Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: 1VGe6TsqDgTB8IIgq5ex+4Uh7PoSdM8WfegS9t7sWGE=
Subject key identifier: 66:D6:89:79:0F:CD:46:13:12:AD:3E:D1:20:D6:69:C5:F8:B3:E9:9E
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 019E3004F7727D4D4518726259223A7BE2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 190A
Signing time: Sat 16 May 2026 09:01:32 +0000
Manifest this update: Sat 16 May 2026 09:01:32 +0000
Manifest next update: Sun 17 May 2026 09:01:32 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: 3rz5e3nxkjUyaEjAZjZ4K1vqpeFJWsrX94iMmMdX7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f7:72:7d:4d:45:18:72:62:59:22:3a:7b:e2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: May 16 09:01:32 2026 GMT
Not After : May 17 09:01:32 2026 GMT
Subject: CN=66d689790fcd461312ad3ed120d669c5f8b3e99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:63:9c:19:16:95:08:35:fc:5c:a0:3b:ad:
f8:b1:dd:d8:12:79:71:af:76:e8:38:e6:b5:1a:ee:
b9:32:ab:90:d6:6b:86:42:96:6b:c2:34:03:af:91:
f5:fd:54:61:31:90:c6:17:69:0a:93:c1:e0:62:a0:
68:df:c6:59:e3:55:db:28:a7:6d:6f:e4:64:58:20:
15:04:8a:6c:7f:38:a6:dc:67:d4:da:7a:11:ee:d2:
98:8c:45:85:6b:26:83:63:8c:59:29:e0:37:fd:5d:
92:a0:e7:83:e4:cf:4f:3a:73:05:ae:f9:ee:0b:76:
5e:e6:c5:9e:59:9f:01:86:a4:0d:55:31:1d:0e:54:
55:98:55:7b:f8:88:4c:7c:30:99:4b:97:b9:4f:e9:
d0:02:b8:64:e3:1a:ec:ea:1c:ab:7d:01:19:21:c3:
ad:67:9c:69:8e:ad:07:13:1b:d9:a2:be:46:e9:ef:
fb:80:95:2c:46:ce:f4:51:db:1b:57:7b:d7:9e:94:
be:60:7b:d7:d2:7f:f3:0d:ca:92:f8:cd:b8:13:6f:
b8:c0:41:33:a1:a6:5b:4c:27:45:8d:ab:8e:78:4e:
35:1c:c5:de:c7:b2:27:d2:d0:f9:cf:18:82:f7:9f:
5e:ea:e4:11:09:d0:82:40:a1:dc:a0:e5:08:08:24:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D6:89:79:0F:CD:46:13:12:AD:3E:D1:20:D6:69:C5:F8:B3:E9:9E
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:ed:22:02:a5:fb:5b:57:eb:92:f9:7f:6b:e1:78:a8:69:
eb:71:c1:91:83:da:47:a6:1a:36:5f:2c:d4:cb:84:34:77:e5:
bd:c6:e2:c0:f6:4f:e1:36:b2:ac:dd:5b:1a:bc:11:e9:24:74:
77:0c:49:c9:99:4b:62:b3:44:91:3b:66:06:27:55:30:d0:4e:
3e:92:88:c8:b8:5c:e6:e0:d3:67:b3:f4:0a:a7:49:c8:10:ea:
43:aa:3e:35:b9:a6:5a:68:f1:58:d1:35:f2:7c:5e:64:2e:02:
8f:d0:0f:ff:ec:e4:36:54:eb:ea:5b:9e:3d:c5:6e:9c:b2:0e:
46:c2:07:92:5e:66:0a:24:48:61:c5:eb:b8:02:41:bc:ef:91:
2f:58:7b:49:c0:d4:a2:73:4a:23:e4:00:80:d8:8a:8e:31:da:
f8:a2:b0:5b:20:49:3d:05:43:4e:f7:8a:46:0b:03:72:35:1f:
35:82:70:d6:8e:2a:25:45:7f:f2:7c:f4:08:5d:d8:d9:6c:19:
46:17:8e:5f:a7:55:60:f5:b1:95:a9:d3:d7:3e:4c:e2:d0:29:
63:a2:9f:b2:d2:cc:ab:8a:b7:f4:6f:84:29:ce:a9:b0:39:dc:
ec:da:50:64:34:4d:c9:10:60:c0:a0:92:96:7e:e7:74:a4:f1:
4c:96:74:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBPdyfU1FGHJiWSI6e+LSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj
YTllY2UwHhcNMjYwNTE2MDkwMTMyWhcNMjYwNTE3MDkwMTMyWjAzMTEwLwYDVQQD
Eyg2NmQ2ODk3OTBmY2Q0NjEzMTJhZDNlZDEyMGQ2NjljNWY4YjNlOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XtjnBkWlQg1/FygO634sd3YEnlx
r3boOOa1Gu65MquQ1muGQpZrwjQDr5H1/VRhMZDGF2kKk8HgYqBo38ZZ41XbKKdt
b+RkWCAVBIpsfzim3GfU2noR7tKYjEWFayaDY4xZKeA3/V2SoOeD5M9POnMFrvnu
C3Ze5sWeWZ8BhqQNVTEdDlRVmFV7+IhMfDCZS5e5T+nQArhk4xrs6hyrfQEZIcOt
Z5xpjq0HExvZor5G6e/7gJUsRs70UdsbV3vXnpS+YHvX0n/zDcqS+M24E2+4wEEz
oaZbTCdFjauOeE41HMXex7In0tD5zxiC959e6uQRCdCCQKHcoOUICCTlGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbWiXkPzUYTEq0+0SDWacX4s+meMB8GA1UdIwQY
MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt
ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh
LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALH7tIgKl
+1tX65L5f2vheKhp63HBkYPaR6YaNl8s1MuENHflvcbiwPZP4TayrN1bGrwR6SR0
dwxJyZlLYrNEkTtmBidVMNBOPpKIyLhc5uDTZ7P0CqdJyBDqQ6o+NbmmWmjxWNE1
8nxeZC4Cj9AP/+zkNlTr6luePcVunLIORsIHkl5mCiRIYcXruAJBvO+RL1h7ScDU
onNKI+QAgNiKjjHa+KKwWyBJPQVDTveKRgsDcjUfNYJw1o4qJUV/8nz0CF3Y2WwZ
RheOX6dVYPWxlanT1z5M4tApY6KfstLMq4q39G+EKc6psDnc7NpQZDRNyRBgwKCS
ln7ndKTxTJZ0+Q==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:32 2026 by rpki-client