Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: /LN5WVZr82s4EvQAcjs9EH9JvF3OvPudAUV9aVtxygQ=
Subject key identifier: 6D:DC:1F:10:62:AE:F6:D8:37:94:2D:2A:A9:BE:15:9B:8F:D3:11:9E
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019DCF075EC3F0B67F7432BF528EDAA76F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 04D3
Signing time: Mon 27 Apr 2026 13:00:59 +0000
Manifest this update: Mon 27 Apr 2026 13:00:59 +0000
Manifest next update: Tue 28 Apr 2026 13:00:59 +0000
Files and hashes: 1: 26pNnZAs6eQXtzEBl-JuV_Hr4wk.roa (hash: i3y/4e612Y8TxwRcGfb+jB6bsawJZiJXB+VOVsYv97E=)
2: 6gHGh_Vhu-73NoPUdJRnpDa5KBs.roa (hash: wloeetK1rz73W5ni+d8ZKgGnFA6OBAZGbgtH0vyx3gM=)
3: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: gfx9o5R4idFdu5ZaLl30SyVdCS7yCF7AyvSf5yPwzZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:5e:c3:f0:b6:7f:74:32:bf:52:8e:da:a7:6f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Apr 27 13:00:59 2026 GMT
Not After : Apr 28 13:00:59 2026 GMT
Subject: CN=6ddc1f1062aef6d837942d2aa9be159b8fd3119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:4e:f2:a4:ae:fe:e2:e8:28:75:68:a2:a1:
08:c5:76:47:85:20:6b:eb:50:77:f8:ec:a6:e3:56:
fe:d2:54:ac:81:ec:fc:bc:88:ee:5c:be:15:96:3e:
2f:3b:55:db:6a:51:f2:f6:bc:40:d1:12:c6:32:5a:
c5:fa:23:c6:e8:59:14:09:2f:d6:da:62:60:f7:6e:
81:53:03:2e:0f:62:f5:ca:ee:d2:c1:da:1d:ef:30:
54:7a:54:e8:f8:22:98:c6:e2:d3:55:9b:b3:a2:d6:
82:0c:e0:99:93:86:34:72:e9:4d:c1:56:4a:36:c2:
1c:d0:f6:68:94:77:2f:c6:f0:4b:19:39:59:1e:f7:
4a:be:79:52:46:1b:f8:69:52:80:d0:34:07:a1:3c:
da:a7:f2:79:6a:e9:42:c1:f1:c9:15:0f:4e:e7:ee:
0e:5b:2e:4b:50:97:02:be:7c:ae:f3:cf:9f:da:38:
90:87:20:34:d2:fc:a5:f1:e4:6d:47:c5:7a:6e:8a:
16:ba:fc:0a:b8:02:88:82:a2:a8:eb:92:0b:a6:da:
00:40:8c:d3:d8:34:0a:0b:7b:4f:66:f8:af:21:c4:
b6:90:60:14:fe:48:73:35:ff:ce:be:d1:61:bc:d2:
66:08:eb:20:ed:83:e5:c4:ae:cd:93:0b:72:2f:9e:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:1F:10:62:AE:F6:D8:37:94:2D:2A:A9:BE:15:9B:8F:D3:11:9E
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:d3:20:6a:44:cd:b8:0a:3f:a9:3b:32:77:6a:76:82:3a:
03:cd:a5:bf:85:b1:a5:da:e2:f4:67:f2:db:3b:a9:29:9f:8e:
b9:03:71:53:85:3e:08:4e:5b:52:e3:cd:2c:c3:b8:52:20:e0:
04:e9:53:bc:fc:19:d2:0d:50:03:94:4e:c0:73:8b:35:97:90:
51:5f:62:76:0e:18:0a:a2:83:ff:6d:cc:44:d9:8f:47:08:9a:
bf:2c:99:54:c4:32:eb:5b:56:fe:09:97:f4:35:64:88:3a:63:
87:ca:c5:c3:f0:2b:12:8a:0d:e4:db:5e:0d:21:48:5c:bc:e2:
6f:2f:30:8e:d4:c6:fb:a5:c4:ff:00:5f:bb:f9:55:6d:6b:4f:
77:87:de:d7:5b:08:ea:e8:3e:14:71:67:0e:85:5b:b6:3e:17:
5e:95:e6:07:6b:de:c1:f1:69:f4:06:c9:b4:55:7d:bf:e7:44:
6d:55:b5:37:ba:05:a5:45:32:2f:1d:17:20:ce:6f:52:95:8e:
11:6a:1d:75:75:d2:b9:1b:9a:d1:6f:ea:58:5a:1b:a4:ac:ec:
51:b1:5c:25:41:33:6c:d4:fa:74:66:e9:e2:58:42:e3:bb:8c:
c8:18:ea:cd:01:6f:6d:bd:eb:2e:9a:44:b8:42:51:f9:d5:8f:
59:72:03:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB17D8LZ/dDK/Uo7ap2+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjExZDJlY2Q2MDkyNGVmMjI3NmY4NjkzOWIwNzBjMDA4
MTU3NGIwHhcNMjYwNDI3MTMwMDU5WhcNMjYwNDI4MTMwMDU5WjAzMTEwLwYDVQQD
Eyg2ZGRjMWYxMDYyYWVmNmQ4Mzc5NDJkMmFhOWJlMTU5YjhmZDMxMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL5O8qSu/uLoKHVooqEIxXZHhSBr
61B3+Oym41b+0lSsgez8vIjuXL4Vlj4vO1XbalHy9rxA0RLGMlrF+iPG6FkUCS/W
2mJg926BUwMuD2L1yu7Swdod7zBUelTo+CKYxuLTVZuzotaCDOCZk4Y0culNwVZK
NsIc0PZolHcvxvBLGTlZHvdKvnlSRhv4aVKA0DQHoTzap/J5aulCwfHJFQ9O5+4O
Wy5LUJcCvnyu88+f2jiQhyA00vyl8eRtR8V6booWuvwKuAKIgqKo65ILptoAQIzT
2DQKC3tPZvivIcS2kGAU/khzNf/OvtFhvNJmCOsg7YPlxK7NkwtyL54yOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3cHxBirvbYN5QtKqm+FZuP0xGeMB8GA1UdIwQY
MBaAFPMhHS7NYJJO8idvhpObBwwAgVdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2Qt
YzVjZjA4ZWVkYjljLzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wMzQ5NjAtOWZlMy00Zjc0LWI5Y2QtYzVjZjA4ZWVkYjlj
LzEvOHlFZExzMWdrazd5SjItR2s1c0hEQUNCVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekrTIGpE
zbgKP6k7MndqdoI6A82lv4Wxpdri9Gfy2zupKZ+OuQNxU4U+CE5bUuPNLMO4UiDg
BOlTvPwZ0g1QA5ROwHOLNZeQUV9idg4YCqKD/23MRNmPRwiavyyZVMQy61tW/gmX
9DVkiDpjh8rFw/ArEooN5NteDSFIXLziby8wjtTG+6XE/wBfu/lVbWtPd4fe11sI
6ug+FHFnDoVbtj4XXpXmB2vewfFp9AbJtFV9v+dEbVW1N7oFpUUyLx0XIM5vUpWO
EWoddXXSuRua0W/qWFobpKzsUbFcJUEzbNT6dGbp4lhC47uMyBjqzQFvbb3rLppE
uEJR+dWPWXIDJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:31 2026 by rpki-client