Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: 6jmnXyLfAuYzlNUU17+szkf/opLQiZR5rtHKLQCo9EA=
Subject key identifier: 5B:09:84:6F:46:40:01:8D:BA:83:98:B0:2C:16:6E:9C:E8:4D:96:EA
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 019DFACD9178A4D29A319909F81AA955B545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 14EA
Signing time: Wed 06 May 2026 01:01:08 +0000
Manifest this update: Wed 06 May 2026 01:01:08 +0000
Manifest next update: Thu 07 May 2026 01:01:08 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: pNTEx4J/pl8RostaF4jVuylFWEW4Ai27TC8UeZRZqHQ=)
2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:cd:91:78:a4:d2:9a:31:99:09:f8:1a:a9:55:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: May 6 01:01:08 2026 GMT
Not After : May 7 01:01:08 2026 GMT
Subject: CN=5b09846f4640018dba8398b02c166e9ce84d96ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:a1:49:40:04:a5:0b:d6:ee:f0:42:4e:fe:
5b:aa:41:fb:cf:3e:35:7c:85:28:b9:b7:c2:0f:73:
48:f3:aa:7a:b5:f2:a4:d9:84:0d:da:e5:be:d5:43:
2b:26:ad:17:88:69:bf:02:05:f2:db:62:39:4f:c8:
23:33:7b:33:68:f8:e1:d9:a9:a4:c2:cf:6e:f6:6f:
f0:85:ed:f3:3f:79:64:dd:43:bf:67:59:3a:82:75:
f7:84:89:2f:81:ee:82:a0:5c:84:c4:64:a3:e7:2d:
d0:31:31:86:ae:b8:0e:2c:49:f1:d2:c4:bd:85:1f:
b8:00:bb:b0:65:1c:dd:2f:0d:4b:37:d1:0b:c8:fc:
3b:a1:33:07:5d:ac:ce:76:c8:e6:af:da:24:e8:0c:
0b:a7:fd:13:a4:d4:66:7d:e5:10:7a:b6:30:fe:6f:
95:5e:16:42:a8:30:58:06:e0:e7:45:6c:5d:a1:4e:
32:8f:b1:b0:c0:c0:46:ee:32:e8:2d:47:0b:5c:e6:
56:98:ad:a7:97:99:3a:b6:9a:8d:66:db:98:cf:16:
49:8d:86:37:b5:d7:78:6d:ce:32:0f:be:44:81:de:
cb:4b:df:22:1f:36:ca:87:b3:87:c0:7c:90:56:0e:
6f:5a:bc:d3:56:11:a0:81:08:1c:5b:89:d8:3f:8c:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:84:6F:46:40:01:8D:BA:83:98:B0:2C:16:6E:9C:E8:4D:96:EA
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8c:33:45:6b:76:da:ad:e0:26:14:8c:aa:da:64:3a:33:7e:
2c:fc:b7:bd:1d:a0:a8:0b:ff:5c:dc:6a:4c:d8:9d:6f:04:96:
a1:73:1c:7c:e5:e3:96:aa:29:8f:51:65:1b:69:49:91:bc:12:
0d:a0:25:90:80:0d:e5:91:c7:90:9b:d5:2b:86:3e:4f:de:c2:
a9:c8:cc:58:5e:24:ff:7c:87:a7:1b:63:a8:ae:85:33:c9:f3:
c0:da:a8:f2:0d:18:5f:35:6a:12:22:8e:74:46:18:1f:59:ca:
c2:26:93:d3:17:fe:7f:79:c5:a6:93:ed:32:a5:49:b0:11:a3:
e8:6c:b9:15:f7:ba:5d:0b:1f:9b:da:a1:bd:ca:ed:a0:52:13:
c2:a6:5f:89:8a:08:ef:f8:51:c1:9a:90:c5:a3:43:58:13:9b:
58:3f:5a:29:22:43:e7:41:dd:68:23:58:c3:6d:74:c7:70:7c:
c6:57:f4:dc:eb:6e:9d:dd:39:a8:ac:a6:59:63:58:64:1e:b7:
7a:f6:2e:70:e8:c2:d7:07:9c:a6:78:bf:a7:95:4d:95:35:4d:
1e:0c:48:4a:29:4b:56:f3:bd:00:7d:8b:72:6d:ad:81:5c:c7:
64:de:cc:3b:b8:1f:69:02:9b:0f:f5:fb:47:34:78:52:95:13:
e4:4f:1e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ36zZF4pNKaMZkJ+BqpVbVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm
NWMzZDcwHhcNMjYwNTA2MDEwMTA4WhcNMjYwNTA3MDEwMTA4WjAzMTEwLwYDVQQD
Eyg1YjA5ODQ2ZjQ2NDAwMThkYmE4Mzk4YjAyYzE2NmU5Y2U4NGQ5NmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriKhSUAEpQvW7vBCTv5bqkH7zz41
fIUoubfCD3NI86p6tfKk2YQN2uW+1UMrJq0XiGm/AgXy22I5T8gjM3szaPjh2amk
ws9u9m/whe3zP3lk3UO/Z1k6gnX3hIkvge6CoFyExGSj5y3QMTGGrrgOLEnx0sS9
hR+4ALuwZRzdLw1LN9ELyPw7oTMHXazOdsjmr9ok6AwLp/0TpNRmfeUQerYw/m+V
XhZCqDBYBuDnRWxdoU4yj7GwwMBG7jLoLUcLXOZWmK2nl5k6tpqNZtuYzxZJjYY3
tdd4bc4yD75Egd7LS98iHzbKh7OHwHyQVg5vWrzTVhGggQgcW4nYP4w5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsJhG9GQAGNuoOYsCwWbpzoTZbqMB8GA1UdIwQY
MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct
YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw
LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYwzRWt2
2q3gJhSMqtpkOjN+LPy3vR2gqAv/XNxqTNidbwSWoXMcfOXjlqopj1FlG2lJkbwS
DaAlkIAN5ZHHkJvVK4Y+T97CqcjMWF4k/3yHpxtjqK6FM8nzwNqo8g0YXzVqEiKO
dEYYH1nKwiaT0xf+f3nFppPtMqVJsBGj6Gy5Ffe6XQsfm9qhvcrtoFITwqZfiYoI
7/hRwZqQxaNDWBObWD9aKSJD50HdaCNYw210x3B8xlf03Otund05qKymWWNYZB63
evYucOjC1wecpni/p5VNlTVNHgxISilLVvO9AH2Lcm2tgVzHZN7MO7gfaQKbD/X7
RzR4UpUT5E8e+w==
-----END CERTIFICATE-----
Generated at Wed May 6 03:27:56 2026 by rpki-client