Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: u18Cq9+exIKctRXHKobN4ODLFBY14lfLt7+MKv//I3Y=
Subject key identifier: 7C:0D:B7:17:7F:43:5A:9F:CB:DA:33:3D:B1:D4:12:5A:0B:61:0A:41
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019E3117C9037487144E54335724BA8F39B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0F6C
Signing time: Sat 16 May 2026 14:01:42 +0000
Manifest this update: Sat 16 May 2026 14:01:42 +0000
Manifest next update: Sun 17 May 2026 14:01:42 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: ZiBwgWzXnW+iHv3E7TeHRRUkGps1v1nLHlLiUhGZVew=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:c9:03:74:87:14:4e:54:33:57:24:ba:8f:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: May 16 14:01:42 2026 GMT
Not After : May 17 14:01:42 2026 GMT
Subject: CN=7c0db7177f435a9fcbda333db1d4125a0b610a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:be:3f:20:30:e7:d7:21:d1:a0:3f:f8:ad:
4c:93:d4:f2:11:f1:96:d5:59:44:e9:71:d3:61:b1:
08:94:a3:ea:95:6b:41:da:d4:9d:f4:70:b3:af:94:
75:f9:96:89:d3:6b:bc:38:39:75:d6:80:09:4c:eb:
2c:14:9d:b2:63:fd:8e:d3:fa:ca:d5:c6:3b:b2:0e:
a6:6f:82:e0:b7:04:2b:91:b7:6b:63:b3:61:09:af:
16:3f:94:35:31:d9:5a:b9:ef:75:c1:8e:ef:57:b3:
62:82:56:b7:74:08:84:e4:d2:b8:01:63:b3:6c:0a:
73:f9:2e:ad:82:24:38:04:69:0f:8a:c2:07:79:97:
61:03:86:d5:89:a9:50:dd:c6:41:d9:82:07:37:06:
24:96:d1:28:62:38:bf:61:a9:f2:43:23:00:69:ae:
9b:73:75:33:fe:a8:7a:8b:9c:09:96:c1:91:84:ce:
a2:bc:64:7b:a4:8d:42:7e:7b:a1:74:4b:81:b4:5a:
17:cb:b5:f6:bc:8f:df:4f:4d:99:52:d4:9f:bf:f1:
7c:87:6c:01:2b:10:b6:da:9b:54:c6:e9:84:31:e5:
95:b7:d8:ee:ef:c2:ad:68:9b:31:a1:17:bf:a0:f3:
69:25:38:7a:b8:b2:68:68:01:92:0a:4e:07:86:0c:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:B7:17:7F:43:5A:9F:CB:DA:33:3D:B1:D4:12:5A:0B:61:0A:41
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:ff:e2:40:19:1d:7d:df:4c:27:b8:e0:e6:ff:9e:49:8d:
38:8e:9c:19:24:e8:12:9d:b1:49:89:d4:b9:3c:4b:2d:9c:ce:
07:57:e0:c2:69:73:ef:17:63:92:9f:6f:b3:b6:fe:30:45:31:
d0:d4:2f:d6:4f:8c:31:8c:d1:76:1e:a7:34:39:ca:69:0e:9a:
5b:eb:d4:38:62:12:fd:e7:96:8d:8c:de:ea:b7:69:f3:6f:6a:
48:40:d2:22:e0:24:97:2e:0f:bb:06:8c:a8:ed:44:c6:77:0b:
c7:d3:bd:14:f0:54:5f:00:92:5c:38:7d:dd:9b:ca:9c:2b:9c:
f0:8a:69:89:7b:62:75:3c:2a:ce:b6:21:93:93:45:b3:eb:86:
9d:6a:67:88:6e:1d:9b:46:95:03:93:e7:21:28:5a:33:e2:ac:
08:4a:93:f4:ee:84:b6:a1:18:27:b5:5b:ba:06:02:e0:f9:a0:
57:6a:49:27:f8:94:62:76:ef:7e:6a:0a:4f:26:19:b7:a4:1b:
25:e4:0b:c0:01:6e:ef:ed:a3:33:d6:1a:bc:af:51:8b:5a:61:
85:53:84:26:8b:23:d8:53:cb:6e:72:5b:aa:df:52:ab:49:19:
d3:64:2c:69:60:5b:56:2f:33:9f:65:30:00:a9:7d:57:cc:b4:
1d:82:38:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF8kDdIcUTlQzVyS6jzmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjYwNTE2MTQwMTQyWhcNMjYwNTE3MTQwMTQyWjAzMTEwLwYDVQQD
Eyg3YzBkYjcxNzdmNDM1YTlmY2JkYTMzM2RiMWQ0MTI1YTBiNjEwYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNi+PyAw59ch0aA/+K1Mk9TyEfGW
1VlE6XHTYbEIlKPqlWtB2tSd9HCzr5R1+ZaJ02u8ODl11oAJTOssFJ2yY/2O0/rK
1cY7sg6mb4LgtwQrkbdrY7NhCa8WP5Q1Mdlaue91wY7vV7Nigla3dAiE5NK4AWOz
bApz+S6tgiQ4BGkPisIHeZdhA4bVialQ3cZB2YIHNwYkltEoYji/YanyQyMAaa6b
c3Uz/qh6i5wJlsGRhM6ivGR7pI1CfnuhdEuBtFoXy7X2vI/fT02ZUtSfv/F8h2wB
KxC22ptUxumEMeWVt9ju78KtaJsxoRe/oPNpJTh6uLJoaAGSCk4HhgyynQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwNtxd/Q1qfy9ozPbHUEloLYQpBMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhr/4kAZ
HX3fTCe44Ob/nkmNOI6cGSToEp2xSYnUuTxLLZzOB1fgwmlz7xdjkp9vs7b+MEUx
0NQv1k+MMYzRdh6nNDnKaQ6aW+vUOGIS/eeWjYze6rdp829qSEDSIuAkly4PuwaM
qO1ExncLx9O9FPBUXwCSXDh93ZvKnCuc8IppiXtidTwqzrYhk5NFs+uGnWpniG4d
m0aVA5PnIShaM+KsCEqT9O6EtqEYJ7VbugYC4PmgV2pJJ/iUYnbvfmoKTyYZt6Qb
JeQLwAFu7+2jM9YavK9Ri1phhVOEJosj2FPLbnJbqt9Sq0kZ02QsaWBbVi8zn2Uw
AKl9V8y0HYI4fg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:39 2026 by rpki-client