Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: VKbPrMFufNleJIR2sP+j7QEZ2nD6GFZD079xHbQ8Hxc=
Subject key identifier: CA:1E:94:E0:EB:D4:E4:1A:C0:FF:69:66:EB:68:93:E1:C4:28:3C:D7
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019D29615AFFA6A954D1661539F4FBFEC300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: bHsYrKh7DhcK6vEex8LsmiSlq40PEbULfZT5Hw5+h0w=)
2: ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (hash: iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5a:ff:a6:a9:54:d1:66:15:39:f4:fb:fe:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=ca1e94e0ebd4e41ac0ff6966eb6893e1c4283cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:ba:4b:06:72:c0:53:5e:45:03:fc:74:22:
56:52:76:c8:74:aa:1a:5a:66:9d:d8:0b:2d:89:19:
5a:d8:f7:2c:80:e3:f0:44:07:38:82:fc:b1:2c:90:
c3:1d:d4:23:ca:c6:b7:a3:18:e5:c7:df:7f:74:b2:
7f:11:c9:3b:fe:79:72:63:20:85:80:d9:f1:45:b6:
7c:21:a8:37:51:15:2c:dd:9e:93:32:bd:61:eb:ce:
4d:84:24:d1:6e:1f:cd:81:6f:a1:38:23:3a:43:93:
e2:24:9d:d6:03:f1:ff:0b:72:b2:14:a7:1e:67:dc:
fa:e5:b4:bc:9e:ca:73:c2:ba:24:32:84:38:8f:ed:
cb:cf:6d:3b:a5:92:fb:2b:47:51:ff:1a:b0:59:6e:
12:2a:7b:d6:a2:39:15:70:56:c4:d8:3e:6f:b7:94:
06:b5:59:24:c9:78:de:51:b2:e8:ae:70:9d:3c:53:
09:37:c6:c6:e8:c0:d3:2b:51:35:6b:b4:1b:b2:5b:
1b:61:4d:6c:51:64:f8:41:71:1c:35:d1:19:6c:f9:
9e:62:6c:ad:d0:09:05:e3:ce:fd:f0:6e:a0:c5:51:
51:f8:29:ac:02:79:41:70:4d:e9:2f:cf:8a:33:26:
90:05:97:c2:8e:9e:aa:11:ec:86:34:63:f5:38:b3:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:94:E0:EB:D4:E4:1A:C0:FF:69:66:EB:68:93:E1:C4:28:3C:D7
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d9:88:45:cb:1a:10:1b:5b:ec:9f:60:a2:7b:6a:db:21:ae:
b1:21:17:b6:23:81:8e:ac:1f:7b:1e:c8:4a:37:ff:8f:66:98:
dc:f9:f2:76:4b:f5:c2:9b:4e:18:04:a0:a0:76:32:dc:be:61:
98:fd:c1:12:18:ac:59:e2:67:cb:bc:ef:c1:84:7a:18:40:2f:
7b:a9:ac:32:4b:8f:cd:72:c8:f2:f2:79:fd:b0:a6:c2:86:9b:
58:75:b5:34:be:3c:70:6f:46:b7:2d:bd:67:f5:67:4f:30:d9:
d4:32:65:61:48:42:63:09:c4:96:b4:88:53:73:2c:23:e3:ea:
2c:a3:1d:4e:4d:88:0a:6f:10:37:c1:03:fb:98:6d:1e:54:63:
54:4f:48:b2:8e:0e:7c:59:69:11:f4:41:b5:f8:4e:1d:87:d7:
36:7c:7e:8b:23:fd:33:ce:b6:95:af:64:68:81:41:12:d6:1d:
f5:4b:33:81:81:2f:83:32:b5:71:0a:51:03:d8:ec:e1:8b:46:
5d:95:35:08:43:45:ae:22:e4:8c:7f:6d:5e:e9:67:42:09:73:
38:35:d2:a3:96:88:35:ac:2d:d9:b7:c6:59:8c:58:4f:11:7c:
03:2a:5e:39:4e:e6:58:e8:d5:9d:f7:f2:8f:8f:29:b5:ec:7f:
89:b3:d8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYVr/pqlU0WYVOfT7/sMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzFmOWFlNGQxODQ3ZDQ5ZDRkOGZkYWUzNDU3YjVhMTcy
NTY3MDcwHhcNMjYwMzI2MDkwMjE5WhcNMjYwMzI3MDkwMjE5WjAzMTEwLwYDVQQD
EyhjYTFlOTRlMGViZDRlNDFhYzBmZjY5NjZlYjY4OTNlMWM0MjgzY2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0G6SwZywFNeRQP8dCJWUnbIdKoa
Wmad2AstiRla2PcsgOPwRAc4gvyxLJDDHdQjysa3oxjlx99/dLJ/Eck7/nlyYyCF
gNnxRbZ8Iag3URUs3Z6TMr1h685NhCTRbh/NgW+hOCM6Q5PiJJ3WA/H/C3KyFKce
Z9z65bS8nspzwrokMoQ4j+3Lz207pZL7K0dR/xqwWW4SKnvWojkVcFbE2D5vt5QG
tVkkyXjeUbLornCdPFMJN8bG6MDTK1E1a7QbslsbYU1sUWT4QXEcNdEZbPmeYmyt
0AkF48798G6gxVFR+CmsAnlBcE3pL8+KMyaQBZfCjp6qEeyGNGP1OLMDsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoelODr1OQawP9pZutok+HEKDzXMB8GA1UdIwQY
MBaAFPHB+a5NGEfUnU2P2uNFe1oXJWcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUt
MjU4MWIzZGI3OGNiLzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUtMjU4MWIzZGI3OGNi
LzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt9mIRcsa
EBtb7J9gontq2yGusSEXtiOBjqwfex7ISjf/j2aY3Pnydkv1wptOGASgoHYy3L5h
mP3BEhisWeJny7zvwYR6GEAve6msMkuPzXLI8vJ5/bCmwoabWHW1NL48cG9Gty29
Z/VnTzDZ1DJlYUhCYwnElrSIU3MsI+PqLKMdTk2ICm8QN8ED+5htHlRjVE9Iso4O
fFlpEfRBtfhOHYfXNnx+iyP9M862la9kaIFBEtYd9UszgYEvgzK1cQpRA9js4YtG
XZU1CENFriLkjH9tXulnQglzODXSo5aINawt2bfGWYxYTxF8AypeOU7mWOjVnffy
j48ptex/ibPY4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:22:17 2026 by rpki-client