Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: WUjubPpLNZfEMe9ntNupmU5lBM+8Ha3YWXHdxu+lMfc=
Subject key identifier: 37:25:8A:B1:69:D5:B3:57:70:6F:6D:F1:BA:8F:BD:4C:26:95:E5:95
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019E3005722BAA8DAF39F3A50787E4C40A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 09:02:03 +0000
Manifest this update: Sat 16 May 2026 09:02:03 +0000
Manifest next update: Sun 17 May 2026 09:02:03 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: M9MvmVQNBSFIoGIehXeiZKafK0XmBB7gn6Hd3G8sCqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:72:2b:aa:8d:af:39:f3:a5:07:87:e4:c4:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: May 16 09:02:03 2026 GMT
Not After : May 17 09:02:03 2026 GMT
Subject: CN=37258ab169d5b357706f6df1ba8fbd4c2695e595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:fb:75:ff:f6:26:f8:62:14:97:d2:63:7e:
78:0f:ea:f1:73:7b:06:78:4d:51:b7:55:87:e0:3b:
de:f5:33:2f:2f:d0:b1:28:cc:30:0a:72:b6:32:3c:
36:98:9c:b4:f4:ad:8a:ab:42:dd:00:c6:57:67:1a:
73:20:3c:55:1a:ba:db:e7:33:83:cf:97:96:d2:9e:
2f:89:86:b1:8a:5c:4c:f1:1a:9b:ea:d3:26:a4:93:
7d:91:f8:a1:3d:d6:5e:d5:1c:a3:41:70:c2:6a:a8:
df:56:b9:ad:e4:14:0d:31:d5:a5:b8:5b:02:89:eb:
04:70:26:64:73:3b:3c:95:02:17:75:9b:1b:33:90:
5f:30:d8:89:e9:1e:23:e5:79:c5:49:97:be:28:af:
30:d1:5f:5c:e8:2c:11:b1:a6:22:a3:24:e8:ff:f6:
85:ae:c2:97:36:81:5b:58:dd:d9:42:ba:b6:b9:75:
f0:af:ba:ed:16:67:f6:ec:a5:e5:21:1a:e1:f6:e6:
5c:60:ce:2f:62:4c:50:1f:51:ea:58:99:27:6c:e5:
fe:23:43:19:12:e2:b8:ee:84:d3:9a:f9:87:e3:de:
e4:00:e7:5b:a2:e5:80:f8:1e:88:ab:ed:25:4d:e6:
bb:f9:f6:1f:11:76:ed:7b:63:70:5e:60:b2:c6:58:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:25:8A:B1:69:D5:B3:57:70:6F:6D:F1:BA:8F:BD:4C:26:95:E5:95
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:12:c6:c7:1e:f8:c0:86:7a:35:bc:06:09:1a:bb:b7:c7:28:
85:e7:47:e2:c0:cd:12:ee:40:1a:10:6c:6c:a8:f3:4d:04:b8:
6f:d3:28:66:de:c9:7f:c6:59:bf:eb:1e:fa:55:e4:9c:08:25:
78:b4:66:55:27:32:52:3f:f6:51:f7:d7:02:44:57:a9:00:84:
ff:e7:87:7d:17:a8:28:f9:bb:72:1a:71:4f:e1:b6:1d:42:b3:
55:4e:e6:c4:b9:dd:09:53:fe:c2:50:e8:54:d8:65:7a:cb:76:
5e:36:dc:0f:34:f5:6f:ba:0d:0e:3a:65:d4:94:9b:52:87:5f:
e3:05:6b:62:48:49:cb:a6:06:78:22:e1:0d:bd:3b:72:d5:28:
5e:54:3b:3f:de:38:61:9d:64:ec:17:50:06:01:fc:8e:78:ab:
ab:0b:17:c7:54:c9:12:33:70:bb:2a:02:0d:50:40:58:13:9d:
7f:9f:6f:b8:f1:4a:b3:ee:08:7f:eb:c8:bb:c0:6a:61:23:43:
67:f0:38:4d:12:9c:c8:06:ba:ea:f1:5a:c1:8a:86:5b:59:1f:
3b:a5:dd:81:03:c1:cc:da:9a:97:31:3b:a0:d5:f4:5f:5c:57:
1f:23:e4:50:57:3a:7e:11:71:1d:24:3c:97:59:0a:01:23:57:
ee:50:79:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBXIrqo2vOfOlB4fkxAp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1
NjVlZGIwHhcNMjYwNTE2MDkwMjAzWhcNMjYwNTE3MDkwMjAzWjAzMTEwLwYDVQQD
EygzNzI1OGFiMTY5ZDViMzU3NzA2ZjZkZjFiYThmYmQ0YzI2OTVlNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wb7df/2JvhiFJfSY354D+rxc3sG
eE1Rt1WH4Dve9TMvL9CxKMwwCnK2Mjw2mJy09K2Kq0LdAMZXZxpzIDxVGrrb5zOD
z5eW0p4viYaxilxM8Rqb6tMmpJN9kfihPdZe1RyjQXDCaqjfVrmt5BQNMdWluFsC
iesEcCZkczs8lQIXdZsbM5BfMNiJ6R4j5XnFSZe+KK8w0V9c6CwRsaYioyTo//aF
rsKXNoFbWN3ZQrq2uXXwr7rtFmf27KXlIRrh9uZcYM4vYkxQH1HqWJknbOX+I0MZ
EuK47oTTmvmH497kAOdbouWA+B6Iq+0lTea7+fYfEXbte2NwXmCyxlh4vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDclirFp1bNXcG9t8bqPvUwmleWVMB8GA1UdIwQY
MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct
ZWY2MWE2MTQxNDJkLzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk
LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihLGxx74
wIZ6NbwGCRq7t8cohedH4sDNEu5AGhBsbKjzTQS4b9MoZt7Jf8ZZv+se+lXknAgl
eLRmVScyUj/2UffXAkRXqQCE/+eHfReoKPm7chpxT+G2HUKzVU7mxLndCVP+wlDo
VNhlest2XjbcDzT1b7oNDjpl1JSbUodf4wVrYkhJy6YGeCLhDb07ctUoXlQ7P944
YZ1k7BdQBgH8jnirqwsXx1TJEjNwuyoCDVBAWBOdf59vuPFKs+4If+vIu8BqYSND
Z/A4TRKcyAa66vFawYqGW1kfO6XdgQPBzNqalzE7oNX0X1xXHyPkUFc6fhFxHSQ8
l1kKASNX7lB5Cw==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:30 2026 by rpki-client