Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: 2L1QJfLL8XB+soqwBfdydoAEGXK1ulKZKK2yFfrgarY=
Subject key identifier: 5B:8F:AC:9F:78:67:71:B6:2C:E6:76:C6:66:18:73:24:8E:63:5C:35
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 019E2FCDA030C35F20C0FA479F47A9C65E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0CDC
Signing time: Sat 16 May 2026 08:01:05 +0000
Manifest this update: Sat 16 May 2026 08:01:05 +0000
Manifest next update: Sun 17 May 2026 08:01:05 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: qqwo3E5MoAiXmRrlAKVZo8YrvOcLjSzm37faxQZCBC8=)
2: VtA7L-Ct6vFTl20MYPEZtGoRDeo.roa (hash: b0yRFvx0OppSDXs/JuwIRB5JsNwcA2V2X9CKVLLR4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:a0:30:c3:5f:20:c0:fa:47:9f:47:a9:c6:5e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: May 16 08:01:05 2026 GMT
Not After : May 17 08:01:05 2026 GMT
Subject: CN=5b8fac9f786771b62ce676c6661873248e635c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:6c:da:16:3f:51:f8:05:60:a4:7e:13:50:
fa:18:e7:7b:22:e9:a7:ec:aa:07:a9:e6:d6:1d:46:
91:53:36:b4:9d:69:83:37:40:ef:fb:a7:64:3b:08:
f4:de:9c:20:19:ec:8e:3c:a5:0f:0f:ad:ba:32:71:
eb:e3:94:fd:5b:30:93:21:91:02:a8:f3:01:e8:b1:
66:78:fe:fe:1a:66:42:35:96:c9:07:89:33:7c:48:
b2:44:39:a9:68:dd:1b:e3:f2:d8:58:b2:3d:9e:e6:
60:4f:a3:57:f7:41:d2:e4:61:29:98:38:51:7a:11:
6b:0e:c0:1e:ee:90:42:f2:cf:15:3c:09:50:59:14:
be:44:5c:5e:a6:12:e2:c6:3c:7a:39:a0:a1:b3:d5:
40:b3:c0:6d:07:a6:2d:21:05:25:6a:fb:53:a9:ff:
7a:8b:5b:57:0d:26:fc:ce:05:f9:bb:7b:44:d3:f4:
74:85:4a:46:76:d4:5e:00:7e:d5:11:65:45:1e:5b:
9b:6d:a2:1b:04:71:b7:34:a1:73:84:aa:c9:c5:7f:
37:a3:61:57:45:85:8a:46:63:79:6d:4d:22:9d:61:
65:9a:ad:86:63:59:d9:31:0d:ec:c8:9d:e8:19:54:
da:4a:b5:83:a5:fa:09:c9:b2:fa:7e:c9:80:3f:67:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:AC:9F:78:67:71:B6:2C:E6:76:C6:66:18:73:24:8E:63:5C:35
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9a:8a:d6:3c:a4:07:27:5b:06:dd:49:4a:a2:b5:ca:3d:83:
40:3d:34:49:fe:d0:b1:6f:53:79:28:91:2a:95:6b:b2:2e:a1:
e5:22:7d:02:41:ae:9d:76:31:48:bd:99:13:a4:ba:cf:af:90:
fd:4d:66:ec:e7:0d:f2:b6:ca:a6:a0:8d:3b:ea:7c:c9:59:17:
d6:e4:51:4d:98:6f:a2:58:f0:73:af:ad:f1:cc:0f:06:51:38:
00:39:9d:8a:45:b5:a7:ac:f0:fb:d6:69:6e:aa:a1:5a:c8:c3:
81:af:97:90:fb:a3:f8:e2:d5:3e:35:f4:b3:97:98:5b:f1:96:
85:c0:85:39:44:6b:b4:75:75:e9:09:51:f6:81:1f:38:0f:c7:
29:48:4a:44:f8:66:58:92:34:ef:4f:01:bd:05:a3:3e:b1:ef:
3c:63:47:ab:b7:ad:18:67:dc:f1:0b:bd:c7:30:04:a1:49:2f:
23:9e:70:bc:25:9f:ed:6b:f6:04:ad:32:c0:0f:f9:2c:b0:a6:
04:35:da:6a:25:d2:37:cb:f3:ff:e0:69:09:5f:bd:17:e8:51:
57:3d:08:13:dd:50:3c:41:49:2e:cd:c8:d6:f1:b6:3f:f2:4a:
99:ed:4c:90:83:fb:16:3d:e7:73:9d:3b:21:98:a7:58:f8:6f:
c4:79:a2:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vzaAww18gwPpHn0epxl5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjIxOWVjYTU0YWIyNjljOGFhYjliMGZmNDE2ZTcyOTM4
MjliNTkwHhcNMjYwNTE2MDgwMTA1WhcNMjYwNTE3MDgwMTA1WjAzMTEwLwYDVQQD
Eyg1YjhmYWM5Zjc4Njc3MWI2MmNlNjc2YzY2NjE4NzMyNDhlNjM1YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaps2hY/UfgFYKR+E1D6GOd7Iumn
7KoHqebWHUaRUza0nWmDN0Dv+6dkOwj03pwgGeyOPKUPD626MnHr45T9WzCTIZEC
qPMB6LFmeP7+GmZCNZbJB4kzfEiyRDmpaN0b4/LYWLI9nuZgT6NX90HS5GEpmDhR
ehFrDsAe7pBC8s8VPAlQWRS+RFxephLixjx6OaChs9VAs8BtB6YtIQUlavtTqf96
i1tXDSb8zgX5u3tE0/R0hUpGdtReAH7VEWVFHlubbaIbBHG3NKFzhKrJxX83o2FX
RYWKRmN5bU0inWFlmq2GY1nZMQ3syJ3oGVTaSrWDpfoJybL6fsmAP2c15wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuPrJ94Z3G2LOZ2xmYYcySOY1w1MB8GA1UdIwQY
MBaAFPIiGeylSrJpyKq5sP9BbnKTgptZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYt
NmYzNjNlODNhNzhlLzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jYjE0NjctMjQxYS00YmM1LWJhYTYtNmYzNjNlODNhNzhl
LzEvOGlJWjdLVktzbW5JcXJtd18wRnVjcE9DbTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpqK1jyk
BydbBt1JSqK1yj2DQD00Sf7QsW9TeSiRKpVrsi6h5SJ9AkGunXYxSL2ZE6S6z6+Q
/U1m7OcN8rbKpqCNO+p8yVkX1uRRTZhvoljwc6+t8cwPBlE4ADmdikW1p6zw+9Zp
bqqhWsjDga+XkPuj+OLVPjX0s5eYW/GWhcCFOURrtHV16QlR9oEfOA/HKUhKRPhm
WJI0708BvQWjPrHvPGNHq7etGGfc8Qu9xzAEoUkvI55wvCWf7Wv2BK0ywA/5LLCm
BDXaaiXSN8vz/+BpCV+9F+hRVz0IE91QPEFJLs3I1vG2P/JKme1MkIP7Fj3nc507
IZinWPhvxHmidA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:34 2026 by rpki-client