Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File: 8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier: WdYFiYhILwuGhVHVabHbKKDK3y/pco7y68sKX+mzndg=
Subject key identifier: 1F:2F:BA:BA:65:93:77:56:65:DE:5A:AC:45:69:39:D6:ED:B0:C4:22
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer: /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial: 019E1DFDF4DCA3E414610523443B3BA4905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number: 0C89
Signing time: Tue 12 May 2026 21:00:43 +0000
Manifest this update: Tue 12 May 2026 21:00:43 +0000
Manifest next update: Wed 13 May 2026 21:00:43 +0000
Files and hashes: 1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: rPwwNPI4K+p6Xmv3j3mrzwbktn4r4v3F3rr8o5p5l/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f4:dc:a3:e4:14:61:05:23:44:3b:3b:a4:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Validity
Not Before: May 12 21:00:43 2026 GMT
Not After : May 13 21:00:43 2026 GMT
Subject: CN=1f2fbaba6593775665de5aac456939d6edb0c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:84:a6:f5:5a:be:23:3e:4d:6a:fe:ac:28:
b8:3d:0c:f9:c5:78:ec:56:70:d6:49:2b:72:69:a0:
e1:9d:09:53:d1:f3:cd:4c:a3:96:80:bf:98:74:88:
7c:94:98:87:6e:c7:c3:27:af:f9:c3:e7:fa:7f:bb:
78:60:97:77:53:ea:8a:04:69:75:de:25:72:a4:e5:
81:bd:b1:bf:d9:5a:65:1f:fd:ff:e6:ad:45:6b:98:
7c:fb:84:c3:92:2c:6f:29:2e:91:b4:7c:2e:ba:b4:
8a:85:b4:65:d9:99:b8:13:55:c4:c6:43:c8:5f:aa:
9c:72:82:16:b1:7e:46:b1:d7:48:ff:e2:ce:89:b5:
4e:20:e4:f4:62:1b:a3:b9:91:33:89:0a:41:92:4b:
74:49:49:65:c3:de:b3:4e:e9:45:fc:de:a7:cb:c0:
53:10:6d:35:80:23:ba:ca:5a:21:a9:1c:2c:68:7b:
aa:36:09:b2:d2:fb:89:23:b9:9e:8c:ac:f5:a3:a2:
28:13:e5:09:ed:4f:73:60:30:bb:5b:3e:b1:d2:88:
e5:b2:39:59:13:c9:f2:87:18:c4:f1:36:3d:29:b9:
ad:85:83:0a:3c:1a:70:b5:84:50:65:64:52:b8:73:
71:29:b1:6d:2f:8b:d6:98:07:36:42:9e:ad:f9:1e:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:BA:BA:65:93:77:56:65:DE:5A:AC:45:69:39:D6:ED:B0:C4:22
X509v3 Authority Key Identifier:
keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:29:50:4b:3e:84:60:02:5b:14:ad:ce:03:49:e0:d9:b1:
ae:44:1d:16:ca:cb:83:27:65:c5:95:87:b6:8d:90:49:fc:7a:
d6:f0:da:7c:2b:da:5a:39:bc:cc:67:12:10:6d:08:0d:10:aa:
d6:9f:da:27:ad:09:3d:8f:59:e6:90:94:b9:d7:a9:fc:17:87:
9e:44:52:94:60:9c:f0:71:59:7c:99:98:9a:0a:f0:df:92:43:
d3:28:2b:03:8c:1a:b9:0e:01:7a:8b:2b:cb:37:5b:13:8f:94:
4e:36:76:48:b5:81:c6:03:b4:46:53:d1:65:b0:88:e8:72:0d:
db:00:ba:44:e4:20:69:5b:c2:53:27:94:e5:06:db:36:c4:d2:
2c:22:53:bb:cb:1c:9a:30:6f:49:98:b7:5c:be:23:a6:13:1c:
5d:31:71:ef:48:7e:f9:35:b1:e0:f6:0c:3b:8a:3e:68:34:b4:
a5:a3:14:e3:44:7f:1f:a7:76:f2:1e:79:54:f6:e5:a7:24:06:
95:7b:2f:de:fb:7c:1b:2f:a6:95:6e:e2:f2:47:27:32:8f:8c:
0b:07:1f:a1:45:9b:f6:bc:b5:ec:65:d9:58:fc:3d:7d:a3:aa:
d3:ba:fc:a8:63:53:ea:23:9e:79:31:da:c1:4d:a4:2b:53:91:
c5:35:87:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fTco+QUYQUjRDs7pJBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx
ODdkMzAwHhcNMjYwNTEyMjEwMDQzWhcNMjYwNTEzMjEwMDQzWjAzMTEwLwYDVQQD
EygxZjJmYmFiYTY1OTM3NzU2NjVkZTVhYWM0NTY5MzlkNmVkYjBjNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWeEpvVaviM+TWr+rCi4PQz5xXjs
VnDWSStyaaDhnQlT0fPNTKOWgL+YdIh8lJiHbsfDJ6/5w+f6f7t4YJd3U+qKBGl1
3iVypOWBvbG/2VplH/3/5q1Fa5h8+4TDkixvKS6RtHwuurSKhbRl2Zm4E1XExkPI
X6qccoIWsX5GsddI/+LOibVOIOT0YhujuZEziQpBkkt0SUllw96zTulF/N6ny8BT
EG01gCO6ylohqRwsaHuqNgmy0vuJI7mejKz1o6IoE+UJ7U9zYDC7Wz6x0ojlsjlZ
E8nyhxjE8TY9KbmthYMKPBpwtYRQZWRSuHNxKbFtL4vWmAc2Qp6t+R5sGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8vurplk3dWZd5arEVpOdbtsMQiMB8GA1UdIwQY
MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt
N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi
LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEcpUEs+
hGACWxStzgNJ4NmxrkQdFsrLgydlxZWHto2QSfx61vDafCvaWjm8zGcSEG0IDRCq
1p/aJ60JPY9Z5pCUudep/BeHnkRSlGCc8HFZfJmYmgrw35JD0ygrA4wauQ4Beosr
yzdbE4+UTjZ2SLWBxgO0RlPRZbCI6HIN2wC6ROQgaVvCUyeU5QbbNsTSLCJTu8sc
mjBvSZi3XL4jphMcXTFx70h++TWx4PYMO4o+aDS0paMU40R/H6d28h55VPblpyQG
lXsv3vt8Gy+mlW7i8kcnMo+MCwcfoUWb9ry17GXZWPw9faOq07r8qGNT6iOeeTHa
wU2kK1ORxTWHFw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:41 2026 by rpki-client