Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: INi/Qxg9NufK05qNAI+XE7uRxTojtHXt2Cs/tqRpzHc=
Subject key identifier: 4A:34:30:56:19:B4:BF:66:E9:CE:87:6E:70:D7:30:D2:48:E0:C2:A2
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019E1CEC0733DEE0CE71420F6D559D3BD97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 1093
Signing time: Tue 12 May 2026 16:01:30 +0000
Manifest this update: Tue 12 May 2026 16:01:30 +0000
Manifest next update: Wed 13 May 2026 16:01:30 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: tqc3Klrm2rFdnHs02YcdY1qrhLavUFv5z5hA51G7El4=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:07:33:de:e0:ce:71:42:0f:6d:55:9d:3b:d9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: May 12 16:01:30 2026 GMT
Not After : May 13 16:01:30 2026 GMT
Subject: CN=4a34305619b4bf66e9ce876e70d730d248e0c2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:cc:7c:d7:db:0f:db:03:ec:69:06:a2:ba:
d0:cd:b1:b4:1c:de:58:e0:b4:08:10:08:77:ba:93:
93:a6:20:76:7a:03:80:c1:51:fe:60:8d:b9:be:99:
fb:9b:87:04:11:79:e4:52:81:bb:db:a3:fb:c4:a8:
2e:95:30:07:34:a4:19:cb:f6:22:97:cf:9d:1f:cc:
1b:47:37:70:45:76:17:67:ba:ec:70:cc:7b:28:7c:
59:1c:f5:4f:92:21:c1:e0:0c:a3:d6:89:fb:ae:a6:
e4:f3:b9:37:2e:63:7b:64:d2:75:22:64:fa:2a:e9:
b6:37:ee:67:7f:6b:f9:34:7f:8f:8c:08:2d:4a:12:
56:f5:17:48:47:b6:29:b9:fd:5a:75:51:04:47:da:
ad:ce:78:0b:a5:0c:48:e1:56:36:43:89:d0:43:38:
1c:f1:08:86:78:e0:47:35:29:46:cc:d3:34:e6:56:
b9:b7:f1:90:93:76:d6:ec:0c:aa:28:e6:f2:b3:16:
17:00:03:d1:f5:f7:84:db:1e:ff:35:d3:5d:4e:c8:
81:a9:97:e6:29:45:4b:ba:ec:b7:d0:12:70:15:b8:
10:f0:e9:27:da:14:fa:f6:a1:8b:5f:4a:bb:06:05:
07:ef:c4:68:0a:2d:93:1b:c8:9b:ac:c5:72:97:fb:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:30:56:19:B4:BF:66:E9:CE:87:6E:70:D7:30:D2:48:E0:C2:A2
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:72:8b:f9:44:26:f8:81:6d:b5:db:ad:80:3b:af:ea:c3:
75:20:e7:3a:95:fa:c4:b8:bf:83:59:6f:98:b2:69:a4:10:60:
48:2a:24:be:9d:38:9a:f7:47:36:fb:6f:b8:cd:e4:de:3b:f1:
f2:95:08:76:bc:b6:96:eb:08:3a:b6:33:a9:3b:ec:e9:6c:e3:
fd:86:75:21:bf:0d:57:e6:cd:a3:aa:a9:2d:0c:27:7c:34:e3:
b1:fb:f1:e7:2b:0d:1d:a8:8f:16:5c:94:00:d5:5d:53:e9:08:
3d:44:23:12:69:be:9b:61:e1:45:8a:df:1a:96:e7:f6:7e:cb:
a6:66:b7:80:19:55:08:54:fc:31:05:82:89:a7:dc:c5:ee:ab:
31:4d:06:28:8d:21:5f:c7:ba:e0:1d:fb:5b:9a:a9:c8:f9:fd:
15:1b:54:c0:f0:62:18:d4:99:5b:e5:ff:32:9a:87:8c:e0:63:
8b:92:55:d4:71:3c:86:67:25:ca:40:4e:36:b6:05:91:9d:0a:
5c:bc:16:46:7f:56:6c:65:bc:b6:ea:4a:ba:82:6c:e2:a2:54:
82:a9:b9:ba:49:64:91:f0:7a:a0:1e:a7:00:7b:3b:d4:fd:c4:
63:1e:a2:11:03:19:f7:f3:b9:c0:5b:b9:03:7d:9b:f2:91:4f:
1e:4f:42:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7Acz3uDOcUIPbVWdO9l9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjYwNTEyMTYwMTMwWhcNMjYwNTEzMTYwMTMwWjAzMTEwLwYDVQQD
Eyg0YTM0MzA1NjE5YjRiZjY2ZTljZTg3NmU3MGQ3MzBkMjQ4ZTBjMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXvMfNfbD9sD7GkGorrQzbG0HN5Y
4LQIEAh3upOTpiB2egOAwVH+YI25vpn7m4cEEXnkUoG726P7xKgulTAHNKQZy/Yi
l8+dH8wbRzdwRXYXZ7rscMx7KHxZHPVPkiHB4Ayj1on7rqbk87k3LmN7ZNJ1ImT6
Kum2N+5nf2v5NH+PjAgtShJW9RdIR7Ypuf1adVEER9qtzngLpQxI4VY2Q4nQQzgc
8QiGeOBHNSlGzNM05la5t/GQk3bW7AyqKObysxYXAAPR9feE2x7/NdNdTsiBqZfm
KUVLuuy30BJwFbgQ8Okn2hT69qGLX0q7BgUH78RoCi2TG8ibrMVyl/txowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo0MFYZtL9m6c6HbnDXMNJI4MKiMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4Jyi/lE
JviBbbXbrYA7r+rDdSDnOpX6xLi/g1lvmLJppBBgSCokvp04mvdHNvtvuM3k3jvx
8pUIdry2lusIOrYzqTvs6Wzj/YZ1Ib8NV+bNo6qpLQwnfDTjsfvx5ysNHaiPFlyU
ANVdU+kIPUQjEmm+m2HhRYrfGpbn9n7Lpma3gBlVCFT8MQWCiafcxe6rMU0GKI0h
X8e64B37W5qpyPn9FRtUwPBiGNSZW+X/MpqHjOBji5JV1HE8hmclykBONrYFkZ0K
XLwWRn9WbGW8tupKuoJs4qJUgqm5uklkkfB6oB6nAHs71P3EYx6iEQMZ9/O5wFu5
A32b8pFPHk9CIA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:49:27 2026 by rpki-client