Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File: M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier: DEUw1iNhbqsbScci5XqKXs9BPjHZJMGO0D+q37qctXI=
Subject key identifier: 8D:E2:08:35:46:BB:BC:48:8E:50:B8:71:FE:2A:FB:2C:4D:E2:B9:47
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer: /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial: 019D9AE323FC6B5579BDA2237F6F0594E7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number: 143B
Signing time: Fri 17 Apr 2026 10:01:10 +0000
Manifest this update: Fri 17 Apr 2026 10:01:10 +0000
Manifest next update: Sat 18 Apr 2026 10:01:10 +0000
Files and hashes: 1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: Ot3rD4Ru2TmKm+krokFNAa6KXR/RuMIsbXYwutRPwdw=)
2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:23:fc:6b:55:79:bd:a2:23:7f:6f:05:94:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
Validity
Not Before: Apr 17 10:01:10 2026 GMT
Not After : Apr 18 10:01:10 2026 GMT
Subject: CN=8de2083546bbbc488e50b871fe2afb2c4de2b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:be:fb:65:0a:7f:4e:78:11:92:10:ce:15:
d1:33:26:26:e7:a3:67:7c:f2:cd:35:1c:94:0d:49:
0e:1b:89:30:e0:07:b3:f1:b9:a5:0c:88:ad:ef:cd:
e2:ea:a9:63:64:0d:11:99:07:c0:17:4e:17:47:bd:
a6:ce:63:14:9e:d5:d5:d0:6e:b7:12:11:9a:1e:c3:
4f:c9:26:59:b7:14:9e:e5:4d:fa:ef:73:42:c7:b4:
a1:71:7b:38:0d:4f:97:9a:db:98:95:73:f9:eb:ee:
5d:b5:5f:9b:0b:74:1b:1d:57:6e:44:79:42:ec:60:
24:1b:22:9f:05:fc:b3:e5:37:eb:4b:77:af:48:0b:
5f:91:b1:cc:92:fd:ff:fd:64:b4:b4:70:b7:7e:6e:
3e:b1:30:90:e4:64:fb:38:70:5c:db:00:1c:09:a3:
d4:e6:7d:86:bd:73:c7:21:ef:4b:3c:b4:6a:85:d6:
48:0b:07:e8:27:1e:2d:97:59:0c:9e:65:ae:36:38:
42:99:25:db:01:4a:3b:b3:b7:00:aa:86:16:3d:30:
0f:ba:1d:52:b0:c8:c4:18:e8:47:e5:c0:2a:f1:91:
fa:24:a8:9c:8f:6d:79:c5:9c:68:11:44:e2:4f:b4:
3e:ce:9d:d5:89:53:97:ae:15:af:fd:1e:c5:4f:56:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:08:35:46:BB:BC:48:8E:50:B8:71:FE:2A:FB:2C:4D:E2:B9:47
X509v3 Authority Key Identifier:
keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1a:a8:23:54:77:db:08:35:c2:8f:f4:6b:5d:d8:62:6d:63:
31:33:04:08:96:80:a5:56:90:ca:af:b2:d8:9a:96:04:b9:f3:
66:a7:c6:d8:24:9c:a6:4c:84:e0:20:e9:c8:40:52:44:e6:0c:
9b:3b:03:5e:a5:12:74:12:c2:34:37:d5:f2:aa:b9:9a:80:1e:
f6:6e:72:76:69:2c:a4:ef:72:40:97:03:f0:b5:a4:ad:07:a4:
f4:a5:0e:f0:10:73:81:9d:c5:62:3f:4f:2a:05:94:79:92:d2:
84:20:e0:9f:29:c4:09:5d:6a:62:c9:ff:a4:0f:87:08:80:ea:
6c:ec:75:d0:2e:32:63:ea:f0:b5:09:2c:a7:db:5e:4a:24:8c:
de:98:53:c1:4d:01:dc:cf:ce:f0:c2:97:d6:ea:4c:12:8e:17:
bd:2f:08:b6:ee:6f:16:b5:0f:b4:20:78:f7:ff:46:5b:0e:e0:
7c:87:78:68:f4:9c:02:8b:44:da:1d:ac:b5:e5:9f:94:3a:43:
39:ce:a4:c1:a6:81:5a:d8:fa:75:53:a8:85:70:87:9d:42:af:
19:fb:7f:91:bf:d9:87:59:5f:f7:73:c0:ee:b2:4b:38:03:e6:
3f:c1:1a:63:81:3c:d1:e1:e7:d2:5b:a6:20:27:88:7a:2a:34:
93:51:27:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4yP8a1V5vaIjf28FlOeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx
OTJkYTgwHhcNMjYwNDE3MTAwMTEwWhcNMjYwNDE4MTAwMTEwWjAzMTEwLwYDVQQD
Eyg4ZGUyMDgzNTQ2YmJiYzQ4OGU1MGI4NzFmZTJhZmIyYzRkZTJiOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4W++2UKf054EZIQzhXRMyYm56Nn
fPLNNRyUDUkOG4kw4Aez8bmlDIit783i6qljZA0RmQfAF04XR72mzmMUntXV0G63
EhGaHsNPySZZtxSe5U3673NCx7ShcXs4DU+XmtuYlXP56+5dtV+bC3QbHVduRHlC
7GAkGyKfBfyz5TfrS3evSAtfkbHMkv3//WS0tHC3fm4+sTCQ5GT7OHBc2wAcCaPU
5n2GvXPHIe9LPLRqhdZICwfoJx4tl1kMnmWuNjhCmSXbAUo7s7cAqoYWPTAPuh1S
sMjEGOhH5cAq8ZH6JKicj215xZxoEUTiT7Q+zp3ViVOXrhWv/R7FT1ar+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3iCDVGu7xIjlC4cf4q+yxN4rlHMB8GA1UdIwQY
MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt
MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi
LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBqoI1R3
2wg1wo/0a13YYm1jMTMECJaApVaQyq+y2JqWBLnzZqfG2CScpkyE4CDpyEBSROYM
mzsDXqUSdBLCNDfV8qq5moAe9m5ydmkspO9yQJcD8LWkrQek9KUO8BBzgZ3FYj9P
KgWUeZLShCDgnynECV1qYsn/pA+HCIDqbOx10C4yY+rwtQksp9teSiSM3phTwU0B
3M/O8MKX1upMEo4XvS8Itu5vFrUPtCB49/9GWw7gfId4aPScAotE2h2steWflDpD
Oc6kwaaBWtj6dVOohXCHnUKvGft/kb/Zh1lf93PA7rJLOAPmP8EaY4E80eHn0lum
ICeIeio0k1EndQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:51 2026 by rpki-client