Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File: 8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier: 1uT27GeNpk7uZ04M7Qvjx5yn7RlgJ7qLjU/iIsFHWc0=
Subject key identifier: 10:D4:8E:9D:0C:3A:93:6E:3C:B5:39:CA:D9:15:F1:19:BD:5A:77:A3
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer: /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial: 019D284E5BE4D1EF75FC76E791D47EC72C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number: 01DD
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: Cau+AGRQf9pW+VyFU0mKJLRJnvSFcAWxI3GqdyNXNw0=)
2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5b:e4:d1:ef:75:fc:76:e7:91:d4:7e:c7:2c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=10d48e9d0c3a936e3cb539cad915f119bd5a77a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:a2:22:ec:c0:bc:fc:79:4b:a9:c0:cc:a9:
31:7f:9a:0b:63:8e:82:86:a4:1d:66:cb:be:98:5d:
6a:47:40:5c:38:d3:9d:da:3a:36:a8:44:86:80:24:
7f:ad:fd:2f:d4:d1:4b:f8:03:8f:ef:b4:45:35:38:
d4:d7:8c:84:6b:d1:05:77:85:5f:77:c9:72:af:4e:
8c:cd:8a:31:aa:bb:74:84:68:d1:4a:52:36:27:86:
c1:99:ef:b7:d3:41:b4:61:2b:93:83:32:25:50:fb:
d9:b8:69:91:4d:9b:c5:a4:9d:63:3a:77:42:17:72:
2b:e0:b9:5e:23:8d:08:7a:4e:ce:5e:33:be:0d:3d:
82:91:5d:57:d2:0d:08:72:ff:37:53:2f:77:c4:0e:
d3:4b:f8:3e:18:b3:2c:46:0d:31:fe:52:ee:d3:21:
e3:5e:a4:04:aa:24:0f:96:aa:0b:ff:12:94:ad:07:
94:f7:f5:97:dd:2e:72:cc:66:08:7a:43:52:ae:79:
64:b7:ea:cc:93:76:ee:c4:ba:71:c1:26:e5:f4:b7:
a8:16:cb:9b:86:c0:25:a7:15:96:9c:10:d7:41:0c:
05:74:e8:01:5a:7e:df:cd:85:a6:ef:8b:68:9c:5f:
bd:32:61:be:82:2a:4f:d6:c9:db:cf:77:82:4d:15:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:8E:9D:0C:3A:93:6E:3C:B5:39:CA:D9:15:F1:19:BD:5A:77:A3
X509v3 Authority Key Identifier:
keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:22:22:a8:df:27:71:1b:15:60:b1:85:03:b4:30:97:ca:
92:01:86:25:84:a3:bb:13:66:5a:bb:07:a4:ef:21:31:44:13:
74:ff:2e:10:d6:d4:4b:5d:34:c2:84:0b:c6:b7:79:0a:2c:5a:
91:f0:e3:39:ed:0f:f0:4b:f2:bc:c1:11:0c:24:78:8b:bd:02:
b1:8c:32:c3:4d:89:7d:a7:a3:5e:37:34:3d:64:d2:a0:83:80:
2c:91:5b:77:02:54:fb:95:0c:cc:c1:8c:be:35:89:35:dc:3b:
15:67:f0:51:f4:c4:22:05:b6:05:54:64:78:b9:12:1d:76:6e:
fa:ae:ae:73:41:b8:53:1b:60:b4:e2:63:ea:b9:fe:15:d8:18:
f2:9e:f0:1f:c6:72:b9:b0:01:b6:c8:d2:e1:a5:1e:d1:1c:28:
25:08:9a:86:a4:65:f2:1b:4b:34:87:cf:43:1c:06:31:0b:db:
61:3b:5f:05:a5:a5:d0:3c:ca:09:13:2f:b2:cc:58:60:cf:f7:
be:f3:3e:86:56:60:70:6d:3c:3f:a1:20:a9:65:c2:2a:a0:b9:
e7:3e:7c:65:45:1b:71:08:bd:df:e1:56:a5:28:ac:5a:4e:6d:
ff:a8:1b:53:63:06:16:ca:af:e8:10:7c:9b:f1:37:a3:76:9f:
dd:9e:9b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlvk0e91/HbnkdR+xyxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNGI5ZjRhN2MwY2ViYjFmOTdmYTI0MDNiNjMxZWU2ZDE2
ZWM2MzMwHhcNMjYwMzI2MDQwMTU3WhcNMjYwMzI3MDQwMTU3WjAzMTEwLwYDVQQD
EygxMGQ0OGU5ZDBjM2E5MzZlM2NiNTM5Y2FkOTE1ZjExOWJkNWE3N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowKiIuzAvPx5S6nAzKkxf5oLY46C
hqQdZsu+mF1qR0BcONOd2jo2qESGgCR/rf0v1NFL+AOP77RFNTjU14yEa9EFd4Vf
d8lyr06MzYoxqrt0hGjRSlI2J4bBme+300G0YSuTgzIlUPvZuGmRTZvFpJ1jOndC
F3Ir4LleI40Iek7OXjO+DT2CkV1X0g0Icv83Uy93xA7TS/g+GLMsRg0x/lLu0yHj
XqQEqiQPlqoL/xKUrQeU9/WX3S5yzGYIekNSrnlkt+rMk3buxLpxwSbl9LeoFsub
hsAlpxWWnBDXQQwFdOgBWn7fzYWm74tonF+9MmG+gipP1snbz3eCTRX+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDUjp0MOpNuPLU5ytkV8Rm9WnejMB8GA1UdIwQY
MBaAFPJLn0p8DOux+X+iQDtjHubRbsYzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzkt
OWM4ZWFiNzZkYTk4LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zZGUyMDgtMzQ3ZS00NmQ3LTljYzktOWM4ZWFiNzZkYTk4
LzEvOGt1ZlNud002N0g1ZjZKQU8yTWU1dEZ1eGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwEiIqjf
J3EbFWCxhQO0MJfKkgGGJYSjuxNmWrsHpO8hMUQTdP8uENbUS100woQLxrd5Cixa
kfDjOe0P8EvyvMERDCR4i70CsYwyw02JfaejXjc0PWTSoIOALJFbdwJU+5UMzMGM
vjWJNdw7FWfwUfTEIgW2BVRkeLkSHXZu+q6uc0G4UxtgtOJj6rn+FdgY8p7wH8Zy
ubABtsjS4aUe0RwoJQiahqRl8htLNIfPQxwGMQvbYTtfBaWl0DzKCRMvssxYYM/3
vvM+hlZgcG08P6EgqWXCKqC55z58ZUUbcQi93+FWpSisWk5t/6gbU2MGFsqv6BB8
m/E3o3af3Z6bpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:44:45 2026 by rpki-client