Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: SVDYjLi34JcKpL71BoY1dtQuuOmKra15+6TYHTi4y+o=
Subject key identifier: 28:00:A3:9F:6A:CD:96:48:F4:A5:CD:86:43:66:7C:98:A4:02:57:6D
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019EC0DB6C78F1B9B0134A14D55FBA3733A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 12:01:06 +0000
Manifest this update: Sat 13 Jun 2026 12:01:06 +0000
Manifest next update: Sun 14 Jun 2026 12:01:06 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: lbXRTE0BhpqegsNDF3XNgbXqzYd/UqOW1wfGIsBw4Dg=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:6c:78:f1:b9:b0:13:4a:14:d5:5f:ba:37:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jun 13 12:01:06 2026 GMT
Not After : Jun 14 12:01:06 2026 GMT
Subject: CN=2800a39f6acd9648f4a5cd8643667c98a402576d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:36:ff:26:67:43:92:d1:7b:20:c7:de:b6:
b0:82:d2:77:42:7f:14:3d:5d:61:f2:34:31:b3:c2:
b2:15:89:a4:9f:54:d7:5c:75:62:49:a4:78:c8:28:
f6:04:26:b0:bf:9f:8a:02:e7:25:6c:ea:ac:43:ea:
96:16:fa:da:7f:11:df:c3:b8:99:63:2b:ec:8e:79:
e5:ff:02:db:34:c9:6d:33:d4:66:a4:01:3b:32:07:
76:de:94:a8:7a:40:13:e4:73:e7:3f:1a:0f:c8:b2:
09:4f:5f:fd:a6:8b:5c:74:d1:ff:c0:bf:fd:52:4c:
63:c3:53:c4:30:fa:30:f8:df:4f:07:a7:c8:77:d6:
01:84:f6:c9:13:50:20:93:47:61:12:49:90:d3:18:
cf:36:f6:41:93:9c:09:94:31:6f:ac:50:e1:f0:cd:
0d:fe:e8:3f:2b:23:53:5c:f6:d1:8e:89:55:4a:20:
39:89:05:f7:3b:99:16:41:a5:f3:f7:32:bf:c5:d8:
94:7c:31:ac:b1:f5:15:7f:5c:cc:cb:37:0b:ed:fc:
d1:d8:24:41:1c:b0:c4:53:d3:7b:99:e4:88:aa:57:
4a:db:81:c2:07:d7:3b:26:3c:c1:8b:94:52:6a:52:
88:c7:20:f1:a8:f8:8f:69:25:9e:2f:e6:63:ca:5a:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:A3:9F:6A:CD:96:48:F4:A5:CD:86:43:66:7C:98:A4:02:57:6D
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:3f:6f:23:a1:fb:22:eb:a9:e8:bb:eb:2c:9b:85:60:31:
37:bc:6b:95:6d:7b:32:4d:98:c1:52:27:e0:83:d7:93:49:07:
40:2d:87:37:28:cd:4b:8b:10:8e:d3:90:70:d6:fd:de:32:aa:
e9:ac:94:1a:ef:d7:48:ff:a3:e9:2c:a5:ef:3d:17:d9:6f:d9:
1f:95:9b:b2:87:ae:50:89:7d:3b:03:ce:c8:ba:fc:eb:8b:e0:
0a:8a:24:e2:3f:b8:11:99:e0:0d:71:25:7f:73:30:7e:83:47:
da:eb:0d:37:86:04:fc:40:2f:2b:0c:37:51:97:1f:3d:19:41:
0c:5c:1f:a9:b2:de:54:ae:d0:03:90:d0:9e:59:c6:1f:0e:95:
b2:e1:fa:ce:61:fc:fc:9a:05:9d:6e:36:af:19:57:0f:cf:7e:
0b:52:29:6f:7b:93:d6:cc:00:17:53:00:f3:03:69:a4:7b:d5:
92:4e:8c:78:43:25:d4:7f:f4:82:3d:a2:49:34:50:a7:3f:df:
c0:24:92:51:48:6f:c1:ab:75:97:86:78:98:f6:a3:9b:7f:6d:
33:90:2d:c4:f9:a2:47:aa:46:ea:75:ff:79:a1:f6:10:5c:32:
0d:f6:1d:34:92:6d:1f:9c:d9:9c:d2:cd:72:d3:c8:fc:d0:35:
72:81:cf:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A22x48bmwE0oU1V+6NzOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjYwNjEzMTIwMTA2WhcNMjYwNjE0MTIwMTA2WjAzMTEwLwYDVQQD
EygyODAwYTM5ZjZhY2Q5NjQ4ZjRhNWNkODY0MzY2N2M5OGE0MDI1NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul02/yZnQ5LReyDH3rawgtJ3Qn8U
PV1h8jQxs8KyFYmkn1TXXHViSaR4yCj2BCawv5+KAuclbOqsQ+qWFvrafxHfw7iZ
Yyvsjnnl/wLbNMltM9RmpAE7Mgd23pSoekAT5HPnPxoPyLIJT1/9potcdNH/wL/9
Ukxjw1PEMPow+N9PB6fId9YBhPbJE1Agk0dhEkmQ0xjPNvZBk5wJlDFvrFDh8M0N
/ug/KyNTXPbRjolVSiA5iQX3O5kWQaXz9zK/xdiUfDGssfUVf1zMyzcL7fzR2CRB
HLDEU9N7meSIqldK24HCB9c7JjzBi5RSalKIxyDxqPiPaSWeL+Zjylqp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgAo59qzZZI9KXNhkNmfJikAldtMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5c/byOh
+yLrqei76yybhWAxN7xrlW17Mk2YwVIn4IPXk0kHQC2HNyjNS4sQjtOQcNb93jKq
6ayUGu/XSP+j6Syl7z0X2W/ZH5WbsoeuUIl9OwPOyLr864vgCook4j+4EZngDXEl
f3MwfoNH2usNN4YE/EAvKww3UZcfPRlBDFwfqbLeVK7QA5DQnlnGHw6VsuH6zmH8
/JoFnW42rxlXD89+C1Ipb3uT1swAF1MA8wNppHvVkk6MeEMl1H/0gj2iSTRQpz/f
wCSSUUhvwat1l4Z4mPajm39tM5AtxPmiR6pG6nX/eaH2EFwyDfYdNJJtH5zZnNLN
ctPI/NA1coHPRQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:41 2026 by rpki-client