
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
File: d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft (raw, json)
Hash identifier: +modKQob+lvCNUHCCvmGKnseg4r3/HVVEZpNGonHvxg=
Subject key identifier: A8:88:8B:E5:9E:64:F5:06:EC:BC:5D:9C:A1:47:55:41:E9:7A:93:6B
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 019D97E2131BB28E99516AB8F7ED2CFC4E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
Manifest number: 13EF
Signing time: Thu 16 Apr 2026 20:01:08 +0000
Manifest this update: Thu 16 Apr 2026 20:01:08 +0000
Manifest next update: Fri 17 Apr 2026 20:01:08 +0000
Files and hashes: 1: 4tLtZV00F7203d-0-VBLm-eP82U.roa (hash: lay1wdctHfM+5cGbvUeC7dYoLI/g4f9AW/OZJtKzUcM=)
2: d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl (hash: 8QcRcVv5Zg+Cvk51AsjPCwinN/NYT45dqtHOaUelV3M=)
3: jknUDg7dwoXIKf-FEYWIUojpUtc.roa (hash: 2W3qLOECU7Uc4cSeqqL3ulz5L4R4vc28jKIJo8yhIIg=)
4: yeFo64foK3kpAhiGs_pqxDBcJmw.roa (hash: 4dFVu3RpkjabUXVyt139HwNFtfV67WkuH9beOvHuc1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:13:1b:b2:8e:99:51:6a:b8:f7:ed:2c:fc:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Apr 16 20:01:08 2026 GMT
Not After : Apr 17 20:01:08 2026 GMT
Subject: CN=a8888be59e64f506ecbc5d9ca1475541e97a936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:d7:88:45:a6:f9:82:ec:50:a3:3b:19:3e:
a6:71:b5:5f:c2:3a:cb:0a:ae:78:a2:cd:a7:24:5a:
8c:41:3e:71:c6:55:d6:d8:0e:4e:3b:42:f3:f8:36:
9e:3f:33:fe:3d:7f:30:c7:15:39:58:27:48:8d:38:
99:92:ce:a5:a5:61:c3:74:79:49:49:23:b9:9e:59:
6f:64:e0:85:9b:99:fa:0e:a2:84:49:5d:09:2d:47:
97:61:db:88:26:36:ba:8c:ad:ba:13:9b:79:fb:8f:
42:af:45:c0:7a:e2:77:47:61:d8:3d:30:66:50:f8:
8a:cb:f6:45:ac:b9:03:6b:e2:af:65:d7:a7:ba:89:
dd:b1:df:89:41:43:cc:23:3c:ed:76:64:eb:8b:ef:
4b:5b:cf:3f:74:18:10:06:dd:a3:7b:8d:ef:60:88:
cb:6b:23:8e:83:32:19:c1:7e:e7:81:12:71:5c:49:
53:ed:55:41:f5:1b:f9:fb:fc:63:a2:f5:7a:fc:f7:
1a:ee:3b:8a:5f:9a:b5:60:14:33:d7:4c:77:9d:b4:
e4:d6:f7:5f:05:b4:97:7d:75:91:f7:a8:ae:d7:b7:
24:df:77:ea:2f:4b:89:82:a4:81:39:79:7c:67:32:
d1:a1:a1:91:a7:16:0b:53:cc:8b:ad:b8:aa:cd:d5:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:8B:E5:9E:64:F5:06:EC:BC:5D:9C:A1:47:55:41:E9:7A:93:6B
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:af:da:ce:4e:23:cc:c8:65:ef:f9:6b:be:d3:03:5c:59:ff:
b3:5b:9d:3f:14:bc:3d:f3:e6:9c:9c:1a:a1:d5:03:d5:11:c5:
45:fb:d6:f4:a0:8c:a0:72:89:1e:4b:72:3d:d2:d7:54:cc:4f:
22:b3:14:a3:9d:e3:fb:b4:4a:78:34:ba:3a:fc:0f:68:dd:72:
f0:94:73:8a:89:38:d9:d3:04:97:69:56:9b:3c:39:fc:91:af:
57:7d:c1:96:cb:2f:b4:42:40:6a:1a:6d:21:9a:ee:c7:16:4d:
0d:55:af:27:96:83:36:94:79:dc:43:4f:74:31:71:c3:ae:0c:
d3:ba:4d:d6:8c:39:de:48:66:ab:45:fb:95:bc:f3:c5:5c:99:
5c:d6:60:7e:80:8d:c4:30:aa:eb:ac:4b:9e:92:e2:1e:e3:77:
10:30:4c:84:68:68:49:89:f5:f9:df:5c:c6:e7:fe:d5:58:a1:
3b:05:63:0e:25:7e:73:02:d6:e7:1f:fb:91:c7:51:8f:ad:34:
32:2e:3a:63:4d:51:d6:3b:c0:4d:12:b4:7a:fb:ec:2a:59:d1:
65:06:88:c6:f8:b1:8c:06:35:74:0f:60:fa:50:3f:2c:0c:2f:
6b:22:ba:b3:2d:22:a1:24:28:a8:ac:c8:35:8a:86:af:52:95:
a9:da:45:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hMbso6ZUWq49+0s/E4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh
N2U5ZDQwHhcNMjYwNDE2MjAwMTA4WhcNMjYwNDE3MjAwMTA4WjAzMTEwLwYDVQQD
EyhhODg4OGJlNTllNjRmNTA2ZWNiYzVkOWNhMTQ3NTU0MWU5N2E5MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46LXiEWm+YLsUKM7GT6mcbVfwjrL
Cq54os2nJFqMQT5xxlXW2A5OO0Lz+DaePzP+PX8wxxU5WCdIjTiZks6lpWHDdHlJ
SSO5nllvZOCFm5n6DqKESV0JLUeXYduIJja6jK26E5t5+49Cr0XAeuJ3R2HYPTBm
UPiKy/ZFrLkDa+KvZdenuondsd+JQUPMIzztdmTri+9LW88/dBgQBt2je43vYIjL
ayOOgzIZwX7ngRJxXElT7VVB9Rv5+/xjovV6/Pca7juKX5q1YBQz10x3nbTk1vdf
BbSXfXWR96iu17ck33fqL0uJgqSBOXl8ZzLRoaGRpxYLU8yLrbiqzdVZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiIi+WeZPUG7LxdnKFHVUHpepNrMB8GA1UdIwQY
MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt
ZjdkMDI3NTYwMDU4LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4
LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga/azk4j
zMhl7/lrvtMDXFn/s1udPxS8PfPmnJwaodUD1RHFRfvW9KCMoHKJHktyPdLXVMxP
IrMUo53j+7RKeDS6OvwPaN1y8JRziok42dMEl2lWmzw5/JGvV33BlssvtEJAahpt
IZruxxZNDVWvJ5aDNpR53ENPdDFxw64M07pN1ow53khmq0X7lbzzxVyZXNZgfoCN
xDCq66xLnpLiHuN3EDBMhGhoSYn1+d9cxuf+1VihOwVjDiV+cwLW5x/7kcdRj600
Mi46Y01R1jvATRK0evvsKlnRZQaIxvixjAY1dA9g+lA/LAwvayK6sy0ioSQoqKzI
NYqGr1KVqdpF6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:00 2026 by rpki-client