Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: +rJhmxkwwPPcCenmGUzp1mROgM0nSutc991d9H0sgHs=
Subject key identifier: 64:BE:23:6B:0B:E8:B7:40:43:7D:44:2D:46:E5:A7:6C:89:6B:88:36
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019E30A933CFA86721E45EB1C41306A187D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 1815
Signing time: Sat 16 May 2026 12:00:55 +0000
Manifest this update: Sat 16 May 2026 12:00:55 +0000
Manifest next update: Sun 17 May 2026 12:00:55 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: 91Lv0DC1UbH/aVFoH9Mbg2Qc7pKPF6x+ER0x/Y55Myg=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:33:cf:a8:67:21:e4:5e:b1:c4:13:06:a1:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: May 16 12:00:55 2026 GMT
Not After : May 17 12:00:55 2026 GMT
Subject: CN=64be236b0be8b740437d442d46e5a76c896b8836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:49:f8:52:c9:c0:01:6f:4b:a6:b2:7e:24:
4a:fd:33:ff:00:c3:2d:7e:2d:70:bb:c7:ae:62:a3:
f7:60:be:89:fd:55:93:fa:23:a2:4e:99:3f:b0:a4:
fa:f4:f3:18:a0:29:43:c6:d9:21:41:27:ee:74:dc:
96:70:94:96:8e:84:10:88:b9:f8:06:a2:35:87:5b:
97:5b:ab:38:77:b7:f7:b6:bb:0a:07:ba:77:4b:b4:
d5:b9:fe:52:77:c6:87:b9:d8:fa:a1:5f:c5:88:1c:
50:04:d5:e4:3b:d4:1e:6f:cc:f3:38:cc:f2:76:7c:
85:e8:59:aa:4a:0c:d8:45:f0:54:8a:34:98:47:4f:
dc:6d:33:d7:63:eb:19:6c:19:0b:e4:0c:35:7f:06:
de:c3:44:9b:14:20:8c:f3:aa:42:6b:36:df:0c:a5:
f0:c0:6b:02:de:ba:fd:b7:e2:29:3f:db:d2:3d:50:
4f:ce:1d:f6:fd:e2:74:da:0b:e0:71:57:9e:ae:84:
88:ab:fb:29:cf:43:a4:77:d9:6c:b8:47:91:dd:3e:
27:e8:bb:27:2c:b9:fe:cc:71:13:fa:a3:68:0c:96:
ed:1e:bb:a8:60:09:b8:3f:14:79:17:6d:9d:1b:de:
70:1e:b4:7a:13:26:f5:24:b9:6f:b3:ce:53:5a:03:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:23:6B:0B:E8:B7:40:43:7D:44:2D:46:E5:A7:6C:89:6B:88:36
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6a:76:6e:01:d9:a6:f8:86:77:fc:62:78:e2:89:f9:1b:a9:
d3:5a:d1:51:ed:aa:b8:5b:4b:b8:af:5a:b1:d0:7c:46:29:c2:
d6:1d:63:a6:13:fd:6b:ae:b4:19:d7:b6:3f:b5:0d:93:a6:66:
b0:6c:b3:73:9c:89:a9:30:09:0f:31:02:df:4e:d7:52:e3:99:
0c:b4:b9:80:0a:20:60:13:bf:af:4a:2a:2b:f0:33:64:d6:48:
8e:59:fb:91:58:0b:2d:57:14:dc:c0:f1:33:ab:48:6b:d4:e0:
67:a7:94:32:d0:8f:bf:bb:20:0f:d0:8e:80:32:93:20:1a:a7:
e1:62:62:96:81:77:46:26:8b:c9:be:38:f6:74:cd:ad:d4:d3:
db:5d:8b:be:32:f7:20:26:e6:e3:94:76:69:2f:60:b5:4a:cf:
ba:08:e2:3e:f4:fd:1e:ca:5d:86:ac:d2:c9:fa:13:0c:6e:85:
4d:00:cb:35:4a:f0:a1:a2:f3:1c:68:ea:d9:7b:2d:f1:40:18:
94:70:f6:03:de:b0:7a:68:89:ab:c9:42:86:e1:e5:07:ed:15:
b9:8c:36:71:e0:ec:9b:ce:98:8c:ba:ea:5a:c8:ec:f4:39:df:
f6:be:0f:1a:1f:14:3c:59:b2:82:99:16:d3:35:7f:26:76:e0:
12:a2:70:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqTPPqGch5F6xxBMGoYfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjYwNTE2MTIwMDU1WhcNMjYwNTE3MTIwMDU1WjAzMTEwLwYDVQQD
Eyg2NGJlMjM2YjBiZThiNzQwNDM3ZDQ0MmQ0NmU1YTc2Yzg5NmI4ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxNJ+FLJwAFvS6ayfiRK/TP/AMMt
fi1wu8euYqP3YL6J/VWT+iOiTpk/sKT69PMYoClDxtkhQSfudNyWcJSWjoQQiLn4
BqI1h1uXW6s4d7f3trsKB7p3S7TVuf5Sd8aHudj6oV/FiBxQBNXkO9Qeb8zzOMzy
dnyF6FmqSgzYRfBUijSYR0/cbTPXY+sZbBkL5Aw1fwbew0SbFCCM86pCazbfDKXw
wGsC3rr9t+IpP9vSPVBPzh32/eJ02gvgcVeeroSIq/spz0Okd9lsuEeR3T4n6Lsn
LLn+zHET+qNoDJbtHruoYAm4PxR5F22dG95wHrR6Eyb1JLlvs85TWgMuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS+I2sL6LdAQ31ELUblp2yJa4g2MB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWp2bgHZ
pviGd/xieOKJ+Rup01rRUe2quFtLuK9asdB8RinC1h1jphP9a660Gde2P7UNk6Zm
sGyzc5yJqTAJDzEC307XUuOZDLS5gAogYBO/r0oqK/AzZNZIjln7kVgLLVcU3MDx
M6tIa9TgZ6eUMtCPv7sgD9COgDKTIBqn4WJiloF3RiaLyb449nTNrdTT212LvjL3
ICbm45R2aS9gtUrPugjiPvT9HspdhqzSyfoTDG6FTQDLNUrwoaLzHGjq2Xst8UAY
lHD2A96wemiJq8lChuHlB+0VuYw2ceDsm86YjLrqWsjs9Dnf9r4PGh8UPFmygpkW
0zV/JnbgEqJwPA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:11 2026 by rpki-client