Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File: 8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier: d3rtqSJlrvghT+lQ3IQWDSwnJuw/sHsR4A4WYs0qOSA=
Subject key identifier: F3:7E:AF:A9:1D:9E:C8:04:96:DA:E6:A2:76:17:F6:AB:42:63:C3:3A
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial: 019D270453DB5ABB70B0798A386AD97BF6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number: 0A86
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: ZOz8Ji7UmBz2P+5smqiicKIqQW+rxiSkQINiCMAwkig=)
2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:53:db:5a:bb:70:b0:79:8a:38:6a:d9:7b:f6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=f37eafa91d9ec80496dae6a27617f6ab4263c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:99:fa:c6:ea:42:48:af:2e:51:8c:c2:45:
e9:fe:f3:f6:7a:3b:25:c2:0b:0f:b2:1e:b1:8e:7b:
cc:98:a8:97:ae:b0:4f:b9:54:96:53:cf:bc:9a:e4:
b7:38:4a:20:36:5c:4c:a6:db:61:f2:50:b0:34:a0:
81:01:8b:0d:38:ec:5c:49:bc:da:e5:3a:d9:9c:9a:
1c:b7:5a:cb:72:44:cb:30:d3:a2:5e:ff:7f:34:42:
0d:09:f1:75:92:2e:b0:e0:5c:c6:9a:cb:cc:4d:b5:
68:69:ff:29:7a:04:9d:0a:8c:77:77:cf:45:5e:3d:
fc:18:d1:8b:b3:9d:88:04:4a:66:52:f2:bc:16:2d:
1d:18:72:e6:d3:b7:08:07:c7:ee:a9:e5:23:3a:64:
33:3c:68:6b:3f:e4:db:bb:d8:80:4e:32:d1:0d:e1:
ef:9f:d7:dc:4c:08:3f:5d:29:32:90:6b:db:ee:ad:
db:29:b7:43:37:5f:2a:ef:e4:b2:d5:2c:12:9f:48:
de:94:d6:14:8e:1c:3f:4c:f0:d4:53:41:cf:26:f1:
20:e7:4c:9e:cd:f1:dc:f7:84:49:8f:fc:1b:7f:96:
c3:06:90:36:c6:c7:a9:4e:da:22:a5:fc:8f:b1:e1:
45:d1:92:65:66:3d:5b:ed:9d:b2:ca:b9:65:4d:27:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:AF:A9:1D:9E:C8:04:96:DA:E6:A2:76:17:F6:AB:42:63:C3:3A
X509v3 Authority Key Identifier:
keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1e:1d:b6:f6:93:b1:b5:9d:ca:9b:05:c4:21:9b:0e:14:3a:
c8:dc:1f:b6:bf:41:b0:54:22:23:e6:0d:71:96:4c:5f:1d:51:
03:13:8c:84:bc:9d:40:ed:7c:82:dc:36:1f:1e:74:c4:47:ff:
5d:9d:78:21:e7:a1:5c:d1:ac:dd:90:b0:89:71:8c:a7:aa:5c:
cf:5b:fb:ac:f0:70:2e:03:6f:3a:b4:0d:d8:7d:30:e5:3e:2c:
5d:c7:b0:6a:4f:79:94:c6:7c:e6:e0:f3:67:f2:9f:76:ba:92:
97:b4:4d:07:47:cd:9d:e7:05:da:9e:62:b2:60:ab:c7:2f:8f:
68:4f:98:47:4c:c2:e0:d1:9e:1b:50:4a:1d:82:64:c0:f2:44:
06:7a:3b:bd:f8:45:3c:34:2e:aa:a6:66:3a:1b:44:68:8d:6f:
09:1f:1f:cb:ca:52:99:6f:cc:62:e5:bb:75:22:d2:53:a4:a9:
ea:42:b3:2c:0d:82:0e:85:33:de:4e:6f:49:f6:58:ab:17:fa:
e1:a3:af:07:2a:51:44:85:0a:3b:c7:01:f7:f4:f1:83:4f:21:
50:0e:60:a8:35:ec:3c:9d:ca:ca:57:8f:57:aa:30:d2:1f:25:
3b:8a:f8:1f:2a:c6:65:b3:d7:d0:e2:b3:94:dc:45:fd:e9:b5:
22:6b:83:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFPbWrtwsHmKOGrZe/bAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi
YTcwZDUwHhcNMjYwMzI1MjIwMTI4WhcNMjYwMzI2MjIwMTI4WjAzMTEwLwYDVQQD
EyhmMzdlYWZhOTFkOWVjODA0OTZkYWU2YTI3NjE3ZjZhYjQyNjNjMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1SZ+sbqQkivLlGMwkXp/vP2ejsl
wgsPsh6xjnvMmKiXrrBPuVSWU8+8muS3OEogNlxMptth8lCwNKCBAYsNOOxcSbza
5TrZnJoct1rLckTLMNOiXv9/NEINCfF1ki6w4FzGmsvMTbVoaf8pegSdCox3d89F
Xj38GNGLs52IBEpmUvK8Fi0dGHLm07cIB8fuqeUjOmQzPGhrP+Tbu9iATjLRDeHv
n9fcTAg/XSkykGvb7q3bKbdDN18q7+Sy1SwSn0jelNYUjhw/TPDUU0HPJvEg50ye
zfHc94RJj/wbf5bDBpA2xsepTtoipfyPseFF0ZJlZj1b7Z2yyrllTSflpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN+r6kdnsgEltrmonYX9qtCY8M6MB8GA1UdIwQY
MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt
MmYwODM4MGFlNmM3LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3
LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB4dtvaT
sbWdypsFxCGbDhQ6yNwftr9BsFQiI+YNcZZMXx1RAxOMhLydQO18gtw2Hx50xEf/
XZ14IeehXNGs3ZCwiXGMp6pcz1v7rPBwLgNvOrQN2H0w5T4sXcewak95lMZ85uDz
Z/KfdrqSl7RNB0fNnecF2p5ismCrxy+PaE+YR0zC4NGeG1BKHYJkwPJEBno7vfhF
PDQuqqZmOhtEaI1vCR8fy8pSmW/MYuW7dSLSU6Sp6kKzLA2CDoUz3k5vSfZYqxf6
4aOvBypRRIUKO8cB9/Txg08hUA5gqDXsPJ3KylePV6ow0h8lO4r4HyrGZbPX0OKz
lNxF/em1ImuD/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:01 2026 by rpki-client