Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: rTTjTfLRMj8pSGb4OVcVexInorVq/Q0ylYky1UHXpXg=
Subject key identifier: 7E:B7:D1:88:C8:55:D1:56:69:2A:E0:CA:AA:40:29:0E:7F:F9:F4:3C
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 019E1CB54B3AAEFEAE6C6F9D3EA4047D4852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:01:43 +0000
Manifest this update: Tue 12 May 2026 15:01:43 +0000
Manifest next update: Wed 13 May 2026 15:01:43 +0000
Files and hashes: 1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: NtKvtSX5YPHqeTIe82ZgewV27EO/7x6TafLL9YUsSqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:4b:3a:ae:fe:ae:6c:6f:9d:3e:a4:04:7d:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: May 12 15:01:43 2026 GMT
Not After : May 13 15:01:43 2026 GMT
Subject: CN=7eb7d188c855d156692ae0caaa40290e7ff9f43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:a4:5b:bc:2f:a3:00:6b:7c:12:b7:73:aa:
c3:ee:cd:23:67:2f:1c:83:2f:f2:6a:96:7d:63:b7:
f4:13:09:82:23:81:e3:d7:6a:57:d8:cb:b5:cb:00:
a1:7d:92:88:a0:9e:b6:a7:63:3d:7c:d6:ba:fc:c3:
46:29:64:13:26:95:27:87:b1:cb:c1:8c:dd:30:78:
b3:14:1e:7c:d9:25:54:db:16:d7:44:38:dd:45:3d:
88:73:c8:43:7a:97:0a:1f:27:3e:14:0e:19:78:9f:
52:10:00:3e:ad:96:e3:86:86:bd:b0:8d:9d:2b:18:
7d:73:23:8b:13:ff:81:19:40:27:6d:7a:9a:27:a1:
70:8d:06:cf:57:9a:b3:2b:7f:62:7c:20:2b:4a:89:
82:08:8e:e8:1f:8f:3c:cd:98:f7:a9:d9:f3:89:ca:
5b:f0:06:45:41:cc:e6:0d:c5:a0:08:87:7e:e3:26:
57:d9:d1:31:3d:ba:27:ef:8e:c4:22:a8:a6:32:0e:
42:91:b2:d9:75:e6:96:e7:c6:bd:2c:e3:97:62:f0:
57:34:5b:b1:40:98:df:7a:70:b8:b0:09:da:4c:11:
44:71:c3:cf:7c:9a:3d:27:23:49:ad:31:2b:b8:41:
08:cc:94:3f:bb:f1:8c:6b:cc:45:a7:49:d0:cf:cf:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:D1:88:C8:55:D1:56:69:2A:E0:CA:AA:40:29:0E:7F:F9:F4:3C
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:c3:42:12:20:ce:7b:64:7a:f7:bc:20:9f:4e:e3:e1:ec:
e6:97:1f:c6:fd:60:f4:83:66:7a:ae:fc:4a:84:c7:d3:e4:8e:
c7:05:18:91:1b:cc:bc:c2:25:7b:fd:cf:60:5c:01:24:5e:78:
b8:ce:fd:b8:e7:ce:fc:ab:cd:10:ae:54:50:ae:1e:bc:e1:97:
f6:a5:d2:2f:c6:24:76:fd:1e:87:29:12:bf:40:f9:07:d6:b1:
10:3c:8d:ed:88:84:1e:8b:15:f8:d1:23:54:ee:e8:44:2a:0c:
cd:f7:17:53:a0:0a:c0:e3:09:1f:b7:b0:31:94:06:c4:e0:a2:
d8:ee:1c:87:45:e1:72:fe:9a:93:3c:a8:b4:50:23:16:88:21:
67:33:0c:2d:6f:74:c2:cb:90:76:a3:09:9f:15:21:0b:76:de:
c0:d4:68:e5:50:d0:d9:8b:dd:3e:36:c5:b6:79:51:cc:a8:79:
4b:e8:71:b6:ad:12:4d:a5:48:ad:0c:8d:bf:5f:a9:7d:42:ca:
2c:fd:8b:ff:b1:cb:a0:f1:18:d2:61:a2:4a:c2:8a:fc:4b:09:
82:44:6c:11:4c:b4:1f:81:17:1c:75:99:83:90:9b:12:3b:67:
4d:ed:a1:c4:d4:1b:be:06:47:f2:48:67:70:04:15:91:4c:aa:
c3:9b:be:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctUs6rv6ubG+dPqQEfUhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1
ODU1YmIwHhcNMjYwNTEyMTUwMTQzWhcNMjYwNTEzMTUwMTQzWjAzMTEwLwYDVQQD
Eyg3ZWI3ZDE4OGM4NTVkMTU2NjkyYWUwY2FhYTQwMjkwZTdmZjlmNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsKkW7wvowBrfBK3c6rD7s0jZy8c
gy/yapZ9Y7f0EwmCI4Hj12pX2Mu1ywChfZKIoJ62p2M9fNa6/MNGKWQTJpUnh7HL
wYzdMHizFB582SVU2xbXRDjdRT2Ic8hDepcKHyc+FA4ZeJ9SEAA+rZbjhoa9sI2d
Kxh9cyOLE/+BGUAnbXqaJ6FwjQbPV5qzK39ifCArSomCCI7oH488zZj3qdnzicpb
8AZFQczmDcWgCId+4yZX2dExPbon747EIqimMg5CkbLZdeaW58a9LOOXYvBXNFux
QJjfenC4sAnaTBFEccPPfJo9JyNJrTEruEEIzJQ/u/GMa8xFp0nQz8/HzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH630YjIVdFWaSrgyqpAKQ5/+fQ8MB8GA1UdIwQY
MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt
OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh
LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQzDQhIg
zntkeve8IJ9O4+Hs5pcfxv1g9INmeq78SoTH0+SOxwUYkRvMvMIle/3PYFwBJF54
uM79uOfO/KvNEK5UUK4evOGX9qXSL8Ykdv0ehykSv0D5B9axEDyN7YiEHosV+NEj
VO7oRCoMzfcXU6AKwOMJH7ewMZQGxOCi2O4ch0Xhcv6akzyotFAjFoghZzMMLW90
wsuQdqMJnxUhC3bewNRo5VDQ2YvdPjbFtnlRzKh5S+hxtq0STaVIrQyNv1+pfULK
LP2L/7HLoPEY0mGiSsKK/EsJgkRsEUy0H4EXHHWZg5CbEjtnTe2hxNQbvgZH8khn
cAQVkUyqw5u+RQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:56 2026 by rpki-client