Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: 7PsMpOzH8zfrH7tMzHnG9nlkhNTN6x2kZs0O6lq31qs=
Subject key identifier: E1:3D:F3:4A:E2:5D:99:1C:EA:FD:2F:79:2F:F8:D7:EA:1F:32:3D:50
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 019E1CB485F833EACE6AD72BDEF6D646F96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 15:00:53 +0000
Manifest this update: Tue 12 May 2026 15:00:53 +0000
Manifest next update: Wed 13 May 2026 15:00:53 +0000
Files and hashes: 1: 1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (hash: KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=)
2: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: 9IHvkinZ8Zw23VgOczwvzad1vtb7iKtmKXcTwDhL+J0=)
3: ZHNg-iGHdhJIyPbT0YesOHZSckA.roa (hash: jtRC2+2eYimT7dpLaE8cbiYXDkhbQMmqL54jAdK1K3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:85:f8:33:ea:ce:6a:d7:2b:de:f6:d6:46:f9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: May 12 15:00:53 2026 GMT
Not After : May 13 15:00:53 2026 GMT
Subject: CN=e13df34ae25d991ceafd2f792ff8d7ea1f323d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:ff:bd:c6:f2:b2:d3:04:e8:71:2f:c4:14:
39:4a:fd:31:4c:f9:69:2e:ce:3c:79:65:78:5c:1d:
92:d5:bb:98:0f:6e:d7:0c:df:7a:cf:6d:09:12:39:
81:1b:ac:0f:2b:56:32:0c:f3:e7:bf:fe:97:5f:6e:
45:0a:4c:1f:2b:ee:43:b7:0b:91:22:a9:7d:7f:73:
99:31:46:af:be:1b:54:9c:14:7b:90:f2:ba:fd:6a:
ea:4b:68:b8:28:03:59:51:80:61:09:bf:61:35:10:
ee:41:81:21:bd:11:d2:88:29:20:df:07:9e:bf:28:
58:a4:52:ff:5b:75:8c:79:75:53:ae:4c:c5:da:36:
d2:2b:4f:c6:96:61:38:29:9e:83:61:ca:3e:21:ba:
9f:15:f0:0e:e8:83:7a:d0:3e:51:3e:8e:77:97:da:
d3:dd:5c:a5:7c:4e:aa:7b:c0:69:cf:62:ad:55:32:
bd:f2:0d:34:71:df:63:58:d8:ba:9a:9b:ca:ed:12:
cd:9a:be:46:71:59:6b:df:aa:a6:f9:ea:ee:e9:28:
1f:43:92:2e:d0:8d:c3:a3:bd:0a:e4:77:54:3a:b4:
d2:bb:b3:f4:97:89:34:21:03:02:f6:7d:d7:5b:9d:
76:48:d5:81:7c:61:45:54:ad:59:ab:c0:39:20:9d:
4a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:F3:4A:E2:5D:99:1C:EA:FD:2F:79:2F:F8:D7:EA:1F:32:3D:50
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:fc:08:f0:32:70:ce:26:3c:76:ff:46:77:f7:59:a4:da:
e8:ea:0c:7d:2d:52:8f:17:64:97:4c:da:9d:e9:f3:f1:61:d5:
3a:5d:be:2c:7c:16:33:cd:02:54:6f:37:73:5b:8b:7e:c6:e8:
0f:ff:da:ad:4a:b6:40:2c:6a:94:e0:03:9c:be:91:1e:aa:a9:
78:42:e0:6d:a6:79:48:73:fc:03:ec:fe:9c:98:59:bc:14:cf:
ae:23:77:ae:e6:67:f3:0a:0e:7f:d9:16:14:a1:8f:16:d8:01:
45:2c:24:d3:db:18:28:a8:4d:fe:ef:95:ce:c7:7f:46:b2:07:
15:00:f5:5b:5b:1b:2a:c8:6f:06:ca:52:4e:1d:57:30:fc:4b:
0e:5e:1c:d4:3a:5e:14:bd:c9:4e:7f:f1:43:64:c7:45:8d:67:
20:0f:c4:32:d4:2f:29:fa:e8:d7:8a:1a:72:cb:54:b1:c8:f2:
da:d6:05:06:88:f3:cc:91:f1:c7:ab:a0:2b:ea:bd:27:87:47:
0f:dc:66:64:24:13:88:81:b1:3f:5e:9d:c3:e2:c1:91:80:9a:
3f:78:6a:6b:c9:50:48:55:2c:d9:16:62:b8:30:87:82:c4:85:
b8:ea:e3:38:e1:3b:4f:85:cc:15:15:9c:53:d7:ae:ce:74:36:
0c:c8:7b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctIX4M+rOatcr3vbWRvlsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWIwYjU4NWI5YzM5NjI4OGQyMGU5Y2Y2NjVhZTFkZTM5
Zjc4MzMwHhcNMjYwNTEyMTUwMDUzWhcNMjYwNTEzMTUwMDUzWjAzMTEwLwYDVQQD
EyhlMTNkZjM0YWUyNWQ5OTFjZWFmZDJmNzkyZmY4ZDdlYTFmMzIzZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTX/vcbystME6HEvxBQ5Sv0xTPlp
Ls48eWV4XB2S1buYD27XDN96z20JEjmBG6wPK1YyDPPnv/6XX25FCkwfK+5DtwuR
Iql9f3OZMUavvhtUnBR7kPK6/WrqS2i4KANZUYBhCb9hNRDuQYEhvRHSiCkg3wee
vyhYpFL/W3WMeXVTrkzF2jbSK0/GlmE4KZ6DYco+IbqfFfAO6IN60D5RPo53l9rT
3VylfE6qe8Bpz2KtVTK98g00cd9jWNi6mpvK7RLNmr5GcVlr36qm+eru6SgfQ5Iu
0I3Do70K5HdUOrTSu7P0l4k0IQMC9n3XW512SNWBfGFFVK1Zq8A5IJ1KlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE980riXZkc6v0veS/41+ofMj1QMB8GA1UdIwQY
MBaAFPKrC1hbnDliiNIOnPZlrh3jn3gzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMt
OTA4YjI1MGNiYTc5LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iYmZhMTktZGViYy00Yzc3LThkNjMtOTA4YjI1MGNiYTc5
LzEvOHFzTFdGdWNPV0tJMGc2YzltV3VIZU9mZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy/8CPAy
cM4mPHb/Rnf3WaTa6OoMfS1Sjxdkl0zanenz8WHVOl2+LHwWM80CVG83c1uLfsbo
D//arUq2QCxqlOADnL6RHqqpeELgbaZ5SHP8A+z+nJhZvBTPriN3ruZn8woOf9kW
FKGPFtgBRSwk09sYKKhN/u+Vzsd/RrIHFQD1W1sbKshvBspSTh1XMPxLDl4c1Dpe
FL3JTn/xQ2THRY1nIA/EMtQvKfro14oacstUscjy2tYFBojzzJHxx6ugK+q9J4dH
D9xmZCQTiIGxP16dw+LBkYCaP3hqa8lQSFUs2RZiuDCHgsSFuOrjOOE7T4XMFRWc
U9euznQ2DMh7Ng==
-----END CERTIFICATE-----
Generated at Tue May 12 22:15:07 2026 by rpki-client