Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: E7wnITp2VhNIjGk/aBWSLFhK6OhQLQiph+ze41ZjwIc=
Subject key identifier: 3F:D4:9D:95:E5:6E:E7:F1:AF:A5:19:62:E3:CD:03:5C:16:CB:E5:C0
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019E1D223A59043E99B90B9792C1AF86835C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0FE5
Signing time: Tue 12 May 2026 17:00:42 +0000
Manifest this update: Tue 12 May 2026 17:00:42 +0000
Manifest next update: Wed 13 May 2026 17:00:42 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: 4YPtqlnZQzwruIcyjctmUZzE4rZhG+/L0lXtXiM9TC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:3a:59:04:3e:99:b9:0b:97:92:c1:af:86:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: May 12 17:00:42 2026 GMT
Not After : May 13 17:00:42 2026 GMT
Subject: CN=3fd49d95e56ee7f1afa51962e3cd035c16cbe5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:a2:6e:c9:bb:3a:00:fd:4f:71:66:59:52:
dd:51:a7:99:86:b2:8f:25:44:ac:08:6e:ab:b7:d2:
59:f6:95:ef:17:90:bd:74:31:6c:d4:08:d5:51:2b:
84:1b:12:62:c5:05:ba:19:1b:9c:5f:e7:31:40:5a:
02:94:20:2c:39:fd:8d:5a:e0:74:71:01:e7:b8:d8:
f7:1e:78:bf:d7:7d:ba:93:8a:c2:88:fc:8e:e4:ec:
fc:8f:e4:ea:86:fe:f7:25:c7:5e:07:f0:60:aa:76:
27:3c:d6:d2:b6:12:57:b2:3e:c7:b2:ff:e3:8c:e7:
b2:20:fa:af:93:9d:63:52:61:d9:0f:5d:7c:04:1e:
ae:e8:74:da:c8:12:a1:d8:d8:73:b9:fe:45:fd:2a:
26:64:d7:66:41:f7:c4:77:fb:d2:52:19:a8:8b:21:
0c:10:55:91:30:ac:04:24:d1:d6:c5:38:f8:fb:df:
9c:6f:d4:26:66:c6:f9:b7:92:bd:8f:bc:e5:f6:f2:
45:ad:72:63:e1:45:a3:c0:38:a6:f5:ea:87:3c:02:
b6:b4:52:36:0a:74:0a:5e:4b:ec:82:c3:1e:fd:e2:
21:43:47:5b:8c:2c:24:42:0b:ec:7a:19:f5:22:7b:
94:df:fb:eb:c6:35:dc:18:ec:86:a5:32:f2:8c:44:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:9D:95:E5:6E:E7:F1:AF:A5:19:62:E3:CD:03:5C:16:CB:E5:C0
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2d:cb:71:72:28:10:6d:cb:11:fa:75:50:1d:86:bf:15:c5:
71:fa:b4:69:36:15:fe:11:4e:c4:96:2e:13:ff:e1:0a:3b:5f:
7a:03:a8:75:aa:37:ad:0b:c4:81:91:ce:ec:fc:7b:b1:64:52:
25:8c:79:d6:20:70:51:50:1f:60:51:76:d8:00:85:fb:4e:e8:
51:75:3f:75:ed:2a:a4:e3:a0:d0:d8:50:3b:1c:47:7d:68:cf:
e9:c8:ac:2e:db:42:c2:6c:c7:b0:70:eb:e2:fa:fa:d4:32:4e:
17:2b:64:63:fe:8f:2f:fc:4f:6e:94:22:b6:46:6c:2f:cc:68:
b9:fd:54:1c:9f:d3:1c:d3:23:e2:41:a4:b6:f7:c4:90:0d:63:
8a:bd:f2:4e:e6:54:33:73:52:59:a9:55:80:2d:b9:f5:91:b2:
0e:71:1c:49:e2:d8:8f:af:0a:3b:bf:48:cc:30:04:c2:a3:9c:
b0:d6:59:93:7f:db:dc:a8:5a:17:6f:28:fa:58:b2:da:67:51:
6e:23:dd:09:50:02:25:0f:f5:14:b2:98:47:30:18:ac:4a:6d:
82:a4:9c:19:e9:63:ed:c0:70:d9:2e:d7:1f:44:be:ba:e8:af:
fe:7a:79:54:34:31:90:e3:b9:f9:1c:64:fc:3d:07:22:e1:b9:
80:12:c6:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIjpZBD6ZuQuXksGvhoNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZTZmMTVlZjc1MjY0OWYzYjExODdkZTY4M2ZlODNiMWNl
NjlmMDMwHhcNMjYwNTEyMTcwMDQyWhcNMjYwNTEzMTcwMDQyWjAzMTEwLwYDVQQD
EygzZmQ0OWQ5NWU1NmVlN2YxYWZhNTE5NjJlM2NkMDM1YzE2Y2JlNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicOibsm7OgD9T3FmWVLdUaeZhrKP
JUSsCG6rt9JZ9pXvF5C9dDFs1AjVUSuEGxJixQW6GRucX+cxQFoClCAsOf2NWuB0
cQHnuNj3Hni/1326k4rCiPyO5Oz8j+Tqhv73JcdeB/BgqnYnPNbSthJXsj7Hsv/j
jOeyIPqvk51jUmHZD118BB6u6HTayBKh2Nhzuf5F/SomZNdmQffEd/vSUhmoiyEM
EFWRMKwEJNHWxTj4+9+cb9QmZsb5t5K9j7zl9vJFrXJj4UWjwDim9eqHPAK2tFI2
CnQKXkvsgsMe/eIhQ0dbjCwkQgvsehn1InuU3/vrxjXcGOyGpTLyjES1cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/UnZXlbufxr6UZYuPNA1wWy+XAMB8GA1UdIwQY
MBaAFPHm8V73UmSfOxGH3mg/6Dsc5p8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQt
NzdlNmQzNjNiMTkyLzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wNGE0MmEtZDQ1NC00YTZlLWJjYmQtNzdlNmQzNjNiMTky
LzEvOGVieFh2ZFNaSjg3RVlmZWFEX29PeHptbndNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly3LcXIo
EG3LEfp1UB2GvxXFcfq0aTYV/hFOxJYuE//hCjtfegOodao3rQvEgZHO7Px7sWRS
JYx51iBwUVAfYFF22ACF+07oUXU/de0qpOOg0NhQOxxHfWjP6cisLttCwmzHsHDr
4vr61DJOFytkY/6PL/xPbpQitkZsL8xouf1UHJ/THNMj4kGktvfEkA1jir3yTuZU
M3NSWalVgC259ZGyDnEcSeLYj68KO79IzDAEwqOcsNZZk3/b3KhaF28o+liy2mdR
biPdCVACJQ/1FLKYRzAYrEptgqScGelj7cBw2S7XH0S+uuiv/np5VDQxkOO5+Rxk
/D0HIuG5gBLG1g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:58 2026 by rpki-client