Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: eN6/Ih3Tys5JghVcnOxvOhCbIlyms2qu6OHH+rvS0Q4=
Subject key identifier: 64:3B:8F:56:6B:54:BA:ED:28:75:1F:FB:F3:50:0D:53:8F:BD:F7:8D
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019E1C106B2B7D2EE243DBF1951D013352D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0886
Signing time: Tue 12 May 2026 12:01:38 +0000
Manifest this update: Tue 12 May 2026 12:01:38 +0000
Manifest next update: Wed 13 May 2026 12:01:38 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: xnLk0meFGP2MEtXJTpPNWbwrWnhdgG+12ROjww4hcRE=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:6b:2b:7d:2e:e2:43:db:f1:95:1d:01:33:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: May 12 12:01:38 2026 GMT
Not After : May 13 12:01:38 2026 GMT
Subject: CN=643b8f566b54baed28751ffbf3500d538fbdf78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:61:f7:88:39:2e:f6:72:33:5c:fc:77:d8:
c5:87:55:51:15:33:20:43:bc:6f:d2:b7:3b:8d:36:
69:11:61:cc:14:64:d5:72:cb:2e:88:42:64:6c:cf:
2d:43:18:92:24:f7:8b:86:73:0e:8a:21:ea:d8:fa:
49:84:9c:f7:40:7c:ca:06:47:bf:09:95:fc:aa:cb:
8b:82:d1:20:76:c5:40:c7:4e:46:55:9d:8c:38:a4:
e9:33:78:40:0c:53:cd:87:c9:69:81:cc:e1:a8:07:
d3:70:1c:26:9f:4f:17:3b:07:f8:1c:72:e0:56:33:
4c:62:37:a8:4f:24:60:a9:db:d9:99:4b:d1:98:aa:
a9:26:ed:11:b8:a5:65:b3:52:cd:5e:2f:31:19:6a:
2d:98:c0:ea:19:78:a5:54:41:23:4d:07:70:56:2c:
9b:04:f8:c5:6d:49:ee:84:94:8c:6b:60:8a:13:f5:
43:bb:f7:ff:77:e9:0b:27:d0:82:e8:b0:ab:3a:e8:
bd:ad:07:90:1c:a3:8a:64:d1:1a:e5:49:7f:1f:2d:
9b:80:37:ea:0d:e5:44:41:d5:d5:5d:60:10:bc:c2:
0e:c4:ee:46:22:bb:6c:28:f2:95:45:82:4e:f1:9c:
19:ec:95:f7:73:0c:25:56:44:54:25:26:07:50:33:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:8F:56:6B:54:BA:ED:28:75:1F:FB:F3:50:0D:53:8F:BD:F7:8D
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:e0:7b:7c:1e:55:a5:75:b2:cc:85:b9:51:91:21:69:62:
c7:d2:4c:36:97:12:bb:93:ca:f0:23:85:2e:01:0c:9f:be:96:
c4:d9:ea:a9:0f:1a:b4:fa:12:7c:62:57:48:a9:f5:ea:bd:dc:
d6:84:ff:f2:e8:51:eb:49:95:12:28:6b:0e:4d:c8:09:87:2c:
d7:3d:39:18:35:ef:57:4d:70:ac:43:ed:a9:fb:37:f6:05:12:
b1:07:02:82:b9:b6:e4:40:0c:bb:5d:00:07:22:0e:75:b7:bd:
e8:7d:db:76:1b:64:b0:49:5e:fd:ca:32:51:69:19:f3:77:f7:
71:a2:64:47:85:26:e1:42:d3:17:e2:e5:03:41:99:21:73:fa:
f1:d8:87:2b:a4:db:b5:5e:c1:9a:1d:bc:99:e9:1e:e9:a4:53:
e3:6f:77:c0:89:5d:86:b3:01:8f:0e:f6:69:bd:da:6a:a7:fe:
9f:e5:19:b3:c4:4d:02:a5:17:39:21:57:ce:9f:86:53:18:99:
9b:69:06:e6:a6:63:c7:51:4b:bd:22:e1:b1:35:b9:ab:2d:73:
0d:bb:26:90:74:74:c5:54:09:2c:28:e0:6e:23:f9:36:70:8b:
bd:77:95:40:09:38:8a:1e:bb:42:2c:54:3e:d9:eb:0e:e0:e9:
a2:ac:d0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEGsrfS7iQ9vxlR0BM1LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz
MDc2M2YwHhcNMjYwNTEyMTIwMTM4WhcNMjYwNTEzMTIwMTM4WjAzMTEwLwYDVQQD
Eyg2NDNiOGY1NjZiNTRiYWVkMjg3NTFmZmJmMzUwMGQ1MzhmYmRmNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCBh94g5LvZyM1z8d9jFh1VRFTMg
Q7xv0rc7jTZpEWHMFGTVcssuiEJkbM8tQxiSJPeLhnMOiiHq2PpJhJz3QHzKBke/
CZX8qsuLgtEgdsVAx05GVZ2MOKTpM3hADFPNh8lpgczhqAfTcBwmn08XOwf4HHLg
VjNMYjeoTyRgqdvZmUvRmKqpJu0RuKVls1LNXi8xGWotmMDqGXilVEEjTQdwViyb
BPjFbUnuhJSMa2CKE/VDu/f/d+kLJ9CC6LCrOui9rQeQHKOKZNEa5Ul/Hy2bgDfq
DeVEQdXVXWAQvMIOxO5GIrtsKPKVRYJO8ZwZ7JX3cwwlVkRUJSYHUDMOeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ7j1ZrVLrtKHUf+/NQDVOPvfeNMB8GA1UdIwQY
MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt
OThkOWM0MjU3ZmM2LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2
LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi3ge3we
VaV1ssyFuVGRIWlix9JMNpcSu5PK8COFLgEMn76WxNnqqQ8atPoSfGJXSKn16r3c
1oT/8uhR60mVEihrDk3ICYcs1z05GDXvV01wrEPtqfs39gUSsQcCgrm25EAMu10A
ByIOdbe96H3bdhtksEle/coyUWkZ83f3caJkR4Um4ULTF+LlA0GZIXP68diHK6Tb
tV7Bmh28meke6aRT4293wIldhrMBjw72ab3aaqf+n+UZs8RNAqUXOSFXzp+GUxiZ
m2kG5qZjx1FLvSLhsTW5qy1zDbsmkHR0xVQJLCjgbiP5NnCLvXeVQAk4ih67QixU
PtnrDuDpoqzQ1g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:46 2026 by rpki-client