Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier: gobzuSGaAMc2dPIs/aZLS3DcgK3Fduxi8lga38W4nQ4=
Subject key identifier: B8:F3:27:A1:D5:23:5E:7A:DF:7B:20:71:93:68:E4:CD:B1:9C:91:E4
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 01A0005C70E5B299FDFCBB78C14D0013884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number: 0BA5
Signing time: Fri 14 Aug 2026 13:00:53 +0000
Manifest this update: Fri 14 Aug 2026 13:00:53 +0000
Manifest next update: Sat 15 Aug 2026 13:00:53 +0000
Files and hashes: 1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: vXRpDKff+r4NGPShe6gkdP2m4mWTxD8tYTmUo0ZsrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:70:e5:b2:99:fd:fc:bb:78:c1:4d:00:13:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Aug 14 13:00:53 2026 GMT
Not After : Aug 15 13:00:53 2026 GMT
Subject: CN=b8f327a1d5235e7adf7b20719368e4cdb19c91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:05:7a:25:00:7e:7a:8f:eb:f5:3c:14:a7:
76:19:0e:f0:70:7d:83:d4:b4:4f:9c:53:fb:e8:74:
5b:e3:39:d6:0b:05:31:53:bf:94:87:51:ca:2f:42:
47:41:03:c1:37:d9:6c:f4:f9:b6:52:b6:e1:5c:07:
a9:93:33:68:cd:09:b3:9d:97:bc:b5:64:71:ed:e3:
d2:0b:2c:30:4a:95:ae:3c:25:8d:8e:c7:4b:20:7e:
b4:82:99:5f:a0:25:d8:e6:33:e8:21:1b:54:3d:b1:
a3:19:8a:f3:cf:16:4d:8f:ba:a9:83:cb:9b:38:3c:
87:bd:14:09:b0:9b:28:cf:13:87:aa:ce:45:9e:4f:
c0:ab:ed:de:f7:ae:60:58:13:49:ca:cc:44:8e:18:
51:54:e3:db:12:29:ba:3b:35:9b:f9:0b:b4:f2:27:
06:fb:61:7c:b6:dd:df:e6:2d:4e:0d:92:10:4f:c6:
59:ce:3b:1d:5e:74:76:fe:3b:57:3e:5b:6d:93:b2:
51:5d:92:2f:ce:c2:f2:ae:78:b8:1c:57:98:00:19:
af:d7:bb:36:7a:fc:9a:73:c3:b9:01:72:ff:e2:73:
35:51:57:cc:c0:e0:3a:cd:13:5b:21:e4:fc:9d:70:
ef:bf:21:24:76:f7:3e:4e:08:78:03:e5:a8:56:94:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:27:A1:D5:23:5E:7A:DF:7B:20:71:93:68:E4:CD:B1:9C:91:E4
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a0:c5:67:4b:13:c8:b5:bc:ad:55:01:6b:3a:5e:cf:7e:89:
00:ab:83:1b:ab:d2:63:14:8a:82:ed:df:f9:91:0d:2b:4f:ee:
bd:eb:c8:d9:4b:33:82:80:29:fb:cc:86:6e:cd:19:64:b4:31:
bc:77:34:a3:96:7d:40:e3:4e:03:80:6c:c9:c5:c9:b2:6c:d3:
f0:77:62:84:c4:dc:3b:5e:42:f7:7b:14:79:03:e9:7f:dd:63:
fd:96:61:01:97:82:aa:73:a3:90:e2:9e:88:67:20:9b:ce:f3:
4e:6c:56:27:ec:95:e4:0d:3e:ae:cf:09:59:c6:2e:21:78:a3:
6e:37:e3:36:44:8a:fe:09:8d:c2:6c:58:8a:38:4a:2b:72:ae:
15:c0:76:a7:a4:24:97:63:78:b4:b5:87:ef:42:fa:27:c2:3c:
d4:db:9f:2b:b7:ab:f0:09:10:cd:a8:b9:75:ed:c7:5e:f9:5a:
c5:33:ca:24:21:bc:08:4f:ee:da:a1:4a:ca:98:57:41:14:b2:
25:9b:9a:8f:e0:3e:1c:27:bd:c9:f7:eb:0f:64:43:07:3a:50:
04:40:01:b4:d1:01:8d:a5:cf:c6:88:0f:0e:5a:4d:2c:b4:a2:
16:7f:eb:82:d4:f6:da:62:ba:74:55:28:45:4f:80:76:17:5b:
d7:fb:aa:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXHDlspn9/Lt4wU0AE4hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzA3NDc5Zjk5MWI1MDQzYjdkMzdmN2Y4ZmQ5MDQ2NmEy
YWJmMjcwHhcNMjYwODE0MTMwMDUzWhcNMjYwODE1MTMwMDUzWjAzMTEwLwYDVQQD
EyhiOGYzMjdhMWQ1MjM1ZTdhZGY3YjIwNzE5MzY4ZTRjZGIxOWM5MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDYFeiUAfnqP6/U8FKd2GQ7wcH2D
1LRPnFP76HRb4znWCwUxU7+Uh1HKL0JHQQPBN9ls9Pm2UrbhXAepkzNozQmznZe8
tWRx7ePSCywwSpWuPCWNjsdLIH60gplfoCXY5jPoIRtUPbGjGYrzzxZNj7qpg8ub
ODyHvRQJsJsozxOHqs5Fnk/Aq+3e965gWBNJysxEjhhRVOPbEim6OzWb+Qu08icG
+2F8tt3f5i1ODZIQT8ZZzjsdXnR2/jtXPlttk7JRXZIvzsLyrni4HFeYABmv17s2
evyac8O5AXL/4nM1UVfMwOA6zRNbIeT8nXDvvyEkdvc+Tgh4A+WoVpRL1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjzJ6HVI15633sgcZNo5M2xnJHkMB8GA1UdIwQY
MBaAFPEwdHn5kbUEO3039/j9kEZqKr8nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgt
YjZhYTBiODkyMGU1LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81NGQ0NDUtYTMwNy00OTg3LThiNjgtYjZhYTBiODkyMGU1
LzEvOFRCMGVmbVJ0UVE3ZlRmMy1QMlFSbW9xdnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKDFZ0sT
yLW8rVUBazpez36JAKuDG6vSYxSKgu3f+ZENK0/uvevI2UszgoAp+8yGbs0ZZLQx
vHc0o5Z9QONOA4BsycXJsmzT8HdihMTcO15C93sUeQPpf91j/ZZhAZeCqnOjkOKe
iGcgm87zTmxWJ+yV5A0+rs8JWcYuIXijbjfjNkSK/gmNwmxYijhKK3KuFcB2p6Qk
l2N4tLWH70L6J8I81NufK7er8AkQzai5de3HXvlaxTPKJCG8CE/u2qFKyphXQRSy
JZuaj+A+HCe9yffrD2RDBzpQBEABtNEBjaXPxogPDlpNLLSiFn/rgtT22mK6dFUo
RU+Adhdb1/uqEQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:25 2026 by rpki-client