Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: dJ+t/Aw14syezgZKQlIAVlE59qxShfh/VivYfg+JYVM=
Subject key identifier: 48:51:9D:C1:B9:6C:92:5F:48:EB:3B:B4:31:10:2D:FA:96:8D:CD:4E
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019E30E0D529DCBAE1DFB4F4633AED445DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 13:01:41 +0000
Manifest this update: Sat 16 May 2026 13:01:41 +0000
Manifest next update: Sun 17 May 2026 13:01:41 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: otLOPMF/RQhf7qYMvUGOxmZmShrnUgm2F/kEVVjBDu4=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:d5:29:dc:ba:e1:df:b4:f4:63:3a:ed:44:5d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: May 16 13:01:41 2026 GMT
Not After : May 17 13:01:41 2026 GMT
Subject: CN=48519dc1b96c925f48eb3bb431102dfa968dcd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:e7:c7:ab:18:a6:41:fc:0e:d0:e7:48:c3:
51:14:c9:11:5b:64:a0:92:1d:39:9c:d6:78:33:34:
d7:5e:7c:a3:66:71:a8:dc:86:4f:bf:af:92:6f:e7:
25:84:e7:d5:37:45:8b:9e:d9:52:b6:65:43:ed:35:
03:b3:4e:1e:68:6c:15:d6:02:ae:3d:9e:08:b2:b0:
80:49:50:7e:77:3a:8c:5e:7a:ae:92:93:3b:fd:ad:
57:92:bc:10:8b:14:82:67:f3:d7:73:26:8d:22:7a:
e3:92:54:e0:35:13:c2:b4:da:9e:f8:b6:0f:9b:55:
de:f0:eb:9f:16:95:31:77:fa:0a:25:5c:51:03:93:
d5:ba:0f:77:18:4e:14:22:50:90:73:fe:74:eb:9c:
84:c3:6b:56:1a:7d:e0:38:41:07:84:e4:be:4d:13:
81:80:65:11:da:c2:41:08:a0:17:a0:35:fe:d4:d6:
3a:87:55:71:2b:de:41:d6:b9:19:10:01:45:fe:19:
4e:e7:af:35:4f:2c:f2:8a:2d:93:f1:9e:19:71:ad:
7c:51:47:86:6c:3f:8e:65:0e:36:66:82:fd:8a:04:
52:1d:15:64:8a:e1:40:d9:27:eb:ea:42:fa:b4:72:
b5:7f:9e:da:6d:e6:27:4b:bb:ab:60:ca:ea:5e:2d:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:9D:C1:B9:6C:92:5F:48:EB:3B:B4:31:10:2D:FA:96:8D:CD:4E
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:7f:33:fd:f4:db:a3:36:c0:59:7f:7e:98:51:2e:33:a0:
d8:d8:53:68:08:dd:63:1e:62:27:9b:3f:5e:8f:94:29:56:af:
e1:46:e3:df:b5:79:5c:1e:98:ef:81:a9:42:3e:73:e5:a6:79:
5e:00:03:57:0e:73:03:3a:4c:2a:96:0e:c1:50:8f:67:e6:f5:
09:03:7e:aa:90:ce:dd:b1:8e:d5:08:a6:0c:ab:3e:20:24:e4:
39:15:63:24:1d:b8:50:c8:78:dc:da:4d:c9:fc:a1:6e:d7:ae:
b6:19:a9:71:48:66:f2:c3:35:f1:43:2d:f6:55:b3:bf:03:5b:
3d:cf:fb:aa:42:14:94:17:1e:64:63:73:80:d0:04:31:53:f9:
d3:a8:ef:dd:eb:fc:b0:ef:4b:36:7e:08:2d:bd:d9:a0:b3:34:
9b:59:4c:bb:de:f0:37:cf:b6:84:72:c0:e7:f6:66:c3:d2:e3:
66:cd:0f:2a:24:70:25:e1:94:91:c8:b9:b2:1a:c1:c1:52:c6:
a3:9b:d3:d8:e5:3f:88:f9:98:b5:60:cc:73:53:16:9d:aa:a9:
01:7e:66:0f:82:e8:0e:29:63:7a:53:c8:07:4b:5b:c9:8b:dc:
cf:93:98:68:4b:7b:a7:fa:34:c7:60:66:ff:e8:53:6a:e5:9f:
ad:66:a8:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4NUp3Lrh37T0YzrtRF2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzA0MGM3NDI5ZTdiOWUyMWE1ZmZjODhkOTMyYjQ3MDdj
YzNhMDAwHhcNMjYwNTE2MTMwMTQxWhcNMjYwNTE3MTMwMTQxWjAzMTEwLwYDVQQD
Eyg0ODUxOWRjMWI5NmM5MjVmNDhlYjNiYjQzMTEwMmRmYTk2OGRjZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lrnx6sYpkH8DtDnSMNRFMkRW2Sg
kh05nNZ4MzTXXnyjZnGo3IZPv6+Sb+clhOfVN0WLntlStmVD7TUDs04eaGwV1gKu
PZ4IsrCASVB+dzqMXnqukpM7/a1XkrwQixSCZ/PXcyaNInrjklTgNRPCtNqe+LYP
m1Xe8OufFpUxd/oKJVxRA5PVug93GE4UIlCQc/5065yEw2tWGn3gOEEHhOS+TROB
gGUR2sJBCKAXoDX+1NY6h1VxK95B1rkZEAFF/hlO5681Tyzyii2T8Z4Zca18UUeG
bD+OZQ42ZoL9igRSHRVkiuFA2Sfr6kL6tHK1f57abeYnS7urYMrqXi0hTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhRncG5bJJfSOs7tDEQLfqWjc1OMB8GA1UdIwQY
MBaAFPJwQMdCnnueIaX/yI2TK0cHzDoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMt
N2VjYWJhZTE4ZDhhLzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMtN2VjYWJhZTE4ZDhh
LzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSF/M/30
26M2wFl/fphRLjOg2NhTaAjdYx5iJ5s/Xo+UKVav4Ubj37V5XB6Y74GpQj5z5aZ5
XgADVw5zAzpMKpYOwVCPZ+b1CQN+qpDO3bGO1QimDKs+ICTkORVjJB24UMh43NpN
yfyhbteuthmpcUhm8sM18UMt9lWzvwNbPc/7qkIUlBceZGNzgNAEMVP506jv3ev8
sO9LNn4ILb3ZoLM0m1lMu97wN8+2hHLA5/Zmw9LjZs0PKiRwJeGUkci5shrBwVLG
o5vT2OU/iPmYtWDMc1MWnaqpAX5mD4LoDiljelPIB0tbyYvcz5OYaEt7p/o0x2Bm
/+hTauWfrWaoWw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:32 2026 by rpki-client