Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: d1M8lfA3XKe/7Hvk4Y3t1KBxRxmvyX2CoZejG2q4IbA=
Subject key identifier: 52:FD:09:A3:3F:05:5C:6C:A9:3F:DA:06:86:02:BE:67:DB:AA:15:FC
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 019CE4B558AE2EE4DAB1B49F05872BE821D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 0B22
Signing time: Fri 13 Mar 2026 01:00:15 +0000
Manifest this update: Fri 13 Mar 2026 01:00:15 +0000
Manifest next update: Sat 14 Mar 2026 01:00:15 +0000
Files and hashes: 1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: QnXtTlNmTIOF9IrIHk64d7nufw1IrMaEGf+oeYLxrtI=)
2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:58:ae:2e:e4:da:b1:b4:9f:05:87:2b:e8:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Mar 13 01:00:15 2026 GMT
Not After : Mar 14 01:00:15 2026 GMT
Subject: CN=52fd09a33f055c6ca93fda068602be67dbaa15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:a1:9a:1e:c4:d5:71:2f:6f:ae:ec:28:0c:
e0:37:46:32:f8:2d:06:95:a6:6b:39:02:1c:a6:31:
db:8a:03:b4:cd:c1:de:ee:ea:a3:7d:d3:e8:62:ad:
e9:62:18:0a:05:7f:3c:40:3e:e4:1c:81:46:e2:5c:
98:42:0b:d1:5d:7b:4f:26:78:cf:4b:cd:ee:45:a8:
d8:1d:4e:4e:22:78:79:61:ab:80:ba:e5:9a:c7:3f:
84:41:c2:d8:75:2e:aa:8f:91:88:45:e6:ed:19:bc:
43:a6:a5:da:72:ca:92:0e:76:79:64:0d:51:2f:df:
c5:38:42:04:b9:5f:0e:e6:b1:33:57:77:12:e1:c7:
f7:57:b4:37:9e:fd:3a:94:e1:cf:33:64:e7:01:56:
09:60:9f:b6:07:55:a4:c0:86:63:54:b0:8c:56:22:
e2:28:ca:e3:92:0f:2d:b2:2d:94:cf:45:80:81:95:
6a:16:a5:f2:c6:cf:5d:d4:e4:b1:a8:b7:4d:38:eb:
e8:32:21:58:96:75:48:89:29:75:6b:49:a9:69:77:
bb:1b:8a:5e:05:40:29:1d:c8:d7:68:fa:67:19:b6:
bb:92:43:c3:7d:07:6a:e4:ca:0f:78:92:9a:d5:e4:
7d:ef:5f:bc:dd:89:69:7b:44:a8:2c:07:31:0b:29:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:09:A3:3F:05:5C:6C:A9:3F:DA:06:86:02:BE:67:DB:AA:15:FC
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c0:34:01:f6:46:b8:30:40:15:de:1b:2d:06:6b:ea:3b:e6:
d1:ac:e9:ef:f6:60:44:f5:58:e1:da:a7:3a:50:e9:98:be:0b:
87:71:4d:ec:09:1c:09:1a:6a:ee:28:60:4b:2b:e4:60:a9:aa:
7c:ca:85:a0:c7:e2:7d:8e:c1:26:ce:95:27:7b:96:d3:76:4f:
2d:06:6b:e1:87:28:9a:48:ef:c6:a4:17:4e:65:de:6a:38:5f:
d1:fd:2b:b2:6d:50:4e:0b:72:b0:09:a6:78:8b:6b:f8:d8:81:
b8:d8:5e:98:a9:b6:80:b2:9b:96:63:20:b5:d1:54:22:95:28:
15:a2:03:39:06:6f:f6:a2:45:6b:3c:f7:0e:65:87:aa:9e:e1:
58:7b:15:ff:02:6e:91:52:85:fa:c0:8c:17:8d:bf:51:5a:af:
ef:d1:15:44:24:a0:b1:e9:05:4f:1a:24:47:90:f2:e5:95:09:
5c:b2:72:86:9a:6d:be:f4:9d:76:49:65:d8:04:e9:7c:54:47:
cd:c5:89:8c:ad:09:00:1f:ff:38:13:df:6f:0b:7b:ac:6b:b5:
4a:fd:cc:16:68:c2:41:eb:30:76:6d:f0:f0:f1:25:19:0b:e2:
92:20:01:b8:53:99:d0:9b:7a:82:24:ec:2a:fb:e2:27:ea:9f:
24:04:4c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktViuLuTasbSfBYcr6CHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw
ZDU0OGQwHhcNMjYwMzEzMDEwMDE1WhcNMjYwMzE0MDEwMDE1WjAzMTEwLwYDVQQD
Eyg1MmZkMDlhMzNmMDU1YzZjYTkzZmRhMDY4NjAyYmU2N2RiYWExNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmShmh7E1XEvb67sKAzgN0Yy+C0G
laZrOQIcpjHbigO0zcHe7uqjfdPoYq3pYhgKBX88QD7kHIFG4lyYQgvRXXtPJnjP
S83uRajYHU5OInh5YauAuuWaxz+EQcLYdS6qj5GIRebtGbxDpqXacsqSDnZ5ZA1R
L9/FOEIEuV8O5rEzV3cS4cf3V7Q3nv06lOHPM2TnAVYJYJ+2B1WkwIZjVLCMViLi
KMrjkg8tsi2Uz0WAgZVqFqXyxs9d1OSxqLdNOOvoMiFYlnVIiSl1a0mpaXe7G4pe
BUApHcjXaPpnGba7kkPDfQdq5MoPeJKa1eR971+83Ylpe0SoLAcxCykvjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL9CaM/BVxsqT/aBoYCvmfbqhX8MB8GA1UdIwQY
MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt
M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz
LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8A0AfZG
uDBAFd4bLQZr6jvm0azp7/ZgRPVY4dqnOlDpmL4Lh3FN7AkcCRpq7ihgSyvkYKmq
fMqFoMfifY7BJs6VJ3uW03ZPLQZr4YcomkjvxqQXTmXeajhf0f0rsm1QTgtysAmm
eItr+NiBuNhemKm2gLKblmMgtdFUIpUoFaIDOQZv9qJFazz3DmWHqp7hWHsV/wJu
kVKF+sCMF42/UVqv79EVRCSgsekFTxokR5Dy5ZUJXLJyhpptvvSddkll2ATpfFRH
zcWJjK0JAB//OBPfbwt7rGu1Sv3MFmjCQeswdm3w8PElGQvikiABuFOZ0Jt6giTs
KvviJ+qfJARMdQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:04 2026 by rpki-client