Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: giY9DkEz9QNs8xHBpr2UnSBaZtNQEn5r3gKvtAlNKY0=
Subject key identifier: 1F:FF:89:35:B4:91:D8:94:75:58:0B:78:2C:E5:1E:02:B6:A0:A7:28
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019E1D9118766B2F797D9376886967D2CE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 09A0
Signing time: Tue 12 May 2026 19:01:48 +0000
Manifest this update: Tue 12 May 2026 19:01:48 +0000
Manifest next update: Wed 13 May 2026 19:01:48 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: TpyiDzYHUT/Yn/76XBNRaCOvcWcLFBRvx2+91/TXy5I=)
2: aHOqp1ZMoDrn_Rz0nU13prJUF_M.roa (hash: aPL+Mw0PwgSles+WTwist9EMPvDKnBfA4ED9lGmk97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:18:76:6b:2f:79:7d:93:76:88:69:67:d2:ce:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: May 12 19:01:48 2026 GMT
Not After : May 13 19:01:48 2026 GMT
Subject: CN=1fff8935b491d89475580b782ce51e02b6a0a728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:11:41:c9:ce:f7:44:2b:73:10:19:e5:fa:
c6:f1:55:37:08:d5:f1:7d:4d:7d:7e:d2:7d:c8:b4:
fc:57:74:21:28:45:26:cf:fc:01:54:05:f7:d5:f5:
6d:fa:8f:9c:b6:26:6e:5c:fc:af:89:7d:40:ba:1f:
73:03:58:6e:82:fc:3d:06:43:0d:a1:a0:1f:d2:21:
bd:c5:b2:d8:2f:f7:ea:41:63:30:ad:8a:26:2c:ed:
80:21:82:21:e9:49:5a:69:dd:28:2c:9a:60:64:7c:
69:64:27:9d:5a:af:16:bf:64:da:3f:ce:d2:27:8b:
22:25:2a:b9:63:1e:76:b5:f0:39:42:65:a1:09:d5:
b8:99:f4:28:7e:2e:be:3c:8c:84:23:2a:50:8a:75:
4a:81:79:64:17:67:7a:d6:8d:7c:69:61:3e:00:32:
54:2a:31:64:51:66:ed:ec:97:a0:30:20:3b:12:b0:
50:8a:70:c7:d9:99:67:c0:57:77:67:af:30:ad:30:
ba:57:7a:94:d5:3c:b2:75:e7:f9:6e:ae:06:06:80:
9a:16:44:e9:cf:9c:bd:b8:bd:01:32:68:63:93:d9:
11:20:65:22:c3:c6:76:f4:49:39:5d:bd:36:9e:8e:
3d:5c:5c:36:8e:40:24:56:f7:ec:88:e1:31:c2:42:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:89:35:B4:91:D8:94:75:58:0B:78:2C:E5:1E:02:B6:A0:A7:28
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c9:b8:e5:6d:4c:36:ca:0a:75:2c:f4:14:97:2f:5d:99:db:
6a:17:da:b1:75:5f:d6:93:5e:37:82:92:42:f5:41:c9:6d:1a:
41:33:5d:a5:8c:de:13:1b:27:6b:b5:d3:55:b9:bd:66:15:f6:
ad:1a:5f:17:b3:02:70:63:eb:00:69:28:c1:b0:19:0c:bc:a1:
ae:66:e1:2e:2a:c4:95:fb:ef:c8:16:50:6f:c9:97:54:67:4b:
aa:7f:3c:0b:32:89:a2:33:8e:ab:0f:51:ac:64:d9:db:ee:93:
8b:1e:32:0b:62:df:f4:0f:c2:13:ff:41:41:aa:70:e1:94:d2:
63:6f:04:da:52:7e:25:c0:1b:9c:3a:3b:77:24:b2:bb:ef:9e:
ad:26:a0:37:29:27:d0:f7:35:59:b5:9d:a4:ce:fc:b1:1a:dd:
1f:df:9e:56:81:2c:ab:23:97:75:f0:2b:77:b2:02:fc:76:ca:
44:ac:cb:bf:8e:5a:35:9c:da:33:61:f2:08:2a:80:b5:20:e2:
d4:9f:44:04:71:b8:60:66:e4:9b:67:26:ef:64:71:3d:c1:4d:
f2:1d:46:ed:96:01:e3:77:85:e4:37:c4:b4:3b:40:e0:ef:11:
6f:f8:0c:a2:ed:58:00:e0:8d:53:63:e4:56:cd:66:a2:bc:94:
5c:55:6b:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkRh2ay95fZN2iGln0s4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi
YmI2OTkwHhcNMjYwNTEyMTkwMTQ4WhcNMjYwNTEzMTkwMTQ4WjAzMTEwLwYDVQQD
EygxZmZmODkzNWI0OTFkODk0NzU1ODBiNzgyY2U1MWUwMmI2YTBhNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjloRQcnO90QrcxAZ5frG8VU3CNXx
fU19ftJ9yLT8V3QhKEUmz/wBVAX31fVt+o+ctiZuXPyviX1Auh9zA1hugvw9BkMN
oaAf0iG9xbLYL/fqQWMwrYomLO2AIYIh6Ulaad0oLJpgZHxpZCedWq8Wv2TaP87S
J4siJSq5Yx52tfA5QmWhCdW4mfQofi6+PIyEIypQinVKgXlkF2d61o18aWE+ADJU
KjFkUWbt7JegMCA7ErBQinDH2ZlnwFd3Z68wrTC6V3qU1Tyydef5bq4GBoCaFkTp
z5y9uL0BMmhjk9kRIGUiw8Z29Ek5Xb02no49XFw2jkAkVvfsiOExwkKWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB//iTW0kdiUdVgLeCzlHgK2oKcoMB8GA1UdIwQY
MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt
YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx
LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8m45W1M
NsoKdSz0FJcvXZnbahfasXVf1pNeN4KSQvVByW0aQTNdpYzeExsna7XTVbm9ZhX2
rRpfF7MCcGPrAGkowbAZDLyhrmbhLirElfvvyBZQb8mXVGdLqn88CzKJojOOqw9R
rGTZ2+6Tix4yC2Lf9A/CE/9BQapw4ZTSY28E2lJ+JcAbnDo7dySyu++erSagNykn
0Pc1WbWdpM78sRrdH9+eVoEsqyOXdfArd7IC/HbKRKzLv45aNZzaM2HyCCqAtSDi
1J9EBHG4YGbkm2cm72RxPcFN8h1G7ZYB43eF5DfEtDtA4O8Rb/gMou1YAOCNU2Pk
Vs1moryUXFVrMg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:16 2026 by rpki-client