Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: RHIxJxJX7M6dzX3USS2tmDj7B6e3cxFlLy+d96av0J8=
Subject key identifier: 38:3D:83:A1:54:C7:5F:8F:32:37:8E:15:1D:D1:35:1B:90:3C:9D:2D
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019D9A06B646516AEB466C4A7D8212B01ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 12D2
Signing time: Fri 17 Apr 2026 06:00:24 +0000
Manifest this update: Fri 17 Apr 2026 06:00:24 +0000
Manifest next update: Sat 18 Apr 2026 06:00:24 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 7ad0aNRrRmJ0q9YseghtNODX0BwujMcjz8DwSHqQyxY=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b6:46:51:6a:eb:46:6c:4a:7d:82:12:b0:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Apr 17 06:00:24 2026 GMT
Not After : Apr 18 06:00:24 2026 GMT
Subject: CN=383d83a154c75f8f32378e151dd1351b903c9d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:87:c1:31:40:6c:87:69:26:07:cc:85:e8:
fb:12:0e:fc:18:f7:b1:de:a8:84:09:f6:41:a7:51:
0f:9d:e8:9f:c7:bb:d5:68:ce:80:e4:9c:3d:a8:05:
20:a1:ad:59:15:a1:7a:b5:79:a7:6a:f8:28:bf:66:
9b:49:c1:0b:ac:a4:1f:3b:0e:53:86:d6:50:1c:64:
32:59:03:03:44:f0:eb:d7:4f:da:88:96:8b:cc:fb:
3f:7d:d9:30:7a:79:50:a1:c1:c5:4f:4f:63:3a:86:
63:a6:dc:73:7e:70:ed:a9:3c:e5:aa:82:05:9a:89:
e5:df:fb:6a:fc:3e:ac:52:38:ed:35:80:96:f5:04:
95:32:00:1e:31:e5:bf:77:6a:ca:92:d4:82:eb:9d:
6c:a5:96:9f:f1:fe:06:d9:9f:87:14:cc:ad:e1:cc:
9c:e5:b4:9f:47:3f:34:b6:25:68:e5:d8:ec:54:88:
51:3e:41:05:4a:59:8c:89:1c:8c:f7:8d:b7:3b:e0:
9e:b7:47:d6:70:bb:23:d5:8f:5e:87:d0:56:08:2c:
91:f8:9a:26:f4:34:b4:91:a4:bb:e5:15:68:21:b0:
27:7b:77:41:d0:e8:7b:42:42:02:84:28:21:f5:8c:
65:25:a9:d0:c9:63:9e:bf:1b:62:39:9f:3e:8d:b2:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:83:A1:54:C7:5F:8F:32:37:8E:15:1D:D1:35:1B:90:3C:9D:2D
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:b2:58:53:d7:db:f8:02:4b:05:67:73:4d:89:d2:3f:24:bd:
9e:c2:c4:ac:98:3b:cc:3f:73:51:32:4b:35:86:a2:fa:73:c6:
39:72:d5:c9:12:e5:97:98:7b:66:37:d4:3c:65:ea:9b:20:44:
85:c8:0b:b5:b9:0b:6b:21:df:ac:9d:c9:9b:46:05:50:be:76:
70:6e:fc:cf:4d:99:90:41:56:3d:a8:06:bb:82:29:bd:05:08:
44:03:06:ef:ce:4d:7d:1c:aa:b9:ce:7b:0c:66:7d:d0:84:33:
67:4b:e9:3e:d8:f1:3d:3b:09:f2:29:50:fa:70:c4:d7:0e:cd:
fa:fa:d1:38:21:89:a6:c3:dc:8b:bb:12:0b:62:12:b3:aa:c6:
06:ab:3a:e6:ad:b3:8f:04:f4:46:a4:43:ec:96:25:02:e1:e3:
44:60:44:bf:db:dd:4c:e8:16:af:68:a5:89:80:48:c7:55:24:
e4:88:bd:bd:dc:e6:18:b7:3c:b3:1b:66:07:eb:ae:2a:6d:ce:
1d:72:1a:22:b1:f9:09:76:4b:20:db:8f:b6:db:ba:72:ed:92:
d7:2a:93:86:bc:95:b4:6a:7c:ee:07:1f:9d:1c:6d:33:3b:aa:
26:a9:c4:b2:58:7b:aa:4c:71:f4:9a:4e:15:88:9a:86:7b:fe:
ad:d4:f5:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBrZGUWrrRmxKfYISsB7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjYwNDE3MDYwMDI0WhcNMjYwNDE4MDYwMDI0WjAzMTEwLwYDVQQD
EygzODNkODNhMTU0Yzc1ZjhmMzIzNzhlMTUxZGQxMzUxYjkwM2M5ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUSHwTFAbIdpJgfMhej7Eg78GPex
3qiECfZBp1EPneifx7vVaM6A5Jw9qAUgoa1ZFaF6tXmnavgov2abScELrKQfOw5T
htZQHGQyWQMDRPDr10/aiJaLzPs/fdkwenlQocHFT09jOoZjptxzfnDtqTzlqoIF
monl3/tq/D6sUjjtNYCW9QSVMgAeMeW/d2rKktSC651spZaf8f4G2Z+HFMyt4cyc
5bSfRz80tiVo5djsVIhRPkEFSlmMiRyM9423O+Cet0fWcLsj1Y9eh9BWCCyR+Jom
9DS0kaS75RVoIbAne3dB0Oh7QkIChCgh9YxlJanQyWOevxtiOZ8+jbKkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg9g6FUx1+PMjeOFR3RNRuQPJ0tMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbJYU9fb
+AJLBWdzTYnSPyS9nsLErJg7zD9zUTJLNYai+nPGOXLVyRLll5h7ZjfUPGXqmyBE
hcgLtbkLayHfrJ3Jm0YFUL52cG78z02ZkEFWPagGu4IpvQUIRAMG785NfRyquc57
DGZ90IQzZ0vpPtjxPTsJ8ilQ+nDE1w7N+vrROCGJpsPci7sSC2ISs6rGBqs65q2z
jwT0RqRD7JYlAuHjRGBEv9vdTOgWr2iliYBIx1Uk5Ii9vdzmGLc8sxtmB+uuKm3O
HXIaIrH5CXZLINuPttu6cu2S1yqThryVtGp87gcfnRxtMzuqJqnEslh7qkxx9JpO
FYiahnv+rdT1Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:34 2026 by rpki-client