Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier: fWqPfVurQUWFNkBJky3PYBdiAcNcWDPHLv/B/v9hRCs=
Subject key identifier: 2A:E5:38:ED:A8:CC:86:DB:FC:48:9E:F0:F4:6A:FF:05:1C:EB:2A:4B
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019D98BD37B567B9EDAEDF47F059CB4ED609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number: 14AE
Signing time: Fri 17 Apr 2026 00:00:30 +0000
Manifest this update: Fri 17 Apr 2026 00:00:30 +0000
Manifest next update: Sat 18 Apr 2026 00:00:30 +0000
Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: qczvlM1SEGJxLYLu/M25z+ODIwXrHG2iQtd7OqxI7zk=)
2: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=)
3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
4: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=)
5: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
6: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
7: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
8: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:37:b5:67:b9:ed:ae:df:47:f0:59:cb:4e:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Apr 17 00:00:30 2026 GMT
Not After : Apr 18 00:00:30 2026 GMT
Subject: CN=2ae538eda8cc86dbfc489ef0f46aff051ceb2a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:59:27:10:ee:d9:8a:d7:85:b2:2b:8d:f9:
fd:c8:01:58:4c:b5:9f:c7:a3:b7:49:a9:f6:b2:0f:
fc:b7:9f:b7:42:c8:d6:07:9d:d3:17:04:3a:7d:ff:
02:1a:d7:ca:f5:9d:47:48:68:cb:41:78:3a:77:b3:
1a:39:82:0e:87:79:4d:e2:2d:54:78:b4:e1:17:ec:
34:72:54:ea:66:1e:96:34:7e:56:5c:e4:1a:db:73:
d2:11:b0:d4:e4:b4:bb:c9:6e:88:f7:b9:77:0a:c4:
97:5c:f7:f8:f7:0e:0a:62:97:9e:8e:c0:6d:ff:4d:
03:98:b1:86:18:92:16:00:5a:b3:45:56:fa:d3:93:
ec:6e:20:a8:ac:3a:88:58:fd:42:2d:11:50:40:62:
34:8e:c8:df:c7:03:03:62:19:76:19:dc:57:79:43:
b8:1e:68:9d:5d:e6:f1:43:c1:35:1e:f6:48:b2:da:
70:7f:14:3c:61:79:ee:b0:60:da:09:1b:f6:88:07:
64:89:db:2f:3d:dd:43:d3:b9:5b:a9:cc:dd:b0:dc:
1b:31:3c:8e:87:5a:ed:9f:56:8a:f5:e4:20:bb:03:
45:77:ec:23:a2:1d:90:ee:44:be:7a:15:d8:c6:d8:
7e:aa:fb:5c:5f:5d:dc:0a:d4:40:11:e9:28:2a:5c:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:38:ED:A8:CC:86:DB:FC:48:9E:F0:F4:6A:FF:05:1C:EB:2A:4B
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:87:a0:de:51:15:b1:bc:ab:f8:66:22:31:45:76:12:ee:d4:
a9:93:8a:45:a2:c8:54:9f:eb:7b:63:45:1d:13:ed:6d:ed:69:
b0:bc:f3:9b:26:0e:9a:f1:fd:83:cc:9e:fc:6d:f2:43:5d:e6:
4d:af:e0:7e:d0:3c:13:3a:06:d3:1a:f8:10:4b:49:32:da:d5:
e3:07:af:9a:62:eb:51:f8:24:8e:77:f6:19:f8:c2:58:ea:2f:
94:be:9a:75:8a:3a:d4:b1:36:8f:b2:00:29:3d:bf:1e:4c:08:
5f:1f:33:6a:83:52:21:37:29:3c:d1:e1:35:f3:50:92:c2:66:
70:57:03:14:a9:5d:ce:fd:95:de:f2:61:63:04:4e:ec:1b:8e:
0f:6e:02:d3:40:06:c0:4b:6a:53:50:9d:73:db:fa:88:45:40:
71:7c:4f:5b:59:fe:cd:aa:f1:ef:0c:98:2c:f9:ab:44:82:4e:
63:35:0d:59:84:83:86:c5:41:15:8c:a4:ba:0d:26:29:78:ed:
ec:1c:24:39:d9:74:3d:9c:0d:e8:ea:0e:ec:8a:e8:a0:39:1d:
0d:a1:e9:36:77:b5:15:10:7e:50:49:2d:1a:7d:20:8a:c6:c1:
a4:d9:8c:76:ee:bb:5d:85:ff:dd:75:e3:c2:ca:4f:e1:c0:f5:
b9:61:06:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvTe1Z7ntrt9H8FnLTtYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjYwNDE3MDAwMDMwWhcNMjYwNDE4MDAwMDMwWjAzMTEwLwYDVQQD
EygyYWU1MzhlZGE4Y2M4NmRiZmM0ODllZjBmNDZhZmYwNTFjZWIyYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/pZJxDu2YrXhbIrjfn9yAFYTLWf
x6O3San2sg/8t5+3QsjWB53TFwQ6ff8CGtfK9Z1HSGjLQXg6d7MaOYIOh3lN4i1U
eLThF+w0clTqZh6WNH5WXOQa23PSEbDU5LS7yW6I97l3CsSXXPf49w4KYpeejsBt
/00DmLGGGJIWAFqzRVb605PsbiCorDqIWP1CLRFQQGI0jsjfxwMDYhl2GdxXeUO4
HmidXebxQ8E1HvZIstpwfxQ8YXnusGDaCRv2iAdkidsvPd1D07lbqczdsNwbMTyO
h1rtn1aK9eQguwNFd+wjoh2Q7kS+ehXYxth+qvtcX13cCtRAEekoKlxUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrlOO2ozIbb/Eie8PRq/wUc6ypLMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroeg3lEV
sbyr+GYiMUV2Eu7UqZOKRaLIVJ/re2NFHRPtbe1psLzzmyYOmvH9g8ye/G3yQ13m
Ta/gftA8EzoG0xr4EEtJMtrV4wevmmLrUfgkjnf2GfjCWOovlL6adYo61LE2j7IA
KT2/HkwIXx8zaoNSITcpPNHhNfNQksJmcFcDFKldzv2V3vJhYwRO7BuOD24C00AG
wEtqU1Cdc9v6iEVAcXxPW1n+zarx7wyYLPmrRIJOYzUNWYSDhsVBFYykug0mKXjt
7BwkOdl0PZwN6OoO7IrooDkdDaHpNne1FRB+UEktGn0gisbBpNmMdu67XYX/3XXj
wspP4cD1uWEGRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:43 2026 by rpki-client