Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: qFZyPloep/N4o5+y5T5WSlj2mOcc7dwhvaDP6etqLUo=
Subject key identifier: 1E:A5:62:C0:C6:20:D1:7E:E8:A1:DB:24:63:8B:B5:47:90:2F:05:94
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019FAD1ABF36F76F470502E11BD03D4C701C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0E2E
Signing time: Wed 29 Jul 2026 09:00:38 +0000
Manifest this update: Wed 29 Jul 2026 09:00:38 +0000
Manifest next update: Thu 30 Jul 2026 09:00:38 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: //BwhAFSH5+qVaegCf8pqBXvJtaQ7wpAa//KQUAO3yE=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:bf:36:f7:6f:47:05:02:e1:1b:d0:3d:4c:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jul 29 09:00:38 2026 GMT
Not After : Jul 30 09:00:38 2026 GMT
Subject: CN=1ea562c0c620d17ee8a1db24638bb547902f0594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:63:7d:3f:63:49:7c:43:47:5c:9a:bc:f9:
9a:36:02:86:f7:a9:3d:c3:40:24:3a:80:cf:ce:27:
79:ed:4e:3f:37:59:7c:5c:69:51:25:0b:8a:2f:75:
dc:a6:46:79:76:a0:22:e4:de:68:d6:30:34:e4:19:
8a:90:d7:74:53:81:fa:35:38:a8:df:ac:ff:a8:87:
ff:00:e7:60:d2:37:de:0e:6d:26:77:94:3c:82:3f:
bd:d5:0c:2a:8e:45:44:98:19:08:cc:47:34:02:fb:
31:e9:f1:36:74:80:f3:95:73:3e:99:97:c9:5c:42:
69:59:dc:00:20:b2:ba:8a:d8:b0:9f:f4:f3:ad:b2:
74:82:6b:42:bd:a4:ff:bd:b9:cd:18:54:69:08:1c:
ef:a3:24:e1:83:e6:62:80:67:96:53:11:c3:0a:8c:
41:a2:4b:f6:12:2a:78:d9:83:ee:d6:c6:ed:fe:c5:
ca:c4:09:36:dc:3d:93:c6:68:17:fd:92:da:c9:b6:
d8:94:a0:10:f4:c8:c5:c2:0a:e3:e4:26:60:3a:1f:
cf:c2:43:65:03:33:c0:bb:3f:c1:ba:a1:e8:4e:12:
32:60:16:42:02:b8:31:cb:db:4f:1b:7a:e5:70:46:
a3:ef:9a:36:b0:36:be:02:a5:21:6e:a1:0b:aa:e5:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A5:62:C0:C6:20:D1:7E:E8:A1:DB:24:63:8B:B5:47:90:2F:05:94
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:86:39:37:b2:27:b3:23:1c:87:24:48:0a:d3:1d:af:8f:
02:5d:3c:bd:b0:e6:2a:82:23:c9:d8:78:35:47:43:0a:14:7e:
1c:f4:cc:22:27:6e:9c:0c:1d:31:0f:8e:05:73:bd:36:72:cb:
01:ee:09:2e:08:91:59:a4:39:f1:b1:69:f9:6a:d9:7f:8f:5e:
cf:eb:b7:6e:eb:bf:2d:d8:46:67:ae:8c:b8:69:b9:62:9c:b6:
ed:a9:4b:83:9a:22:0b:bc:61:d9:15:a8:43:36:6c:cd:33:02:
12:4d:f9:a4:e0:f2:b6:7f:f4:d7:ac:a8:e4:a7:68:a9:c7:46:
2d:23:11:aa:3b:e1:56:d2:87:ee:98:be:4c:c4:b6:17:64:7c:
b8:51:fb:df:88:c4:06:d5:5a:a2:21:61:c8:3e:27:36:ed:dc:
43:a4:3e:ba:29:9c:da:3f:0b:06:9d:56:84:4c:d6:37:3e:85:
f8:41:9b:7f:29:38:28:3f:05:b3:d3:d0:33:f7:b3:3b:29:85:
74:54:d3:70:db:9a:cb:dd:a2:a0:64:39:f9:e3:cf:e0:6a:3e:
37:98:42:a2:e3:0a:b4:d4:df:a3:4b:7a:0e:18:3d:8f:c3:7a:
4f:c1:da:0d:f7:11:4c:f8:33:cf:07:51:03:d4:25:aa:8e:e6:
dc:38:ea:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGr82929HBQLhG9A9THAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjYwNzI5MDkwMDM4WhcNMjYwNzMwMDkwMDM4WjAzMTEwLwYDVQQD
EygxZWE1NjJjMGM2MjBkMTdlZThhMWRiMjQ2MzhiYjU0NzkwMmYwNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcRjfT9jSXxDR1yavPmaNgKG96k9
w0AkOoDPzid57U4/N1l8XGlRJQuKL3XcpkZ5dqAi5N5o1jA05BmKkNd0U4H6NTio
36z/qIf/AOdg0jfeDm0md5Q8gj+91QwqjkVEmBkIzEc0Avsx6fE2dIDzlXM+mZfJ
XEJpWdwAILK6itiwn/TzrbJ0gmtCvaT/vbnNGFRpCBzvoyThg+ZigGeWUxHDCoxB
okv2Eip42YPu1sbt/sXKxAk23D2TxmgX/ZLaybbYlKAQ9MjFwgrj5CZgOh/PwkNl
AzPAuz/BuqHoThIyYBZCArgxy9tPG3rlcEaj75o2sDa+AqUhbqELquUpFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6lYsDGINF+6KHbJGOLtUeQLwWUMB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9CGOTey
J7MjHIckSArTHa+PAl08vbDmKoIjydh4NUdDChR+HPTMIidunAwdMQ+OBXO9NnLL
Ae4JLgiRWaQ58bFp+WrZf49ez+u3buu/LdhGZ66MuGm5Ypy27alLg5oiC7xh2RWo
QzZszTMCEk35pODytn/016yo5KdoqcdGLSMRqjvhVtKH7pi+TMS2F2R8uFH734jE
BtVaoiFhyD4nNu3cQ6Q+uimc2j8LBp1WhEzWNz6F+EGbfyk4KD8Fs9PQM/ezOymF
dFTTcNuay92ioGQ5+ePP4Go+N5hCouMKtNTfo0t6Dhg9j8N6T8HaDfcRTPgzzwdR
A9Qlqo7m3DjqAw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:55 2026 by rpki-client