Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: W7JAa/G3kzsF/sxwb8A9kMkYrjqAtpCLy1Jh+fFiMUs=
Subject key identifier: B7:19:46:22:14:1E:00:27:F8:94:93:70:FA:E2:4C:2A:CA:B2:04:E2
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 019E30E0E78B0E741564A6DA350F121464A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 09AA
Signing time: Sat 16 May 2026 13:01:46 +0000
Manifest this update: Sat 16 May 2026 13:01:46 +0000
Manifest next update: Sun 17 May 2026 13:01:46 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: UeXw0zGhp+EDAOY7/MWveB3OirLIH9ZA7kwm3+LTm+c=)
2: aHOqp1ZMoDrn_Rz0nU13prJUF_M.roa (hash: aPL+Mw0PwgSles+WTwist9EMPvDKnBfA4ED9lGmk97A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:e7:8b:0e:74:15:64:a6:da:35:0f:12:14:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: May 16 13:01:46 2026 GMT
Not After : May 17 13:01:46 2026 GMT
Subject: CN=b7194622141e0027f8949370fae24c2acab204e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:87:78:71:ee:f0:29:a2:da:69:42:a6:4d:
38:f0:52:41:9f:c9:ae:bc:21:4e:55:4b:05:a9:d6:
85:7b:c2:78:9b:f4:84:75:5b:d0:20:bf:4b:f5:ac:
4a:ba:45:8a:02:56:59:cd:e0:3d:b6:46:16:c6:08:
c8:37:81:4a:2c:27:4e:cb:db:85:27:2d:f1:70:60:
05:56:c4:0f:86:bf:f9:27:4b:fa:b6:ff:5f:62:92:
5f:18:1a:f4:40:ec:8f:71:ed:2b:b6:af:a0:53:d3:
0b:1a:bd:73:f7:01:6a:b5:09:e5:76:3b:a4:a5:d2:
79:47:21:3c:30:50:a5:49:64:31:80:0b:f9:1e:54:
99:b6:4f:e4:83:16:bf:fd:39:28:77:93:be:69:31:
86:fe:e2:98:35:42:e4:c3:fe:46:9e:f5:19:fa:8a:
c3:fb:e9:9b:a4:83:f8:08:e2:34:1c:16:a8:af:ab:
87:95:d8:c5:97:39:12:61:63:3d:91:04:4c:45:6e:
4c:ff:54:5f:68:b5:be:4c:17:17:3d:b4:8b:a6:57:
f5:e4:97:51:81:4a:e0:f2:67:c6:98:0d:b5:12:d3:
d6:06:7c:a2:a4:be:eb:4d:58:eb:bf:28:cc:05:5a:
9e:4d:67:d2:b4:be:f4:9a:d1:4f:8c:a4:e8:57:02:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:19:46:22:14:1E:00:27:F8:94:93:70:FA:E2:4C:2A:CA:B2:04:E2
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c5:b0:c5:24:dc:17:f5:77:b7:da:f1:0b:4b:3c:a7:b7:4f:
7b:be:d3:9b:8f:18:f8:bf:fa:2f:94:81:b1:f5:03:f7:f1:1e:
44:87:9d:c7:5d:dd:ee:6c:f7:88:21:34:df:37:77:8c:ed:4f:
aa:74:03:8f:9a:d7:0c:fb:2b:d5:fa:41:a6:53:0d:15:2c:ae:
98:69:86:41:d1:cd:61:2c:03:8a:7c:fb:ec:85:c7:69:8d:39:
ea:3d:ec:8f:95:a7:40:3d:4a:bc:9e:4d:e3:35:6a:09:72:2a:
89:64:fb:cf:1c:7a:76:db:02:f7:16:41:28:30:03:bb:9c:87:
7f:9b:3b:04:0f:58:c4:52:1a:0a:6b:8d:7e:61:4b:ac:ff:dd:
e7:5f:d6:7e:40:12:02:4a:4e:4d:cc:a6:ca:2c:18:ef:81:9d:
00:34:d3:e1:7e:a5:fd:9f:88:9e:05:90:58:5a:c7:05:56:cd:
3f:ae:b2:06:4d:79:6b:c8:98:23:e0:e6:09:b2:a7:1b:9c:86:
da:c3:07:e1:b5:59:55:27:63:8d:3a:c0:4d:dd:33:d2:ce:01:
4e:bf:2b:46:e0:5b:a3:bf:ed:d8:9f:65:68:da:e1:2c:de:94:
c3:4a:d9:63:0b:52:5b:42:f9:bb:8d:19:32:81:c0:eb:79:64:
81:5b:14:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4OeLDnQVZKbaNQ8SFGSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzA2NDQ2MGVhNmQ1Y2ZkM2Y4OGRjMWNmNGVkMDc1MDJi
YmI2OTkwHhcNMjYwNTE2MTMwMTQ2WhcNMjYwNTE3MTMwMTQ2WjAzMTEwLwYDVQQD
EyhiNzE5NDYyMjE0MWUwMDI3Zjg5NDkzNzBmYWUyNGMyYWNhYjIwNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqHeHHu8Cmi2mlCpk048FJBn8mu
vCFOVUsFqdaFe8J4m/SEdVvQIL9L9axKukWKAlZZzeA9tkYWxgjIN4FKLCdOy9uF
Jy3xcGAFVsQPhr/5J0v6tv9fYpJfGBr0QOyPce0rtq+gU9MLGr1z9wFqtQnldjuk
pdJ5RyE8MFClSWQxgAv5HlSZtk/kgxa//Tkod5O+aTGG/uKYNULkw/5GnvUZ+orD
++mbpIP4COI0HBaor6uHldjFlzkSYWM9kQRMRW5M/1RfaLW+TBcXPbSLplf15JdR
gUrg8mfGmA21EtPWBnyipL7rTVjrvyjMBVqeTWfStL70mtFPjKToVwIWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcZRiIUHgAn+JSTcPriTCrKsgTiMB8GA1UdIwQY
MBaAFPHAZEYOptXP0/iNwc9O0HUCu7aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUt
YzlhY2ZlM2YzMTIxLzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mNDUwNmUtZmI4OC00OGE5LTgyODUtYzlhY2ZlM2YzMTIx
LzEvOGNCa1JnNm0xY19ULUkzQnowN1FkUUs3dHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsWwxSTc
F/V3t9rxC0s8p7dPe77Tm48Y+L/6L5SBsfUD9/EeRIedx13d7mz3iCE03zd3jO1P
qnQDj5rXDPsr1fpBplMNFSyumGmGQdHNYSwDinz77IXHaY056j3sj5WnQD1KvJ5N
4zVqCXIqiWT7zxx6dtsC9xZBKDADu5yHf5s7BA9YxFIaCmuNfmFLrP/d51/WfkAS
AkpOTcymyiwY74GdADTT4X6l/Z+IngWQWFrHBVbNP66yBk15a8iYI+DmCbKnG5yG
2sMH4bVZVSdjjTrATd0z0s4BTr8rRuBbo7/t2J9laNrhLN6Uw0rZYwtSW0L5u40Z
MoHA63lkgVsUNg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:06 2026 by rpki-client