Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: UAVlN+9B7fq+MAVvHTYLivT/oGL5EfuTN8etgoZDol0=
Subject key identifier: AF:55:B6:10:D6:17:93:79:8F:5A:BA:A0:D1:A7:D7:56:50:DE:A2:71
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019E303BDA715CDC1422DEBFF04E7730D58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 10:01:29 +0000
Manifest this update: Sat 16 May 2026 10:01:29 +0000
Manifest next update: Sun 17 May 2026 10:01:29 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: 5AVgvM84FNA4TX/fmsCREg0eT8kij6z2ovXnzYWskTo=)
2: gItw0vdqzg90tFpmlTqKM5Onxow.roa (hash: EIklKyUdyJ9hgAFeB37ndmxzyfrlZyuSiNL83eIkim4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:da:71:5c:dc:14:22:de:bf:f0:4e:77:30:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: May 16 10:01:29 2026 GMT
Not After : May 17 10:01:29 2026 GMT
Subject: CN=af55b610d61793798f5abaa0d1a7d75650dea271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:64:85:22:aa:79:df:b9:31:37:0f:78:61:
29:6a:b1:2b:8b:27:23:a1:f8:47:14:22:29:e9:e1:
cf:b9:89:a8:0c:a0:c4:b0:c1:9a:ba:3a:e3:e3:c9:
0d:34:db:cd:78:48:46:0c:00:06:0e:b6:78:2f:86:
96:c4:b0:f6:2c:4d:cb:dc:4f:0a:18:32:9d:a6:cc:
d0:d6:67:3f:b5:e2:28:f0:5d:1a:9d:c3:44:e1:f8:
41:11:ed:f9:36:d9:91:24:b2:df:fd:98:87:eb:24:
f8:05:84:28:d2:b9:89:f9:ba:c4:be:ba:a7:31:d1:
eb:d0:f8:1e:4f:d6:90:3a:fa:47:17:a4:b2:17:45:
c1:7a:78:38:15:72:52:c4:5e:7f:8e:d5:33:d2:8c:
a4:8c:46:e3:f2:f9:cf:90:81:96:b1:5d:5e:85:6e:
66:fd:48:65:43:15:df:d9:1a:45:76:15:e5:cb:2e:
13:3d:85:1c:f9:a5:a6:32:83:b9:f2:a6:0d:f3:49:
1f:7c:c5:f3:8a:78:15:46:80:44:e8:7e:b3:b2:8f:
16:04:7a:73:a5:af:ae:41:ec:c3:56:43:5f:ad:8d:
42:ac:59:f8:40:88:b2:09:50:90:b0:04:64:ed:5b:
4a:0c:c8:e9:b0:1f:93:9a:fb:94:87:b2:74:88:5b:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:B6:10:D6:17:93:79:8F:5A:BA:A0:D1:A7:D7:56:50:DE:A2:71
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:02:b8:e0:c0:72:b3:8f:98:5f:c4:c6:b8:5f:7c:43:5b:a9:
cd:35:a3:36:d6:c4:8d:63:e1:ab:81:d7:f0:1a:05:95:79:1c:
21:60:f9:77:2d:5a:c6:78:e9:c6:0d:6c:0d:c8:ac:3b:a7:00:
84:15:0a:bf:a3:8a:e3:8b:57:73:bc:4c:03:58:0b:e0:67:18:
45:8e:fe:6b:2e:83:7c:03:a2:8c:d5:66:4e:a5:bd:39:49:1b:
1f:1e:f4:d4:16:77:14:85:e4:1c:82:4b:2e:14:a3:b6:a4:f0:
d3:de:cd:8d:d2:7d:04:58:88:b4:39:7b:4b:e6:70:cb:f0:82:
ba:13:34:9d:26:a4:9e:2f:83:e1:18:ea:6d:bd:45:f8:f9:5d:
84:17:d8:3e:81:dc:95:8b:f4:25:8a:72:66:70:86:d6:8f:ee:
a8:af:77:8c:f3:83:a3:15:5b:c8:38:0a:ee:0a:27:1a:f5:90:
d6:86:3b:4d:90:15:fd:27:2a:f3:84:39:69:29:32:9c:8d:51:
63:41:33:41:97:38:c2:89:e7:6b:08:8b:9b:9c:49:fa:c5:03:
d1:ca:00:2f:fc:56:e4:e3:f2:6a:65:97:ed:ea:dc:6b:fa:96:
c5:6c:65:77:a0:c2:23:d3:e9:20:2b:75:fc:17:cb:73:fe:ca:
20:7f:48:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO9pxXNwUIt6/8E53MNWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll
YmNmODkwHhcNMjYwNTE2MTAwMTI5WhcNMjYwNTE3MTAwMTI5WjAzMTEwLwYDVQQD
EyhhZjU1YjYxMGQ2MTc5Mzc5OGY1YWJhYTBkMWE3ZDc1NjUwZGVhMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AtkhSKqed+5MTcPeGEparEriycj
ofhHFCIp6eHPuYmoDKDEsMGaujrj48kNNNvNeEhGDAAGDrZ4L4aWxLD2LE3L3E8K
GDKdpszQ1mc/teIo8F0ancNE4fhBEe35NtmRJLLf/ZiH6yT4BYQo0rmJ+brEvrqn
MdHr0PgeT9aQOvpHF6SyF0XBeng4FXJSxF5/jtUz0oykjEbj8vnPkIGWsV1ehW5m
/UhlQxXf2RpFdhXlyy4TPYUc+aWmMoO58qYN80kffMXzingVRoBE6H6zso8WBHpz
pa+uQezDVkNfrY1CrFn4QIiyCVCQsARk7VtKDMjpsB+TmvuUh7J0iFtPGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9VthDWF5N5j1q6oNGn11ZQ3qJxMB8GA1UdIwQY
MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt
OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj
LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQK44MBy
s4+YX8TGuF98Q1upzTWjNtbEjWPhq4HX8BoFlXkcIWD5dy1axnjpxg1sDcisO6cA
hBUKv6OK44tXc7xMA1gL4GcYRY7+ay6DfAOijNVmTqW9OUkbHx701BZ3FIXkHIJL
LhSjtqTw097NjdJ9BFiItDl7S+Zwy/CCuhM0nSakni+D4Rjqbb1F+PldhBfYPoHc
lYv0JYpyZnCG1o/uqK93jPODoxVbyDgK7gonGvWQ1oY7TZAV/Scq84Q5aSkynI1R
Y0EzQZc4wonnawiLm5xJ+sUD0coAL/xW5OPyamWX7erca/qWxWxld6DCI9PpICt1
/BfLc/7KIH9IYw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:01 2026 by rpki-client