Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: THyCOOVqAVUdI1ONLyD5VBctAs+/M/mMwEJLKdyk5wA=
Subject key identifier: 08:7E:0A:26:F7:64:95:02:E8:E1:A5:CE:1A:85:BC:2E:75:B4:A0:EB
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019E3184D5EA62DF6D8B9E31B59F4E9A0A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1646
Signing time: Sat 16 May 2026 16:00:49 +0000
Manifest this update: Sat 16 May 2026 16:00:49 +0000
Manifest next update: Sun 17 May 2026 16:00:49 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: NHCqWJuTQLANYl5BTKgXGzs2d9dah0RxNbgi319KN38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:d5:ea:62:df:6d:8b:9e:31:b5:9f:4e:9a:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: May 16 16:00:49 2026 GMT
Not After : May 17 16:00:49 2026 GMT
Subject: CN=087e0a26f7649502e8e1a5ce1a85bc2e75b4a0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:c4:50:d9:d1:05:8c:3f:cf:55:d5:75:ef:
47:7b:dd:b4:17:c4:95:6b:a8:78:fc:0f:ea:7c:c8:
03:62:e0:cc:9a:d2:a7:84:53:e0:83:24:40:b9:8b:
d6:b9:20:d5:b4:0e:15:5b:f1:64:1e:8b:25:58:db:
c5:fc:9c:83:c9:0d:bc:38:56:22:6c:bf:cd:32:65:
86:47:b0:db:fc:c2:21:6d:b3:e7:60:25:a8:d0:4a:
02:7a:c7:6a:0e:6a:1d:7b:db:f7:9c:10:f2:ce:10:
d4:83:fb:31:82:30:66:16:89:9c:b7:c7:95:1a:39:
5d:0d:ba:d0:46:6f:f7:1b:b6:84:47:5e:2e:93:3c:
5d:96:f4:50:83:c8:e2:30:30:f5:33:9b:b8:02:c9:
df:59:76:45:d2:d9:7c:56:19:82:dc:7b:26:a6:93:
01:d7:4c:92:72:0e:a5:fe:b8:b0:4b:8b:b0:83:8c:
9f:e3:3c:04:a6:43:37:d5:99:cb:3c:63:6f:28:b8:
35:20:26:32:77:f1:f6:97:86:1c:1a:3b:60:81:0f:
43:89:c5:e7:ab:70:86:95:51:d8:6a:ad:85:4a:97:
c8:8f:03:d0:e7:6a:0c:42:73:6d:d9:b2:aa:00:a3:
b2:b3:99:05:01:9b:50:43:9c:ec:6c:62:94:60:1b:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:0A:26:F7:64:95:02:E8:E1:A5:CE:1A:85:BC:2E:75:B4:A0:EB
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:19:d8:0e:2c:c2:e5:9e:54:87:2b:97:b7:9c:6f:02:6c:cd:
5e:1d:54:99:12:50:51:14:af:ef:a7:2f:bf:b4:c4:7b:a7:46:
7b:6f:94:f0:3f:36:a0:25:52:d1:29:bc:a4:c2:cc:a8:ea:14:
a1:76:da:fe:fb:75:29:8f:de:e8:8b:9e:3c:71:98:b4:0f:f8:
0c:dc:a1:8b:bf:2c:26:b5:ff:c5:37:e0:5c:20:b9:d6:6c:e9:
15:c3:39:7d:b1:79:35:6c:21:18:c3:5a:5b:87:38:87:b8:10:
14:f9:1d:58:c6:e1:4a:b0:fc:91:56:e1:45:8a:29:0f:08:92:
b0:fd:47:58:ae:7b:64:3b:27:be:d9:3b:6b:25:45:df:d1:71:
6c:c5:09:e9:b8:d8:e5:6a:57:1c:ca:ba:af:f0:83:c6:2c:49:
c0:f0:3b:27:45:da:f3:c1:6c:21:22:b7:d1:a5:9b:45:a8:b9:
6d:48:9c:06:8e:63:68:54:a7:ec:ce:1d:51:a3:df:d1:8b:7c:
c8:4c:70:4b:dc:bb:8f:3c:c0:fd:cc:34:5b:5b:cf:fc:1e:67:
e5:65:46:b4:27:e4:17:3b:e9:50:54:b1:be:07:99:52:a0:57:
d8:2a:60:39:c5:2f:82:d1:f2:1e:0c:75:e5:74:d1:1f:2d:93:
d5:7e:75:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhNXqYt9ti54xtZ9OmgppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjYwNTE2MTYwMDQ5WhcNMjYwNTE3MTYwMDQ5WjAzMTEwLwYDVQQD
EygwODdlMGEyNmY3NjQ5NTAyZThlMWE1Y2UxYTg1YmMyZTc1YjRhMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTEUNnRBYw/z1XVde9He920F8SV
a6h4/A/qfMgDYuDMmtKnhFPggyRAuYvWuSDVtA4VW/FkHoslWNvF/JyDyQ28OFYi
bL/NMmWGR7Db/MIhbbPnYCWo0EoCesdqDmode9v3nBDyzhDUg/sxgjBmFomct8eV
GjldDbrQRm/3G7aER14ukzxdlvRQg8jiMDD1M5u4AsnfWXZF0tl8VhmC3HsmppMB
10yScg6l/riwS4uwg4yf4zwEpkM31ZnLPGNvKLg1ICYyd/H2l4YcGjtggQ9DicXn
q3CGlVHYaq2FSpfIjwPQ52oMQnNt2bKqAKOys5kFAZtQQ5zsbGKUYBt0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh+Cib3ZJUC6OGlzhqFvC51tKDrMB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxnYDizC
5Z5UhyuXt5xvAmzNXh1UmRJQURSv76cvv7TEe6dGe2+U8D82oCVS0Sm8pMLMqOoU
oXba/vt1KY/e6IuePHGYtA/4DNyhi78sJrX/xTfgXCC51mzpFcM5fbF5NWwhGMNa
W4c4h7gQFPkdWMbhSrD8kVbhRYopDwiSsP1HWK57ZDsnvtk7ayVF39FxbMUJ6bjY
5WpXHMq6r/CDxixJwPA7J0Xa88FsISK30aWbRai5bUicBo5jaFSn7M4dUaPf0Yt8
yExwS9y7jzzA/cw0W1vP/B5n5WVGtCfkFzvpUFSxvgeZUqBX2CpgOcUvgtHyHgx1
5XTRHy2T1X51hA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:32:05 2026 by rpki-client