3B:1A
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019E1ED9B82D17FD8B7E5F4F714152778413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 1205
Signing time: Wed 13 May 2026 01:00:45 +0000
Manifest this update: Wed 13 May 2026 01:00:45 +0000
Manifest next update: Thu 14 May 2026 01:00:45 +0000
Files and hashes: 1: YrqYNM1Pym45hQFacw7cbC8M_eA.roa (hash: o7i0wNONs0dKHmOQelWnN9IgkyF6F7BCOkRiYH+yl44=)
2: oxlX37hwRfJw6rYvD_DlOds6oAM.roa (hash: NBmTSUZkwjvyNiisqMltw+Cq5Ss6K9JzeUmdp5uxYs4=)
3: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: 7eYCfwolJddmjzIwcQzcEJOMhHYjnTExd2cRbnrm8f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:b8:2d:17:fd:8b:7e:5f:4f:71:41:52:77:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: May 13 01:00:45 2026 GMT
Not After : May 14 01:00:45 2026 GMT
Subject: CN=01316a92410a1e6e300f0eeef0add3b48bbe3b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:e2:1b:bc:f7:92:26:87:2c:61:59:87:81:
5d:2b:15:9f:7d:76:5e:6a:38:8b:f7:22:ec:25:60:
4a:05:e1:9e:31:15:d4:9c:78:e9:ab:f8:6b:1a:19:
19:78:21:7f:db:32:57:67:40:02:0b:63:79:50:6b:
f8:7d:18:79:62:69:69:ab:e1:60:b1:16:6e:11:74:
a8:fb:96:83:7d:9c:b7:2d:1b:c5:2d:ec:d3:2e:bf:
95:16:9f:da:12:4d:cc:35:c5:fb:c8:b1:68:19:ff:
bd:fe:1e:3d:98:49:e6:1e:3a:75:1f:3f:3a:83:90:
b0:e7:1c:8b:6b:41:50:a7:fd:03:f5:c0:8e:30:e7:
72:3f:41:24:a8:59:57:9e:5c:c6:fa:ee:45:2d:10:
44:97:dd:af:99:f8:6e:ca:2e:14:40:dd:11:5f:65:
3c:7c:2c:9d:d3:2f:c7:8b:ec:a6:68:c0:79:c9:69:
76:0d:a1:41:61:f1:10:1f:f3:64:61:68:f5:e8:f8:
f6:d7:47:04:9f:8b:53:da:77:99:90:d0:db:01:7b:
b4:3d:74:a3:9f:04:48:13:a8:0f:67:fb:42:dd:a3:
1c:26:62:66:47:be:3a:60:a4:80:4b:d1:f0:a8:1d:
c1:b2:1a:97:6d:9d:47:62:01:39:f0:6f:c6:0a:2f:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:6A:92:41:0A:1E:6E:30:0F:0E:EE:F0:AD:D3:B4:8B:BE:3B:1A
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:bd:a7:7b:63:77:f8:35:de:e8:49:7f:31:df:ec:9c:b9:
ac:bf:dc:6a:00:dd:3a:26:c6:c6:b7:d8:eb:58:40:4d:0a:5c:
f2:76:ba:cb:e3:f5:57:10:1c:40:f2:2c:d3:f4:6e:1c:e0:f6:
ed:14:2f:80:e0:58:18:4b:79:cd:7a:e9:3f:fc:ff:e0:9e:fa:
bd:85:99:27:cf:aa:d5:04:91:9a:78:99:d6:9f:47:7f:cd:93:
9e:73:f0:93:6b:5f:cb:4f:20:cf:5e:24:9d:d9:fd:ee:9f:46:
73:84:38:c1:67:cb:07:24:d5:d0:33:d9:cf:f7:0c:72:7c:ba:
48:d6:ae:6b:dd:10:f2:6c:0f:b5:98:5a:31:99:ba:0b:e7:ae:
17:d1:c9:42:ff:dd:d1:db:44:0b:9f:11:3c:7d:d3:6b:13:d7:
b3:50:c7:71:22:4b:c0:47:75:b6:59:1c:da:7d:b6:fe:22:32:
db:36:16:70:3d:f3:bf:90:05:c0:7b:e7:96:19:1f:12:65:32:
f7:63:1c:29:ba:c0:88:98:59:34:a9:ae:2d:27:9b:92:9b:47:
98:80:5c:91:31:96:2c:20:fb:ed:9a:42:5f:9f:e8:d8:2c:d6:
de:64:9d:bf:a6:61:03:70:72:fa:76:3b:13:6b:44:a5:d5:73:
4f:5e:8b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2bgtF/2Lfl9PcUFSd4QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OGYwNjNkMjllOTEwZjAzM2JlY2I2NTZlOGI5OTAxZjY5
ZWM5NzQwHhcNMjYwNTEzMDEwMDQ1WhcNMjYwNTE0MDEwMDQ1WjAzMTEwLwYDVQQD
EygwMTMxNmE5MjQxMGExZTZlMzAwZjBlZWVmMGFkZDNiNDhiYmUzYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc3iG7z3kiaHLGFZh4FdKxWffXZe
ajiL9yLsJWBKBeGeMRXUnHjpq/hrGhkZeCF/2zJXZ0ACC2N5UGv4fRh5Ymlpq+Fg
sRZuEXSo+5aDfZy3LRvFLezTLr+VFp/aEk3MNcX7yLFoGf+9/h49mEnmHjp1Hz86
g5Cw5xyLa0FQp/0D9cCOMOdyP0EkqFlXnlzG+u5FLRBEl92vmfhuyi4UQN0RX2U8
fCyd0y/Hi+ymaMB5yWl2DaFBYfEQH/NkYWj16Pj210cEn4tT2neZkNDbAXu0PXSj
nwRIE6gPZ/tC3aMcJmJmR746YKSAS9HwqB3BshqXbZ1HYgE58G/GCi/CmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAExapJBCh5uMA8O7vCt07SLvjsaMB8GA1UdIwQY
MBaAFLSPBj0p6RDwM77LZW6LmQH2nsl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDct
M2M0M2MzZDM1ZWYzLzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNmM3ZmYtOTk4ZS00MTMxLWE3NDctM2M0M2MzZDM1ZWYz
LzEvdEk4R1BTbnBFUEF6dnN0bGJvdVpBZmFleVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpm9p3tj
d/g13uhJfzHf7Jy5rL/cagDdOibGxrfY61hATQpc8na6y+P1VxAcQPIs0/RuHOD2
7RQvgOBYGEt5zXrpP/z/4J76vYWZJ8+q1QSRmniZ1p9Hf82TnnPwk2tfy08gz14k
ndn97p9Gc4Q4wWfLByTV0DPZz/cMcny6SNaua90Q8mwPtZhaMZm6C+euF9HJQv/d
0dtEC58RPH3TaxPXs1DHcSJLwEd1tlkc2n22/iIy2zYWcD3zv5AFwHvnlhkfEmUy
92McKbrAiJhZNKmuLSebkptHmIBckTGWLCD77ZpCX5/o2CzW3mSdv6ZhA3By+nY7
E2tEpdVzT16Lfg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:20 2026 by rpki-client