Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: 6ovZ0jIFHYylPgN1zSpShhFnh+1QhgNkyHbfj+3ou8c=
Subject key identifier: 57:18:9B:47:DB:06:1C:15:76:6E:4B:53:49:CC:ED:9A:8E:12:64:F8
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 019D996291D16E6D95037FD6A9ED352876BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0FFC
Signing time: Fri 17 Apr 2026 03:01:07 +0000
Manifest this update: Fri 17 Apr 2026 03:01:07 +0000
Manifest next update: Sat 18 Apr 2026 03:01:07 +0000
Files and hashes: 1: XEPF7uppLjcGaqRN3wLfKBoo6xs.roa (hash: rUx2aHlQsnFopfmDQOlAInYswjrrWcWiZT3IoOgNBhk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: 0IgNGaXndbyjyzQcoTVQC0B68BvtHkTL099H0F938vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:91:d1:6e:6d:95:03:7f:d6:a9:ed:35:28:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Apr 17 03:01:07 2026 GMT
Not After : Apr 18 03:01:07 2026 GMT
Subject: CN=57189b47db061c15766e4b5349cced9a8e1264f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:11:5c:12:31:ac:cf:9a:6a:79:69:66:71:
8e:b0:aa:04:95:d7:6c:a6:b7:7e:65:0b:29:ab:42:
6f:07:aa:7e:3c:87:0c:b5:57:1f:e2:09:6e:88:15:
6b:e4:56:67:82:5c:e3:81:16:e6:9b:a1:fa:c5:e2:
06:f7:70:49:24:7c:4e:d2:02:d2:36:cc:be:0e:66:
c9:b9:15:c2:47:7a:03:42:83:3d:c6:f0:0a:a3:9f:
f3:4a:fe:77:72:8c:ff:78:ec:4d:9b:a4:42:75:c9:
43:53:4f:14:49:6b:71:df:7c:3e:bf:c6:6a:c9:7d:
8c:d7:08:e1:71:03:65:9c:75:32:c9:e0:46:08:62:
20:dd:f2:e0:6c:f1:7d:24:5a:c7:45:37:e7:da:61:
9a:bc:55:7e:a2:6e:73:1e:62:e7:33:8e:56:fa:ed:
74:5a:35:03:6b:4a:b1:70:75:52:f5:a8:24:c7:9e:
0a:1d:1d:eb:9a:5b:36:00:f2:01:1f:14:ce:fd:29:
f8:5a:5d:40:85:de:ea:14:fa:86:a5:35:e8:f6:b1:
c6:4e:8e:22:57:9f:f9:e2:99:c6:4c:5d:46:b3:d8:
2f:26:1d:cc:60:3e:fa:f6:5d:3f:60:bf:22:fd:7b:
db:fb:b6:a2:db:f2:58:a1:ae:de:3c:bf:db:f5:64:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:18:9B:47:DB:06:1C:15:76:6E:4B:53:49:CC:ED:9A:8E:12:64:F8
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:57:a7:58:0f:f6:9a:32:8d:ee:bb:b2:3d:07:fc:a9:47:
e6:cf:18:cc:fb:7b:7c:8f:d6:3f:ed:0c:c8:4b:7b:91:7e:e1:
b5:52:b3:cf:fa:8f:f9:a3:26:7e:97:80:fe:12:25:9d:49:0c:
06:3d:a7:2f:fc:40:b3:5d:9a:67:76:f7:11:26:b0:72:ae:6f:
f2:a8:77:9b:9e:c8:9f:4a:54:aa:3f:57:ad:7b:04:63:7d:6f:
1f:75:ff:24:b0:c1:f3:45:dd:77:8c:25:b8:22:2d:56:38:db:
91:71:01:a4:d0:76:86:32:bd:6f:1e:45:59:24:40:f2:08:cb:
af:af:39:3a:c2:2a:97:c2:08:53:92:9a:07:0e:4f:de:ec:97:
3c:14:90:19:72:37:21:57:71:6a:c0:ae:f2:d4:63:ba:d5:fe:
b0:83:0d:3f:05:30:1c:a1:16:45:f3:ff:a1:92:27:8a:c6:93:
59:98:6f:c8:f4:9e:23:2b:8c:f1:b4:b0:c9:82:bb:14:8b:22:
1b:1a:02:50:51:48:eb:7b:86:3f:1e:8d:e2:a7:7f:87:e6:83:
c2:87:00:b3:2c:6f:b5:b8:45:9f:79:c7:d7:b5:54:01:93:d1:
5f:9f:60:af:0b:d2:12:41:4b:d4:c9:16:6a:c1:a0:fd:c4:64:
b7:94:97:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYpHRbm2VA3/Wqe01KHa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzRjZTc4YTRkMThjYTZlZjMxMDhmNGEzNjU5MDZkYTZi
NmI3ZjMwHhcNMjYwNDE3MDMwMTA3WhcNMjYwNDE4MDMwMTA3WjAzMTEwLwYDVQQD
Eyg1NzE4OWI0N2RiMDYxYzE1NzY2ZTRiNTM0OWNjZWQ5YThlMTI2NGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M8RXBIxrM+aanlpZnGOsKoEldds
prd+ZQspq0JvB6p+PIcMtVcf4gluiBVr5FZnglzjgRbmm6H6xeIG93BJJHxO0gLS
Nsy+DmbJuRXCR3oDQoM9xvAKo5/zSv53coz/eOxNm6RCdclDU08USWtx33w+v8Zq
yX2M1wjhcQNlnHUyyeBGCGIg3fLgbPF9JFrHRTfn2mGavFV+om5zHmLnM45W+u10
WjUDa0qxcHVS9agkx54KHR3rmls2APIBHxTO/Sn4Wl1Ahd7qFPqGpTXo9rHGTo4i
V5/54pnGTF1Gs9gvJh3MYD769l0/YL8i/Xvb+7ai2/JYoa7ePL/b9WR+rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcYm0fbBhwVdm5LU0nM7ZqOEmT4MB8GA1UdIwQY
MBaAFP/Eznik0Yym7zEI9KNlkG2mtrfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAt
OGQxMDY0ODNlMzZlLzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xNzkxNGItY2E2My00OTgwLTg3NDAtOGQxMDY0ODNlMzZl
LzEvXzhUT2VLVFJqS2J2TVFqMG8yV1FiYWEydF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu5Xp1gP
9poyje67sj0H/KlH5s8YzPt7fI/WP+0MyEt7kX7htVKzz/qP+aMmfpeA/hIlnUkM
Bj2nL/xAs12aZ3b3ESawcq5v8qh3m57In0pUqj9XrXsEY31vH3X/JLDB80Xdd4wl
uCItVjjbkXEBpNB2hjK9bx5FWSRA8gjLr685OsIql8IIU5KaBw5P3uyXPBSQGXI3
IVdxasCu8tRjutX+sIMNPwUwHKEWRfP/oZInisaTWZhvyPSeIyuM8bSwyYK7FIsi
GxoCUFFI63uGPx6N4qd/h+aDwocAsyxvtbhFn3nH17VUAZPRX59grwvSEkFL1MkW
asGg/cRkt5SXPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:47 2026 by rpki-client