Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: IiKEAdau3VD9euTEcZdAOX4GpzEpAotEg3mbCZWu9sM=
Subject key identifier: E4:F6:9E:26:60:EE:F6:3D:4C:E7:40:E6:80:E0:FB:DE:0D:D8:61:7A
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 019DCF74E7D940B43D8EA97D0806356699CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 1691
Signing time: Mon 27 Apr 2026 15:00:38 +0000
Manifest this update: Mon 27 Apr 2026 15:00:38 +0000
Manifest next update: Tue 28 Apr 2026 15:00:38 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: GqA0rhiErDE+SfAl+9RXxsMiEqKifEWzzOrOG9P2yE0=)
2: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (hash: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:e7:d9:40:b4:3d:8e:a9:7d:08:06:35:66:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Apr 27 15:00:38 2026 GMT
Not After : Apr 28 15:00:38 2026 GMT
Subject: CN=e4f69e2660eef63d4ce740e680e0fbde0dd8617a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:c3:c5:94:cd:1f:60:6c:73:50:63:e5:f4:
89:67:0f:b5:10:44:3d:a2:b0:82:85:76:1c:54:c2:
70:0e:e8:92:74:70:b6:8a:d5:a9:ac:b8:5a:ca:97:
f0:0a:94:22:6a:e7:21:dd:d1:00:64:f5:d4:e3:29:
2c:ae:7f:ee:1e:5c:1c:08:17:1f:35:db:11:bc:e0:
b3:9f:f4:4f:71:13:4f:f8:1a:7d:2f:30:c0:25:b3:
9b:1f:ef:aa:2d:fc:27:47:ad:ad:e8:db:6c:1b:65:
f2:e2:ce:56:f5:0b:02:1e:8c:28:4e:c7:20:f3:d9:
6d:99:8d:7f:ed:a8:d7:47:d5:46:c3:18:75:d4:fd:
a4:3f:02:f4:0e:ad:81:ff:20:e5:0c:9a:1c:15:cf:
a0:9b:ed:05:f1:3a:da:6c:c8:d0:42:ba:99:dc:d8:
79:d5:4a:a2:0f:c0:a6:4e:e1:ef:1e:37:20:cc:6b:
6f:81:bb:17:65:d6:aa:3f:58:f6:ae:2d:44:19:07:
ae:f1:b3:cf:0c:8d:55:e4:2b:1e:57:20:3e:43:e2:
0c:41:3c:a6:6f:67:92:02:8e:ee:52:26:b9:8f:c9:
51:dc:aa:6f:c1:ab:10:92:e6:ef:b0:8e:93:ec:73:
d3:3e:47:0b:4d:7b:1f:7a:5e:e8:a0:68:eb:90:f7:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:9E:26:60:EE:F6:3D:4C:E7:40:E6:80:E0:FB:DE:0D:D8:61:7A
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:02:8f:ab:a3:bf:1e:7b:6f:e6:0f:a4:34:d3:a4:80:71:93:
0f:72:ca:23:dd:60:89:70:1d:d9:9b:3c:4f:a5:7b:0d:eb:f0:
3b:23:da:59:d9:c6:60:05:1c:22:a5:a3:61:9e:c8:22:ce:7e:
32:6f:cf:6d:af:f5:9d:23:c1:91:29:f7:98:01:cd:d3:e9:64:
ae:0f:6d:d6:2a:02:8f:e8:82:6e:f3:d3:79:63:2c:ad:28:fc:
28:7d:01:1b:09:dc:7d:04:e9:9a:94:3b:1f:c4:72:d0:62:91:
08:e0:ab:a8:4f:50:9d:c8:e9:0d:b0:65:4f:62:44:56:aa:ec:
49:44:d0:7a:64:df:71:cc:83:df:86:4b:e5:6d:32:02:97:95:
20:c4:f3:77:05:f8:4d:8c:89:c0:c4:72:5a:7e:f3:18:8e:59:
3a:21:6b:76:9e:0d:d7:f4:4e:e0:0e:ea:0d:4f:e7:6b:46:47:
cd:5b:7c:4d:bd:f7:a5:18:40:11:bc:10:2d:70:82:97:77:02:
6a:09:17:ca:ef:a5:bb:67:52:cc:47:7c:76:b3:88:a6:d7:8b:
a7:87:53:d1:9b:8c:31:9f:d7:4d:74:a0:00:ff:15:c7:5e:8f:
88:49:a0:f9:ee:aa:23:43:0b:0b:30:e2:88:3d:d8:c8:5b:69:
7f:a7:b8:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdOfZQLQ9jql9CAY1ZpnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3
Y2Y5OTQwHhcNMjYwNDI3MTUwMDM4WhcNMjYwNDI4MTUwMDM4WjAzMTEwLwYDVQQD
EyhlNGY2OWUyNjYwZWVmNjNkNGNlNzQwZTY4MGUwZmJkZTBkZDg2MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ITDxZTNH2Bsc1Bj5fSJZw+1EEQ9
orCChXYcVMJwDuiSdHC2itWprLhaypfwCpQiauch3dEAZPXU4yksrn/uHlwcCBcf
NdsRvOCzn/RPcRNP+Bp9LzDAJbObH++qLfwnR62t6NtsG2Xy4s5W9QsCHowoTscg
89ltmY1/7ajXR9VGwxh11P2kPwL0Dq2B/yDlDJocFc+gm+0F8TrabMjQQrqZ3Nh5
1UqiD8CmTuHvHjcgzGtvgbsXZdaqP1j2ri1EGQeu8bPPDI1V5CseVyA+Q+IMQTym
b2eSAo7uUia5j8lR3KpvwasQkubvsI6T7HPTPkcLTXsfel7ooGjrkPdKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT2niZg7vY9TOdA5oDg+94N2GF6MB8GA1UdIwQY
MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt
MzI3ZjgzMTk0NWZkLzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk
LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwKPq6O/
Hntv5g+kNNOkgHGTD3LKI91giXAd2Zs8T6V7DevwOyPaWdnGYAUcIqWjYZ7IIs5+
Mm/Pba/1nSPBkSn3mAHN0+lkrg9t1ioCj+iCbvPTeWMsrSj8KH0BGwncfQTpmpQ7
H8Ry0GKRCOCrqE9QncjpDbBlT2JEVqrsSUTQemTfccyD34ZL5W0yApeVIMTzdwX4
TYyJwMRyWn7zGI5ZOiFrdp4N1/RO4A7qDU/na0ZHzVt8Tb33pRhAEbwQLXCCl3cC
agkXyu+lu2dSzEd8drOIpteLp4dT0ZuMMZ/XTXSgAP8Vx16PiEmg+e6qI0MLCzDi
iD3YyFtpf6e4UA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:23:37 2026 by rpki-client