Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: 08065Ipu9FWkAglKJGHYD5nOYSYTYXGAP9asv/Gvrkk=
Subject key identifier: 30:36:42:65:60:84:34:A8:BF:BE:F5:42:91:3A:18:23:28:60:7E:1E
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019E2FCD75FCD68C16B55125540EB65DE5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 08CF
Signing time: Sat 16 May 2026 08:00:54 +0000
Manifest this update: Sat 16 May 2026 08:00:54 +0000
Manifest next update: Sun 17 May 2026 08:00:54 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: eYndb/n+vVTWJZo/5QrbT0rxA31GCrRtmWdcuM2ntWc=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:75:fc:d6:8c:16:b5:51:25:54:0e:b6:5d:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: May 16 08:00:54 2026 GMT
Not After : May 17 08:00:54 2026 GMT
Subject: CN=30364265608434a8bfbef542913a182328607e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:8b:0c:0e:c8:ed:be:ca:fd:e5:3d:92:97:
ad:01:e7:39:8f:10:9e:72:10:9f:23:17:ac:74:2b:
e9:a5:94:5b:e5:bb:0b:c6:37:08:a7:30:70:0b:d6:
fe:97:26:76:bb:72:2a:db:a8:3c:7e:eb:87:62:bb:
b9:e0:2a:5b:34:6c:d3:e6:00:ce:4a:82:a7:ad:47:
e4:be:c3:b4:43:64:8a:98:72:13:6a:64:1a:ed:d1:
66:aa:ce:cf:e2:55:4e:b5:16:87:90:1e:31:52:89:
bf:df:9c:3f:9c:fc:84:a9:54:a8:79:51:67:12:2e:
9f:66:37:db:e5:a5:7a:43:4b:b2:2f:0f:31:92:ab:
2a:31:1d:64:6c:10:6c:f3:77:d9:a8:6c:e9:16:7a:
a3:ab:f1:e8:df:b3:4a:86:b3:fe:b8:c2:93:10:91:
a5:cb:78:26:68:01:be:c3:0c:1f:4e:06:22:46:a8:
93:05:0a:95:16:7c:cb:ea:95:cb:b6:6b:e3:39:c4:
48:14:d8:32:41:88:c3:b4:95:af:c6:b9:95:d2:b2:
2b:20:75:fd:72:95:64:eb:4f:c2:e8:70:dc:5f:61:
f8:38:26:ef:ed:45:c5:84:4c:c0:43:75:16:9f:36:
be:cf:e5:b8:c8:ba:6d:f4:90:e3:c5:2d:48:99:a6:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:42:65:60:84:34:A8:BF:BE:F5:42:91:3A:18:23:28:60:7E:1E
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:50:ea:d5:e3:3c:2f:bf:ec:88:62:4b:76:d2:24:84:a1:
92:86:2f:25:92:2f:82:f0:0b:a9:74:82:ce:e4:10:d5:41:ef:
a5:33:df:a2:a9:cf:7e:e1:42:97:75:5c:8d:bb:b1:7e:8e:e4:
18:69:40:95:89:4f:c7:d5:40:37:4e:65:1f:1d:5c:a4:90:b2:
29:08:0e:06:76:8a:ab:5e:66:ce:b9:14:87:d7:b9:59:98:7d:
85:4a:f4:4d:51:8a:14:da:80:07:43:e5:1b:e3:3e:72:46:37:
92:61:73:34:e9:fa:25:f1:42:45:fb:a4:97:45:79:4d:15:42:
df:de:ad:72:59:c0:73:71:f3:eb:bc:bc:53:d0:90:38:17:22:
d2:5d:50:da:c4:18:25:b7:8e:fa:7c:7a:97:7f:6d:49:a5:74:
84:97:b4:10:fa:02:2d:d7:a0:bc:b7:58:51:81:f0:81:77:d9:
e0:a7:94:24:33:f9:95:44:56:c7:19:da:57:4f:06:37:9b:32:
11:ec:3b:04:08:79:d6:ce:65:ac:86:15:64:d9:b4:36:8d:2f:
f8:f4:85:41:19:c2:ac:b2:8c:53:74:d1:52:7b:d0:c1:07:2c:
fa:fa:7d:0b:e6:76:0c:44:01:1e:8c:83:c4:51:f8:10:3e:01:
b6:0d:27:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzXX81owWtVElVA62XeXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy
ZjMyMWIwHhcNMjYwNTE2MDgwMDU0WhcNMjYwNTE3MDgwMDU0WjAzMTEwLwYDVQQD
EygzMDM2NDI2NTYwODQzNGE4YmZiZWY1NDI5MTNhMTgyMzI4NjA3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCLDA7I7b7K/eU9kpetAec5jxCe
chCfIxesdCvppZRb5bsLxjcIpzBwC9b+lyZ2u3Iq26g8fuuHYru54CpbNGzT5gDO
SoKnrUfkvsO0Q2SKmHITamQa7dFmqs7P4lVOtRaHkB4xUom/35w/nPyEqVSoeVFn
Ei6fZjfb5aV6Q0uyLw8xkqsqMR1kbBBs83fZqGzpFnqjq/Ho37NKhrP+uMKTEJGl
y3gmaAG+wwwfTgYiRqiTBQqVFnzL6pXLtmvjOcRIFNgyQYjDtJWvxrmV0rIrIHX9
cpVk60/C6HDcX2H4OCbv7UXFhEzAQ3UWnza+z+W4yLpt9JDjxS1ImabemwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA2QmVghDSov771QpE6GCMoYH4eMB8GA1UdIwQY
MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt
ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm
LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduFQ6tXj
PC+/7IhiS3bSJIShkoYvJZIvgvALqXSCzuQQ1UHvpTPfoqnPfuFCl3Vcjbuxfo7k
GGlAlYlPx9VAN05lHx1cpJCyKQgOBnaKq15mzrkUh9e5WZh9hUr0TVGKFNqAB0Pl
G+M+ckY3kmFzNOn6JfFCRfukl0V5TRVC396tclnAc3Hz67y8U9CQOBci0l1Q2sQY
JbeO+nx6l39tSaV0hJe0EPoCLdegvLdYUYHwgXfZ4KeUJDP5lURWxxnaV08GN5sy
Eew7BAh51s5lrIYVZNm0No0v+PSFQRnCrLKMU3TRUnvQwQcs+vp9C+Z2DEQBHoyD
xFH4ED4Btg0nxg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:12:13 2026 by rpki-client