Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: QbLVqevKFs7Fhyfkfq9LmbipqWuID/UovhO0ExgYNIE=
Subject key identifier: 1E:C6:4A:ED:D0:8D:73:AA:63:6D:A1:32:D0:78:7E:6D:E8:35:EA:47
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019DD087BFB512B0576281639DFFBDBFE88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 169E
Signing time: Mon 27 Apr 2026 20:00:50 +0000
Manifest this update: Mon 27 Apr 2026 20:00:50 +0000
Manifest next update: Tue 28 Apr 2026 20:00:50 +0000
Files and hashes: 1: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: 388PRi+rDkMtQACRsAqV0PIJ91V6OE4Zu/CpYoughzk=)
2: A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa (hash: z/I+DSZiJhEoYfti3DU2Ke90Z0Knyu3rdi+RgDuTITU=)
3: PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa (hash: WjBKvJrOfiKeEL68xDsyhZV8pUdA94BoBT1vP1PsXEY=)
4: orvP4nORXq0UzKjHkst8J153qic.roa (hash: eMGuLib/+B5pjoOYYUaTYix8ol70cyONihtgI6VfEKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:bf:b5:12:b0:57:62:81:63:9d:ff:bd:bf:e8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Apr 27 20:00:50 2026 GMT
Not After : Apr 28 20:00:50 2026 GMT
Subject: CN=1ec64aedd08d73aa636da132d0787e6de835ea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:3b:65:36:55:fb:69:3b:65:e4:88:fa:c9:
8a:d5:a5:aa:f8:05:13:57:2b:10:0a:cb:48:16:1f:
5e:df:2c:8c:6a:68:19:27:b2:8c:c3:9a:ba:74:17:
50:49:dc:74:64:c9:bb:84:70:24:79:d5:f0:a0:3a:
e2:ef:8f:5d:5c:2a:8c:c3:48:dd:a2:0b:59:12:39:
d2:4b:41:10:fa:c0:04:d0:cb:38:f1:99:09:ba:f2:
8c:31:5e:59:27:d5:16:5b:2f:4a:af:58:10:72:2a:
64:bd:70:0d:8c:37:67:96:65:94:39:bd:e4:3f:3b:
6f:d9:a3:69:b2:b9:10:38:9b:55:ad:4f:9b:bf:e7:
c8:db:c3:ad:0d:07:0d:38:04:fa:23:2c:34:68:40:
34:db:e7:6e:c6:16:72:cc:6d:e7:71:b7:b9:cb:94:
2e:8a:54:81:a6:5e:cb:4d:53:12:7b:45:77:ff:e9:
86:28:db:5c:86:91:4f:6f:37:fd:8c:ca:c1:43:96:
b5:89:c8:60:1d:d2:45:13:fa:7e:c7:95:14:59:eb:
25:e4:32:cc:c6:dc:09:e3:45:bd:69:1e:b4:47:c1:
25:83:d1:74:e1:87:53:bb:5d:9d:24:53:21:ad:d0:
1b:c0:65:bc:5f:28:49:73:df:ab:c1:4d:39:8e:33:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C6:4A:ED:D0:8D:73:AA:63:6D:A1:32:D0:78:7E:6D:E8:35:EA:47
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:24:ef:56:3b:5a:7b:a7:2f:de:e4:dc:b4:60:8e:66:5b:43:
1f:5f:e5:2d:52:ab:e3:fb:55:a6:ec:ad:db:b3:40:da:19:ff:
51:c8:4f:79:7c:8f:c4:7b:9f:28:12:df:9e:cd:73:f0:d3:02:
57:04:b3:4a:ae:ae:22:47:25:2b:67:ff:e7:22:f9:73:9e:68:
3b:ca:9d:13:19:d3:db:33:06:d8:0e:93:e8:58:c4:58:a1:c3:
ac:6e:a8:a6:f3:97:7a:cc:d9:55:66:e2:cd:ef:65:a8:01:78:
d3:03:46:ef:8f:2f:96:d9:b7:f8:1b:c3:7d:d9:97:ca:b7:b7:
97:ce:d8:2b:25:10:e7:b0:d3:03:df:e0:d0:32:58:bf:38:b3:
a0:b2:51:79:ed:58:b4:4e:66:64:f8:23:8f:c3:50:44:14:88:
40:da:34:82:3d:33:ea:91:de:5b:39:be:d8:2c:f9:28:82:33:
69:45:3b:b8:d3:68:d5:f9:61:82:19:55:fc:50:fa:fb:2b:0b:
f9:79:19:22:cc:60:8f:0b:6d:fa:2a:50:e8:71:e4:27:50:92:
2d:ab:dd:62:e0:13:70:a7:38:b7:a2:ee:1d:8c:87:28:d6:87:
ad:48:6e:4c:92:c9:77:13:2f:29:47:d6:16:30:47:9e:28:14:
44:c2:4a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qh7+1ErBXYoFjnf+9v+iNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTM2MjIyY2NiYzZjNzIyMTM2MDU0MGJhYjNhOWRiYTlm
MjM3YTAwHhcNMjYwNDI3MjAwMDUwWhcNMjYwNDI4MjAwMDUwWjAzMTEwLwYDVQQD
EygxZWM2NGFlZGQwOGQ3M2FhNjM2ZGExMzJkMDc4N2U2ZGU4MzVlYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0w7ZTZV+2k7ZeSI+smK1aWq+AUT
VysQCstIFh9e3yyMamgZJ7KMw5q6dBdQSdx0ZMm7hHAkedXwoDri749dXCqMw0jd
ogtZEjnSS0EQ+sAE0Ms48ZkJuvKMMV5ZJ9UWWy9Kr1gQcipkvXANjDdnlmWUOb3k
Pztv2aNpsrkQOJtVrU+bv+fI28OtDQcNOAT6Iyw0aEA02+duxhZyzG3ncbe5y5Qu
ilSBpl7LTVMSe0V3/+mGKNtchpFPbzf9jMrBQ5a1ichgHdJFE/p+x5UUWesl5DLM
xtwJ40W9aR60R8Elg9F04YdTu12dJFMhrdAbwGW8XyhJc9+rwU05jjMfWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7GSu3QjXOqY22hMtB4fm3oNepHMB8GA1UdIwQY
MBaAFPPjYiLMvGxyITYFQLqzqdup8jegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYt
ODcyNGVkNWU5MDNhLzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jYzQ4ZjQtMGQ5My00YjY5LThhNGYtODcyNGVkNWU5MDNh
LzEvOC1OaUlzeThiSEloTmdWQXVyT3AyNm55TjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCTvVjta
e6cv3uTctGCOZltDH1/lLVKr4/tVpuyt27NA2hn/UchPeXyPxHufKBLfns1z8NMC
VwSzSq6uIkclK2f/5yL5c55oO8qdExnT2zMG2A6T6FjEWKHDrG6opvOXeszZVWbi
ze9lqAF40wNG748vltm3+BvDfdmXyre3l87YKyUQ57DTA9/g0DJYvzizoLJRee1Y
tE5mZPgjj8NQRBSIQNo0gj0z6pHeWzm+2Cz5KIIzaUU7uNNo1flhghlV/FD6+ysL
+XkZIsxgjwtt+ipQ6HHkJ1CSLavdYuATcKc4t6LuHYyHKNaHrUhuTJLJdxMvKUfW
FjBHnigURMJKJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:09 2026 by rpki-client