Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: yl3AnwUCoclAJ3JZwFC3Ztrw1nBxmkSOtFjTMWKACjg=
Subject key identifier: AF:D4:9A:9A:0C:C8:58:71:22:34:D0:2B:6E:A2:8E:76:EB:76:BA:6E
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 019D9DAD9E610D28570CBE4BF476BCE9FB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 19EA
Signing time: Fri 17 Apr 2026 23:01:34 +0000
Manifest this update: Fri 17 Apr 2026 23:01:34 +0000
Manifest next update: Sat 18 Apr 2026 23:01:34 +0000
Files and hashes: 1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: fLEr1TOmGOqXXmcPYiT5c0jPbaPM+tvrvtz1/wFZN4c=)
2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
3: QtiXcakAti6d2iXhKH347YHNMXo.roa (hash: pow1d1/9bSpkBqspDh8+9JjMr6QZKuXaq7BSx5gfwvI=)
4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:9e:61:0d:28:57:0c:be:4b:f4:76:bc:e9:fb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Apr 17 23:01:34 2026 GMT
Not After : Apr 18 23:01:34 2026 GMT
Subject: CN=afd49a9a0cc858712234d02b6ea28e76eb76ba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:02:fe:8b:11:7e:2c:0a:da:21:c5:95:50:
ac:02:68:5c:ad:c8:0b:a4:6a:4a:4f:ce:68:64:26:
fe:4a:b8:ac:b7:dc:fd:fa:36:22:4d:87:aa:6e:12:
66:75:fd:ce:28:a7:03:ca:66:f5:e9:1b:bb:43:08:
28:77:70:cf:d2:f2:d5:21:e9:0e:5d:36:40:f5:85:
7a:2d:2e:d4:60:7d:44:80:14:db:98:2c:4b:1e:4f:
46:b6:50:a9:f7:ae:68:e0:e8:a5:11:e8:bb:27:aa:
0c:3a:53:80:78:c0:63:b1:4f:58:58:93:9e:83:00:
e2:8c:95:9c:f4:d9:24:1c:52:cc:7c:51:96:82:47:
ef:1b:ee:01:36:72:5b:f3:fc:12:52:0f:63:30:ea:
58:04:b2:51:f1:1f:95:37:21:86:48:53:03:54:af:
9f:e3:72:dc:df:86:10:b0:d9:ea:0f:31:c0:89:25:
f6:c2:d8:82:27:da:82:33:b3:de:73:ed:1f:e5:0a:
3b:07:56:e5:30:91:e7:40:0a:ac:49:7e:4d:20:ed:
a2:f5:5d:fb:59:2c:d1:5e:8d:d7:9e:c7:74:bc:49:
20:a8:cb:92:fc:9f:62:82:aa:f3:e7:e8:99:74:c3:
a4:3f:fb:f3:12:56:28:56:b2:41:68:66:52:ef:0f:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:9A:9A:0C:C8:58:71:22:34:D0:2B:6E:A2:8E:76:EB:76:BA:6E
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:31:a5:9e:d2:92:4a:41:c9:59:d2:aa:9b:37:3c:b5:cc:
5a:16:77:9e:3e:3c:a8:a5:98:7d:e5:d5:1c:dc:25:c2:f0:e6:
28:44:03:68:cc:20:2a:53:24:b1:eb:bb:36:bf:55:16:5d:73:
db:06:50:ac:68:cf:cd:24:39:dc:6a:da:89:94:d6:89:e5:b4:
95:6b:c1:59:fe:31:76:eb:65:08:2c:b9:58:8c:0a:ad:b7:a7:
79:04:89:d7:07:50:a6:99:8f:e6:5c:c5:41:28:86:69:c5:7d:
1d:10:f9:bb:5e:de:dc:ae:b2:88:e3:3b:42:be:03:77:de:36:
3d:ee:7a:08:34:79:99:d9:08:86:59:21:e9:fd:87:12:7c:7b:
05:7b:70:75:d3:f5:ec:bc:0c:1e:9e:2c:76:65:cf:a6:5d:85:
38:10:dd:7d:20:7c:05:62:a5:86:33:e9:cd:5f:0e:ca:b0:8c:
74:60:c2:b6:be:6c:61:74:f9:57:4c:14:1d:32:3b:3b:27:af:
9c:15:a8:b2:8d:ea:66:d9:2d:7d:8d:4e:a4:14:aa:a1:66:6d:
9c:e7:f5:3d:22:03:0b:ce:24:46:2c:21:61:ed:7a:17:66:4f:
08:b5:f7:eb:2f:78:ce:9e:60:ca:79:c2:68:11:f3:aa:f5:a3:
06:1d:99:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drZ5hDShXDL5L9Ha86ft/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzIxOTIyMWNjMGEyMTMyNmNlMDA2YzQyODI1YmFjMmJl
MzFlMTcwHhcNMjYwNDE3MjMwMTM0WhcNMjYwNDE4MjMwMTM0WjAzMTEwLwYDVQQD
EyhhZmQ0OWE5YTBjYzg1ODcxMjIzNGQwMmI2ZWEyOGU3NmViNzZiYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsAC/osRfiwK2iHFlVCsAmhcrcgL
pGpKT85oZCb+Srist9z9+jYiTYeqbhJmdf3OKKcDymb16Ru7Qwgod3DP0vLVIekO
XTZA9YV6LS7UYH1EgBTbmCxLHk9GtlCp965o4OilEei7J6oMOlOAeMBjsU9YWJOe
gwDijJWc9NkkHFLMfFGWgkfvG+4BNnJb8/wSUg9jMOpYBLJR8R+VNyGGSFMDVK+f
43Lc34YQsNnqDzHAiSX2wtiCJ9qCM7Pec+0f5Qo7B1blMJHnQAqsSX5NIO2i9V37
WSzRXo3Xnsd0vEkgqMuS/J9igqrz5+iZdMOkP/vzElYoVrJBaGZS7w/15wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/UmpoMyFhxIjTQK26ijnbrdrpuMB8GA1UdIwQY
MBaAFPEyGSIcwKITJs4AbEKCW6wr4x4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMt
NDVlNjk2YTVhZTQ1LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMtNDVlNjk2YTVhZTQ1
LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAON4xpZ7S
kkpByVnSqps3PLXMWhZ3nj48qKWYfeXVHNwlwvDmKEQDaMwgKlMkseu7Nr9VFl1z
2wZQrGjPzSQ53GraiZTWieW0lWvBWf4xdutlCCy5WIwKrbeneQSJ1wdQppmP5lzF
QSiGacV9HRD5u17e3K6yiOM7Qr4Dd942Pe56CDR5mdkIhlkh6f2HEnx7BXtwddP1
7LwMHp4sdmXPpl2FOBDdfSB8BWKlhjPpzV8OyrCMdGDCtr5sYXT5V0wUHTI7Oyev
nBWoso3qZtktfY1OpBSqoWZtnOf1PSIDC84kRiwhYe16F2ZPCLX36y94zp5gynnC
aBHzqvWjBh2ZOA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:09:44 2026 by rpki-client