
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: r3QkOI0RT4JIghPIi+UfPRtcOpVQfxLUYSYYGjxZFhM=
Subject key identifier: 61:52:20:87:14:40:81:E9:9C:3D:53:D1:B2:D1:CD:C8:C3:85:44:F1
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 019E30E0F14CCB99288469BCFFE7F6B92E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 13:01:48 +0000
Manifest this update: Sat 16 May 2026 13:01:48 +0000
Manifest next update: Sun 17 May 2026 13:01:48 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: rISv2E0gi3Gr5vXTXegg/zpel5O8u/mAdB2L9mWzPio=)
2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:f1:4c:cb:99:28:84:69:bc:ff:e7:f6:b9:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: May 16 13:01:48 2026 GMT
Not After : May 17 13:01:48 2026 GMT
Subject: CN=61522087144081e99c3d53d1b2d1cdc8c38544f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:e6:75:e4:a2:33:ce:9d:77:c0:33:15:3a:
d4:ed:0c:ad:81:39:c6:a3:67:ba:ec:66:c4:cd:eb:
0d:c1:33:41:2d:30:94:c6:44:05:5e:1f:fa:cf:da:
cc:e0:07:08:2e:94:5d:18:ba:fc:89:93:51:25:0c:
5a:ff:df:3a:0e:e7:5c:65:a9:60:b7:a0:a2:83:09:
95:f3:fb:db:73:d0:6b:58:09:44:60:8d:23:1d:7d:
1e:77:16:04:0b:c6:3c:5d:f1:cb:a5:5d:25:bc:35:
0f:65:91:54:bc:30:a4:48:31:86:53:8a:5a:1d:5a:
44:24:6e:01:31:c7:25:b4:1c:b7:34:44:93:06:b8:
07:c3:0d:2b:31:12:59:f9:ef:8b:b9:5e:db:e2:cc:
57:f5:9a:78:8e:35:8d:f7:a9:54:bf:4a:52:a7:a0:
20:a5:7d:ae:5a:02:00:0e:a8:ac:78:11:44:f2:c2:
4a:15:2c:1e:95:8d:a5:61:fb:df:c0:39:d9:fe:fb:
44:91:5b:00:fc:fd:57:f7:db:5b:d3:5c:e1:47:bf:
0b:50:32:ef:1d:70:49:04:32:64:4b:2f:d4:43:a1:
d9:90:86:e3:4b:d5:90:63:bc:7b:fa:2e:9a:a6:12:
92:a0:8c:bb:c7:fd:92:b8:db:38:5f:d6:21:56:08:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:20:87:14:40:81:E9:9C:3D:53:D1:B2:D1:CD:C8:C3:85:44:F1
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:65:97:5c:fb:ae:3f:0f:b7:bf:7c:a4:4b:53:a7:a6:a8:1b:
1d:23:28:29:7e:2f:b4:ed:f3:b8:7f:31:cc:b5:81:37:35:8c:
9e:82:a4:ce:53:06:cc:f5:43:8e:c9:e0:37:f1:1b:c9:93:02:
19:60:41:f1:32:7f:17:f1:69:27:ed:c8:ef:d3:52:2e:0b:3c:
36:e0:da:98:81:36:cf:81:ec:75:01:e6:29:d2:47:05:f1:81:
42:2e:2f:0c:99:44:91:25:d2:32:8c:bf:16:09:75:f1:12:85:
2d:56:8f:ff:47:d5:73:50:4a:16:b3:94:cd:0f:68:cc:d5:88:
65:a0:2b:b8:f9:b7:d8:f6:cf:20:ca:75:ee:66:22:e1:10:95:
a1:18:09:37:96:7b:49:79:dc:52:7f:a2:b4:b6:06:36:b9:1b:
d5:52:d0:b8:d4:6d:27:37:c6:ab:84:d0:3a:29:45:ed:80:86:
39:d0:e4:84:5a:29:03:40:eb:a8:35:9c:9e:d4:4c:52:1b:21:
31:93:0a:fd:cc:42:e0:82:fb:84:76:e7:66:1c:94:89:c8:79:
0f:96:4c:2c:a5:3f:f3:1c:48:8f:3e:56:b5:06:1a:73:b2:d2:
f0:48:81:ab:c5:79:8d:77:36:aa:77:34:db:ac:82:cd:74:9c:
0a:dc:d8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4PFMy5kohGm8/+f2uS5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWY4YmI5OGU0MDU1MzllYTk4MzM4NGZhZmE4MmIyYjRi
NzE3MjQwHhcNMjYwNTE2MTMwMTQ4WhcNMjYwNTE3MTMwMTQ4WjAzMTEwLwYDVQQD
Eyg2MTUyMjA4NzE0NDA4MWU5OWMzZDUzZDFiMmQxY2RjOGMzODU0NGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYDmdeSiM86dd8AzFTrU7QytgTnG
o2e67GbEzesNwTNBLTCUxkQFXh/6z9rM4AcILpRdGLr8iZNRJQxa/986DudcZalg
t6CigwmV8/vbc9BrWAlEYI0jHX0edxYEC8Y8XfHLpV0lvDUPZZFUvDCkSDGGU4pa
HVpEJG4BMccltBy3NESTBrgHww0rMRJZ+e+LuV7b4sxX9Zp4jjWN96lUv0pSp6Ag
pX2uWgIADqiseBFE8sJKFSwelY2lYfvfwDnZ/vtEkVsA/P1X99tb01zhR78LUDLv
HXBJBDJkSy/UQ6HZkIbjS9WQY7x7+i6aphKSoIy7x/2SuNs4X9YhVgiTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFSIIcUQIHpnD1T0bLRzcjDhUTxMB8GA1UdIwQY
MBaAFPGvi7mOQFU56pgzhPr6grK0txckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQt
YTM5MzAzZDg1MDY2LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQtYTM5MzAzZDg1MDY2
LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2WXXPuu
Pw+3v3ykS1OnpqgbHSMoKX4vtO3zuH8xzLWBNzWMnoKkzlMGzPVDjsngN/EbyZMC
GWBB8TJ/F/FpJ+3I79NSLgs8NuDamIE2z4HsdQHmKdJHBfGBQi4vDJlEkSXSMoy/
Fgl18RKFLVaP/0fVc1BKFrOUzQ9ozNWIZaAruPm32PbPIMp17mYi4RCVoRgJN5Z7
SXncUn+itLYGNrkb1VLQuNRtJzfGq4TQOilF7YCGOdDkhFopA0DrqDWcntRMUhsh
MZMK/cxC4IL7hHbnZhyUich5D5ZMLKU/8xxIjz5WtQYac7LS8EiBq8V5jXc2qnc0
26yCzXScCtzYrg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:38:18 2026 by rpki-client