Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: /D8kCKULSKJmSXPCyjCrP40iwvJbXq/vJyEpvrEG3U0=
Subject key identifier: 32:13:12:D2:45:C6:36:A4:13:4E:0E:FB:E2:F9:D7:79:2E:AA:2E:0D
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019E31F2E4F936B2FD239DC17BC34BA9CFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 104B
Signing time: Sat 16 May 2026 18:01:02 +0000
Manifest this update: Sat 16 May 2026 18:01:02 +0000
Manifest next update: Sun 17 May 2026 18:01:02 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: 7E5Bm/tmbjU5J1HUGJskjtyiGxJ+t8c80+JB5OGSX5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:e4:f9:36:b2:fd:23:9d:c1:7b:c3:4b:a9:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: May 16 18:01:02 2026 GMT
Not After : May 17 18:01:02 2026 GMT
Subject: CN=321312d245c636a4134e0efbe2f9d7792eaa2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:e5:63:6a:20:a5:16:d0:96:93:e1:19:85:
55:c6:da:10:cb:61:33:f3:e2:94:eb:72:16:2b:56:
9f:a1:b8:1b:48:d9:a9:da:b5:8f:a3:68:63:38:26:
5c:24:e6:12:eb:68:0e:98:3d:59:fd:c2:3c:d8:eb:
36:2c:18:6f:17:59:88:11:08:1c:c5:45:47:28:a7:
70:4f:6e:6a:96:38:bc:2d:4b:31:7d:aa:c3:4b:a5:
0b:c6:67:42:2b:7b:a2:0f:56:b5:b1:a5:93:2e:f5:
ec:21:55:8b:f0:69:a0:02:ec:30:03:1a:67:4b:f5:
55:72:39:47:e4:b2:2b:fc:fb:b1:41:a8:07:c7:4a:
75:72:0b:41:c2:da:ce:3d:c8:e6:fc:b0:b4:c7:eb:
67:b0:88:99:a5:e9:99:f6:8f:78:ab:2d:ce:a3:73:
81:ad:13:79:23:7b:74:60:6d:5e:e9:9f:12:35:1b:
57:73:c0:a3:b5:b5:84:de:36:df:58:16:03:66:9a:
62:06:00:01:b5:16:ec:4e:af:41:fa:5c:b0:6a:36:
b6:8a:41:a5:f0:d0:34:2c:51:08:c6:dd:0f:4a:a5:
04:6d:82:64:40:23:0b:fc:6a:0d:d7:55:5e:96:e9:
e6:97:a2:21:ae:97:2b:af:2d:ad:03:bc:92:08:94:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:12:D2:45:C6:36:A4:13:4E:0E:FB:E2:F9:D7:79:2E:AA:2E:0D
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:88:69:c9:dd:76:22:63:3e:3c:76:48:64:08:4d:fd:a8:
9c:ec:d7:df:d5:39:96:fa:70:31:32:58:30:10:32:06:a0:1e:
ec:e0:1a:9a:29:89:45:2a:90:cb:b0:7d:5c:f6:14:17:84:ce:
3c:c5:09:a8:a5:48:72:45:48:e1:28:55:16:f5:69:ef:f8:9d:
e9:84:2f:c4:ac:d3:4e:b4:75:ef:6d:48:ee:0e:2e:42:bb:22:
9c:bb:52:2c:f8:fd:79:fe:56:c8:1e:69:b6:db:77:4b:9b:7b:
ef:10:8d:1c:56:05:c5:40:98:9c:c5:86:3b:d9:a1:8b:09:fe:
4c:9c:49:20:de:7c:8a:47:49:68:73:9c:b2:51:25:01:bb:ab:
97:3e:df:cb:5f:e2:98:b4:3e:42:72:78:f2:ea:b2:2a:11:03:
07:5c:31:12:48:a1:ea:56:88:69:51:ad:ea:41:92:e9:5f:a2:
9a:90:44:65:ba:e8:98:8c:76:03:dc:e0:44:b2:c8:1b:25:29:
d7:dc:24:72:74:8d:41:57:5f:1b:02:d2:b6:c7:83:5c:89:de:
37:7e:ae:96:34:36:07:7e:e4:e4:d8:bf:6d:73:78:e7:09:7a:
11:32:c2:a9:11:92:ba:51:68:33:ee:04:23:b8:89:5f:54:43:
1e:2d:63:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8uT5NrL9I53Be8NLqc/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjYwNTE2MTgwMTAyWhcNMjYwNTE3MTgwMTAyWjAzMTEwLwYDVQQD
EygzMjEzMTJkMjQ1YzYzNmE0MTM0ZTBlZmJlMmY5ZDc3OTJlYWEyZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SzlY2ogpRbQlpPhGYVVxtoQy2Ez
8+KU63IWK1afobgbSNmp2rWPo2hjOCZcJOYS62gOmD1Z/cI82Os2LBhvF1mIEQgc
xUVHKKdwT25qlji8LUsxfarDS6ULxmdCK3uiD1a1saWTLvXsIVWL8GmgAuwwAxpn
S/VVcjlH5LIr/PuxQagHx0p1cgtBwtrOPcjm/LC0x+tnsIiZpemZ9o94qy3Oo3OB
rRN5I3t0YG1e6Z8SNRtXc8CjtbWE3jbfWBYDZppiBgABtRbsTq9B+lywaja2ikGl
8NA0LFEIxt0PSqUEbYJkQCML/GoN11Velunml6Ihrpcrry2tA7ySCJRjnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDITEtJFxjakE04O++L513kuqi4NMB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC6Iacnd
diJjPjx2SGQITf2onOzX39U5lvpwMTJYMBAyBqAe7OAamimJRSqQy7B9XPYUF4TO
PMUJqKVIckVI4ShVFvVp7/id6YQvxKzTTrR1721I7g4uQrsinLtSLPj9ef5WyB5p
ttt3S5t77xCNHFYFxUCYnMWGO9mhiwn+TJxJIN58ikdJaHOcslElAburlz7fy1/i
mLQ+QnJ48uqyKhEDB1wxEkih6laIaVGt6kGS6V+impBEZbromIx2A9zgRLLIGyUp
19wkcnSNQVdfGwLStseDXIneN36uljQ2B37k5Ni/bXN45wl6ETLCqRGSulFoM+4E
I7iJX1RDHi1jkg==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:47 2026 by rpki-client