Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: /uJWCtO/y7v6ZZvjK/9m1iCECpNIpttE2YUcs+6zn0g=
Subject key identifier: CF:F0:0C:3A:2A:3F:11:40:E2:1A:B5:42:53:A4:F8:79:53:DC:36:A0
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019E1D22364376809E2CE66253E109E5B747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 08B1
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: x4Vf7SVJS/zvQ02E3VFTudi8s2ajs14MUV1XJIPWGIk=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:36:43:76:80:9e:2c:e6:62:53:e1:09:e5:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=cff00c3a2a3f1140e21ab54253a4f87953dc36a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:66:a7:19:f3:4c:3d:af:5f:09:1d:0f:10:
1c:09:3a:ad:74:08:b2:fe:ba:9e:85:a0:cf:1e:2b:
e2:80:3f:6a:d0:05:68:26:4e:73:51:6b:bd:c8:3f:
58:f6:0f:2e:27:0b:ac:14:17:ce:a8:ed:aa:1b:2b:
24:f2:29:9f:f7:2e:18:ba:aa:46:45:31:cc:56:62:
7c:dd:f3:e4:fb:20:d5:27:58:76:13:81:40:ab:05:
13:a9:56:fb:b4:45:01:6a:a2:be:43:59:f0:32:5e:
38:78:87:e2:69:63:f2:25:0f:5e:37:74:3a:da:dd:
12:64:a0:b9:a8:ac:08:d3:4d:cc:a4:5c:ff:56:ce:
d9:40:e2:8a:ba:ce:24:8e:2b:b6:32:93:43:41:ab:
2b:2e:da:af:24:4e:9c:79:c3:80:82:fb:16:9a:cf:
59:3e:7b:bd:06:20:de:4d:79:9b:7b:5e:75:cc:55:
58:dc:77:eb:cf:7f:ac:5f:bb:d4:4a:c7:59:86:38:
1e:d4:1b:92:29:c3:26:87:48:4b:b3:e7:8d:11:07:
09:3b:72:ed:87:5f:04:1a:79:18:71:5a:8e:e7:c7:
27:4d:98:5d:f0:6d:b4:23:b4:c0:d2:08:67:dc:43:
a0:f3:e2:fd:62:41:0f:f6:ab:9a:bb:04:8f:21:76:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F0:0C:3A:2A:3F:11:40:E2:1A:B5:42:53:A4:F8:79:53:DC:36:A0
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:64:48:86:73:d3:27:e2:3b:e7:d8:f2:10:59:bb:6e:b5:38:
e6:ed:6b:99:6c:61:56:33:05:1c:10:4e:d2:73:cc:47:08:47:
87:66:99:a1:4f:dc:84:02:8e:8e:8a:6b:9b:1e:ea:03:40:67:
e0:13:2c:56:2a:4d:7e:63:12:c2:13:ce:4a:f1:bf:ab:b6:72:
3f:7c:8c:c3:f7:4a:ba:3d:7a:c2:61:6d:20:9a:fe:04:99:ab:
6a:31:0a:af:90:c0:02:a2:05:fc:3b:2b:05:a4:5c:9a:c1:10:
5d:bc:98:45:1c:1a:b7:d4:be:c6:13:93:f0:3c:d7:3a:ac:2a:
6a:84:a1:19:a5:15:9f:0b:8a:b2:18:d6:43:35:5a:ad:28:e0:
08:fb:04:63:55:4a:ae:69:8d:dd:f6:8a:e6:fe:36:62:a5:2a:
09:51:34:72:3d:96:3e:a3:da:f2:b3:d5:96:56:24:ba:cc:bf:
27:79:4d:84:2a:fc:23:b7:e5:ce:b5:d9:cd:1a:05:4a:ba:d9:
d2:2d:48:63:ce:4a:95:1f:ce:98:16:ee:95:5d:28:63:b0:94:
43:9e:a2:26:5a:f4:7b:10:2c:f8:e9:21:1d:84:92:cd:63:8e:
91:ab:48:4b:35:84:86:7f:8f:16:4d:fc:f5:f2:40:08:6b:14:
80:3b:45:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIjZDdoCeLOZiU+EJ5bdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjYwNTEyMTcwMDQxWhcNMjYwNTEzMTcwMDQxWjAzMTEwLwYDVQQD
EyhjZmYwMGMzYTJhM2YxMTQwZTIxYWI1NDI1M2E0Zjg3OTUzZGMzNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ylmpxnzTD2vXwkdDxAcCTqtdAiy
/rqehaDPHivigD9q0AVoJk5zUWu9yD9Y9g8uJwusFBfOqO2qGysk8imf9y4YuqpG
RTHMVmJ83fPk+yDVJ1h2E4FAqwUTqVb7tEUBaqK+Q1nwMl44eIfiaWPyJQ9eN3Q6
2t0SZKC5qKwI003MpFz/Vs7ZQOKKus4kjiu2MpNDQasrLtqvJE6cecOAgvsWms9Z
Pnu9BiDeTXmbe151zFVY3Hfrz3+sX7vUSsdZhjge1BuSKcMmh0hLs+eNEQcJO3Lt
h18EGnkYcVqO58cnTZhd8G20I7TA0ghn3EOg8+L9YkEP9quauwSPIXZxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/wDDoqPxFA4hq1QlOk+HlT3DagMB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWRIhnPT
J+I759jyEFm7brU45u1rmWxhVjMFHBBO0nPMRwhHh2aZoU/chAKOjoprmx7qA0Bn
4BMsVipNfmMSwhPOSvG/q7ZyP3yMw/dKuj16wmFtIJr+BJmrajEKr5DAAqIF/Dsr
BaRcmsEQXbyYRRwat9S+xhOT8DzXOqwqaoShGaUVnwuKshjWQzVarSjgCPsEY1VK
rmmN3faK5v42YqUqCVE0cj2WPqPa8rPVllYkusy/J3lNhCr8I7flzrXZzRoFSrrZ
0i1IY85KlR/OmBbulV0oY7CUQ56iJlr0exAs+OkhHYSSzWOOkatISzWEhn+PFk38
9fJACGsUgDtFlA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:39 2026 by rpki-client