Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File: 8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier: Aku/3MFp5hRB6EuoJMsnppnfu7CZhnAPSSmvtBP+mRE=
Subject key identifier: BC:42:9F:F0:0E:39:BE:02:0A:4C:A3:52:D8:38:27:36:41:0D:AD:B8
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 019E1D90B9945D1A041BC8A0163921C5BAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number: 162C
Signing time: Tue 12 May 2026 19:01:24 +0000
Manifest this update: Tue 12 May 2026 19:01:24 +0000
Manifest next update: Wed 13 May 2026 19:01:24 +0000
Files and hashes: 1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: /sKg8JFx+Eh+q9hstkiMubxo0uJfrt/9gDIRprVBE00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b9:94:5d:1a:04:1b:c8:a0:16:39:21:c5:ba:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: May 12 19:01:24 2026 GMT
Not After : May 13 19:01:24 2026 GMT
Subject: CN=bc429ff00e39be020a4ca352d8382736410dadb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:64:93:9d:17:02:5a:e1:24:87:b3:b7:b1:
ed:cf:94:5c:ad:d4:db:a7:fd:a8:04:47:77:e6:47:
2c:7b:c6:30:0b:95:0b:c6:e4:8b:59:ce:a8:02:3e:
2f:c8:83:a3:16:2a:01:ad:49:81:21:b0:d9:44:a5:
cb:38:a5:d4:22:5e:10:3c:23:9b:c8:05:3e:72:5c:
ff:f4:b8:1d:09:d1:ce:e4:a1:e6:86:f9:fa:91:58:
19:ae:ea:09:da:22:e7:42:73:95:a7:e5:ba:ed:f5:
87:97:03:36:43:d4:5d:ac:eb:15:c3:79:14:5c:26:
f0:86:79:8f:71:a6:2d:7b:91:c1:e4:6e:16:19:3b:
86:1d:60:6e:df:06:8a:86:16:0c:ca:26:50:d0:04:
8e:ed:e7:59:4a:e2:46:f8:84:f9:2d:23:f9:e8:98:
f8:0f:3c:a9:cf:e5:ea:78:e3:44:93:fb:f7:df:dc:
eb:fc:76:eb:14:99:20:c6:70:99:83:5a:29:c9:af:
9e:d6:0c:cc:57:6c:0f:52:90:d4:f2:5b:aa:9f:8b:
80:f2:c4:44:2c:cc:51:29:0b:64:1a:f5:fd:fa:e6:
ac:b8:f6:f8:40:a4:b0:49:cd:23:d6:e4:75:6b:f8:
b6:34:0f:32:f8:8f:15:d9:96:5a:d7:95:c5:9e:56:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:9F:F0:0E:39:BE:02:0A:4C:A3:52:D8:38:27:36:41:0D:AD:B8
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:e4:fd:a1:2b:a2:af:21:f3:27:9f:26:1c:9d:58:bf:1b:
af:78:06:12:04:d4:c1:77:17:ef:d1:6a:9a:ac:73:48:a4:fd:
1b:41:69:2e:b3:f9:28:63:ed:c7:33:b0:8b:de:48:16:07:bf:
d4:33:44:08:f7:88:fc:19:0f:44:8a:69:21:69:b4:4e:4f:1b:
d2:d6:90:73:b6:23:ea:1a:1c:77:37:77:4c:8a:92:2d:25:d8:
d5:50:5e:bd:21:b3:02:7f:12:3d:fa:29:eb:b2:8c:1e:5e:79:
c5:41:49:fe:74:3c:de:50:5d:ad:fb:4f:7d:ef:b6:88:b7:4b:
8e:2a:4f:96:f4:7b:90:d7:6a:8e:ed:4a:68:93:27:ec:08:59:
3d:7b:74:25:1b:5a:7b:32:38:d0:1c:bc:37:31:c6:90:cb:42:
66:d1:01:c3:3d:97:02:ed:43:f7:4b:25:f3:7a:65:e9:08:d1:
5c:cc:f7:8e:d6:29:60:21:01:8a:4a:45:e6:64:7c:40:88:d1:
36:97:4d:e0:01:ed:01:ce:21:ab:e6:ac:2a:03:93:63:f2:4c:
86:7b:cd:fa:f2:09:aa:7c:90:96:cf:9b:6e:ec:fb:01:ed:f7:
b9:ed:0e:ca:c6:97:73:00:42:cc:fd:ad:e1:ac:74:0f:71:d7:
06:75:54:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLmUXRoEG8igFjkhxbqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjYwNTEyMTkwMTI0WhcNMjYwNTEzMTkwMTI0WjAzMTEwLwYDVQQD
EyhiYzQyOWZmMDBlMzliZTAyMGE0Y2EzNTJkODM4MjczNjQxMGRhZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiZkk50XAlrhJIezt7Htz5RcrdTb
p/2oBEd35kcse8YwC5ULxuSLWc6oAj4vyIOjFioBrUmBIbDZRKXLOKXUIl4QPCOb
yAU+clz/9LgdCdHO5KHmhvn6kVgZruoJ2iLnQnOVp+W67fWHlwM2Q9RdrOsVw3kU
XCbwhnmPcaYte5HB5G4WGTuGHWBu3waKhhYMyiZQ0ASO7edZSuJG+IT5LSP56Jj4
Dzypz+XqeONEk/v339zr/HbrFJkgxnCZg1opya+e1gzMV2wPUpDU8luqn4uA8sRE
LMxRKQtkGvX9+uasuPb4QKSwSc0j1uR1a/i2NA8y+I8V2ZZa15XFnlbjwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxCn/AOOb4CCkyjUtg4JzZBDa24MB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOPk/aEr
oq8h8yefJhydWL8br3gGEgTUwXcX79FqmqxzSKT9G0FpLrP5KGPtxzOwi95IFge/
1DNECPeI/BkPRIppIWm0Tk8b0taQc7Yj6hocdzd3TIqSLSXY1VBevSGzAn8SPfop
67KMHl55xUFJ/nQ83lBdrftPfe+2iLdLjipPlvR7kNdqju1KaJMn7AhZPXt0JRta
ezI40By8NzHGkMtCZtEBwz2XAu1D90sl83pl6QjRXMz3jtYpYCEBikpF5mR8QIjR
NpdN4AHtAc4hq+asKgOTY/JMhnvN+vIJqnyQls+bbuz7Ae33ue0OysaXcwBCzP2t
4ax0D3HXBnVUsw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:07:44 2026 by rpki-client