Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: /ND6X18CNrgCqE7xQwETACzM/hzv0jMxGb3iuF1RB9E=
Subject key identifier: 0A:EF:E0:41:3F:88:53:AD:F4:DE:EF:4A:1F:75:F6:2E:18:B8:15:0D
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019D9C2CDA3EFD0C9DE5ED32FE3910FE3792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 13D8
Signing time: Fri 17 Apr 2026 16:01:18 +0000
Manifest this update: Fri 17 Apr 2026 16:01:18 +0000
Manifest next update: Sat 18 Apr 2026 16:01:18 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: RArKCvIUfyAkaSe/j80a3Tqads+m8Mn3cH1Czt22bSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:da:3e:fd:0c:9d:e5:ed:32:fe:39:10:fe:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Apr 17 16:01:18 2026 GMT
Not After : Apr 18 16:01:18 2026 GMT
Subject: CN=0aefe0413f8853adf4deef4a1f75f62e18b8150d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:5f:39:d0:f8:88:68:06:b2:50:ba:73:79:
b1:33:51:ca:45:23:8e:bd:4d:0f:b0:82:d4:39:77:
89:59:1a:dc:ff:f0:f5:df:d7:e2:2a:3d:a5:24:db:
40:06:c8:e1:f8:70:45:ee:f5:b6:35:f1:b6:ca:f1:
a9:38:63:4e:c2:82:45:da:fc:f6:67:fb:b5:3e:21:
33:64:27:c5:f9:be:22:9e:50:47:fd:1f:e3:72:da:
cd:a1:ad:21:7e:a7:21:13:d9:20:08:cd:42:fb:39:
27:6d:08:a8:25:c2:08:0b:0e:6c:e0:4e:19:f6:16:
4f:eb:f0:ce:60:92:5a:d8:51:8d:59:8e:06:b7:83:
06:b2:2b:4e:14:92:c3:28:2f:f2:fe:99:92:42:40:
90:e8:20:a0:9b:d0:c3:2a:82:ec:93:b0:ef:34:5b:
c8:15:58:fc:ac:e1:5e:b6:55:83:f9:12:4e:7f:15:
1f:42:74:0d:bc:7f:72:1e:ed:88:08:09:65:67:73:
dd:ed:89:2b:5f:33:25:77:d2:b5:48:f4:1c:27:fe:
f9:61:9c:a0:44:48:31:a7:ce:da:2c:f4:69:63:5a:
1d:83:d5:bc:26:97:09:e3:8e:35:53:e4:09:1a:83:
d5:8e:32:44:bd:e4:8a:02:9c:c2:2b:67:04:bd:a5:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:E0:41:3F:88:53:AD:F4:DE:EF:4A:1F:75:F6:2E:18:B8:15:0D
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:e6:04:89:4e:99:20:a6:22:23:bc:b6:7c:5b:b4:f2:61:
88:b1:b8:f0:9d:16:10:cb:49:9c:5b:b6:5a:07:e8:59:8c:49:
06:43:2b:52:d4:fe:1f:86:ab:a5:86:48:e6:f0:78:86:2d:40:
b0:2b:59:8c:ca:99:8b:48:bd:3e:64:d7:98:e1:0a:34:c9:b4:
71:f8:42:6b:d7:e0:8c:22:0f:ab:f3:85:0e:b4:8b:53:90:4a:
76:2a:20:95:0a:d3:c1:99:01:71:78:40:6d:ea:49:ba:be:f4:
3c:ae:ea:de:46:54:fc:55:a0:8f:76:ef:f1:1a:2e:6e:1c:0a:
40:25:d0:06:1d:a2:15:45:e4:3e:23:1f:76:3f:10:cb:2c:d9:
d1:7c:8e:6a:45:e8:3e:dd:4e:c6:c8:98:f0:88:2b:a2:70:65:
38:22:93:d7:8b:b6:29:ff:2f:bf:1d:21:89:96:51:61:e9:c9:
1b:9c:94:bd:2f:f4:0f:08:fb:71:bf:d6:f3:74:48:ff:8c:6f:
0c:58:0e:b3:3d:86:45:37:ae:32:f5:65:31:05:d6:a3:a4:16:
08:de:0c:e6:e0:84:0f:2a:fb:67:b0:8a:b1:73:e8:23:09:fa:
b6:e7:23:69:1f:f4:67:d0:8e:4f:d3:0a:96:3b:cf:fc:11:cf:
62:22:f7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLNo+/Qyd5e0y/jkQ/jeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjYwNDE3MTYwMTE4WhcNMjYwNDE4MTYwMTE4WjAzMTEwLwYDVQQD
EygwYWVmZTA0MTNmODg1M2FkZjRkZWVmNGExZjc1ZjYyZTE4YjgxNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+BfOdD4iGgGslC6c3mxM1HKRSOO
vU0PsILUOXeJWRrc//D139fiKj2lJNtABsjh+HBF7vW2NfG2yvGpOGNOwoJF2vz2
Z/u1PiEzZCfF+b4inlBH/R/jctrNoa0hfqchE9kgCM1C+zknbQioJcIICw5s4E4Z
9hZP6/DOYJJa2FGNWY4Gt4MGsitOFJLDKC/y/pmSQkCQ6CCgm9DDKoLsk7DvNFvI
FVj8rOFetlWD+RJOfxUfQnQNvH9yHu2ICAllZ3Pd7YkrXzMld9K1SPQcJ/75YZyg
REgxp87aLPRpY1odg9W8JpcJ4441U+QJGoPVjjJEveSKApzCK2cEvaWeIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArv4EE/iFOt9N7vSh919i4YuBUNMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfXmBIlO
mSCmIiO8tnxbtPJhiLG48J0WEMtJnFu2WgfoWYxJBkMrUtT+H4arpYZI5vB4hi1A
sCtZjMqZi0i9PmTXmOEKNMm0cfhCa9fgjCIPq/OFDrSLU5BKdioglQrTwZkBcXhA
bepJur70PK7q3kZU/FWgj3bv8RoubhwKQCXQBh2iFUXkPiMfdj8QyyzZ0XyOakXo
Pt1OxsiY8IgronBlOCKT14u2Kf8vvx0hiZZRYenJG5yUvS/0Dwj7cb/W83RI/4xv
DFgOsz2GRTeuMvVlMQXWo6QWCN4M5uCEDyr7Z7CKsXPoIwn6tucjaR/0Z9COT9MK
ljvP/BHPYiL3Mw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:21 2026 by rpki-client