Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier: IPkhli+Zhxudrm1kiPv01TrzvYtHZBJ4CO06/NDZyV4=
Subject key identifier: 9C:F3:5E:84:70:01:11:4E:FC:98:EE:DB:0F:49:6E:9C:32:75:8C:7A
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial: 019E1CB5404DCEE6E21322DDD74D3C9377B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number: 0C8A
Signing time: Tue 12 May 2026 15:01:40 +0000
Manifest this update: Tue 12 May 2026 15:01:40 +0000
Manifest next update: Wed 13 May 2026 15:01:40 +0000
Files and hashes: 1: 6Wov37AwFcepue1WbA70fxV-s8I.asa (hash: kdFzn0uMLw4OiGMPXx8ZYbjqBGAjU05EQ4I1clqD91o=)
2: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: ZjO+FLWLDydA0M6WYVi7vWo/Nnv6X1C6VLVP21Cu4Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:40:4d:ce:e6:e2:13:22:dd:d7:4d:3c:93:77:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Validity
Not Before: May 12 15:01:40 2026 GMT
Not After : May 13 15:01:40 2026 GMT
Subject: CN=9cf35e847001114efc98eedb0f496e9c32758c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:8e:a3:c9:0d:89:e2:1b:f6:26:f8:d8:9b:
e6:c4:ef:60:bd:25:f4:24:56:da:5d:43:d3:79:39:
5d:55:e0:1d:98:75:bc:cc:e3:27:0a:b3:40:b9:a9:
e3:73:d4:37:86:da:86:b9:5b:07:21:41:d6:5b:ef:
57:18:cf:f1:25:3e:60:2b:88:5a:1f:bc:a0:28:9a:
cc:4f:fd:74:94:af:e6:c3:dd:07:c7:73:bd:02:df:
b4:06:f6:9d:17:60:ac:f9:f4:21:5e:a2:c9:3e:5b:
87:2c:8d:72:8e:f4:b4:2c:55:d2:2b:da:df:b7:b4:
db:f1:9c:bf:cd:48:22:5b:11:01:af:c7:bb:da:78:
28:27:9d:9d:c1:4c:95:28:12:92:4f:60:e0:21:ec:
be:6a:22:0d:f6:9b:82:b4:8b:e9:cc:0c:1d:3d:2a:
2a:50:ad:a7:7b:42:3b:96:77:44:cd:11:d2:09:c3:
4a:8f:b1:5d:a7:fc:bf:cb:86:97:9f:42:52:d9:a5:
2f:26:d6:ef:75:94:ca:0f:45:be:f2:50:7b:46:03:
ef:63:cf:d1:ba:4c:18:83:d5:aa:47:d1:1c:c7:a8:
83:99:59:6b:e1:0e:8f:8e:a1:ce:64:4b:2f:f6:98:
a9:86:51:29:46:00:8b:6d:6d:b5:d3:9a:b0:ff:4a:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F3:5E:84:70:01:11:4E:FC:98:EE:DB:0F:49:6E:9C:32:75:8C:7A
X509v3 Authority Key Identifier:
keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a9:1f:88:45:64:97:4b:db:8a:a1:a2:ac:66:82:aa:23:24:
46:a3:8e:47:9a:cd:73:b1:29:7a:cb:44:e6:28:2d:72:f1:d4:
5f:23:c5:90:2d:94:a7:b2:77:12:ad:bd:f7:32:f1:cc:5b:e4:
10:a2:d3:04:aa:ae:1e:2c:bf:f9:54:6b:07:c2:34:89:e3:4c:
75:18:f4:f9:e9:5a:74:d2:8d:a6:33:44:62:f5:dd:16:ad:eb:
7b:c6:8a:8b:ea:69:57:d8:27:7a:59:1d:cd:c1:1f:c3:a8:1e:
15:0b:8a:56:4b:ba:0c:98:c4:40:2f:7d:b4:de:a0:79:96:17:
6e:8b:15:a4:e1:cc:07:fb:90:e4:d4:f3:1a:8e:44:09:93:75:
eb:31:ad:1b:69:96:fd:ce:7a:d2:9b:61:81:7b:2c:51:27:49:
e7:6d:18:ae:1c:7f:db:31:17:be:13:88:5c:2c:47:9f:5d:d6:
29:a2:ca:99:8a:c3:ac:67:d8:a3:75:bd:69:9e:a4:3a:d3:06:
1c:6b:62:ef:99:4d:99:93:2d:51:85:7e:13:d0:14:34:73:db:
35:aa:73:25:6f:0d:bd:8e:0a:c4:7f:14:36:05:0d:36:a0:e7:
6a:1a:55:b8:19:01:c2:a9:30:9b:1f:20:3e:eb:a5:af:20:47:
e9:f4:e4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctUBNzubiEyLd1008k3e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmU4MTk5YTE3Y2FjYWE2Y2Q1MmQ3OTQxMjM2ZGE2ZTU2
ZTFiZWEwHhcNMjYwNTEyMTUwMTQwWhcNMjYwNTEzMTUwMTQwWjAzMTEwLwYDVQQD
Eyg5Y2YzNWU4NDcwMDExMTRlZmM5OGVlZGIwZjQ5NmU5YzMyNzU4YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjByOo8kNieIb9ib42JvmxO9gvSX0
JFbaXUPTeTldVeAdmHW8zOMnCrNAuanjc9Q3htqGuVsHIUHWW+9XGM/xJT5gK4ha
H7ygKJrMT/10lK/mw90Hx3O9At+0BvadF2Cs+fQhXqLJPluHLI1yjvS0LFXSK9rf
t7Tb8Zy/zUgiWxEBr8e72ngoJ52dwUyVKBKST2DgIey+aiIN9puCtIvpzAwdPSoq
UK2ne0I7lndEzRHSCcNKj7Fdp/y/y4aXn0JS2aUvJtbvdZTKD0W+8lB7RgPvY8/R
ukwYg9WqR9Ecx6iDmVlr4Q6PjqHOZEsv9piphlEpRgCLbW2105qw/0obAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzzXoRwARFO/Jju2w9JbpwydYx6MB8GA1UdIwQY
MBaAFIO+gZmhfKyqbNUteUEjbablbhvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mZjUwZWMtYjEyZC00Nzk4LTg5ZmEt
MjJkMWJjZmExZWRhLzEvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mZjUwZWMtYjEyZC00Nzk4LTg5ZmEtMjJkMWJjZmExZWRh
LzEvZzc2Qm1hRjhyS3BzMVMxNVFTTnRwdVZ1Ry1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqkfiEVk
l0vbiqGirGaCqiMkRqOOR5rNc7EpestE5igtcvHUXyPFkC2Up7J3Eq299zLxzFvk
EKLTBKquHiy/+VRrB8I0ieNMdRj0+eladNKNpjNEYvXdFq3re8aKi+ppV9gnelkd
zcEfw6geFQuKVku6DJjEQC99tN6geZYXbosVpOHMB/uQ5NTzGo5ECZN16zGtG2mW
/c560pthgXssUSdJ520Yrhx/2zEXvhOIXCxHn13WKaLKmYrDrGfYo3W9aZ6kOtMG
HGti75lNmZMtUYV+E9AUNHPbNapzJW8NvY4KxH8UNgUNNqDnahpVuBkBwqkwmx8g
PuulryBH6fTkNQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:30 2026 by rpki-client