Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: 7XOxyx3/Dd3CV6vLfrhYlqnYNHAOnKGCccorWu/7f78=
Subject key identifier: 96:B7:B1:A1:4B:FB:02:6D:56:85:B6:BD:28:33:E8:C3:B0:EE:4D:86
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 019D25F23B8ACA89E360019EE5426CBFC2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0590
Signing time: Wed 25 Mar 2026 17:02:05 +0000
Manifest this update: Wed 25 Mar 2026 17:02:05 +0000
Manifest next update: Thu 26 Mar 2026 17:02:05 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: 19UbWMl2gb5xVPqUFMnYpOQe2c+hKmJceekNcVDBlQo=)
2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:3b:8a:ca:89:e3:60:01:9e:e5:42:6c:bf:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Mar 25 17:02:05 2026 GMT
Not After : Mar 26 17:02:05 2026 GMT
Subject: CN=96b7b1a14bfb026d5685b6bd2833e8c3b0ee4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:e7:84:e4:d8:d7:21:da:06:66:80:13:01:
98:ed:63:10:90:b3:4e:fd:a9:d9:cd:11:d2:ff:23:
54:d5:ac:1d:e9:42:fe:c3:45:39:ba:2a:1f:92:89:
fb:b2:3f:31:5a:c5:f5:b8:35:18:12:2d:e2:6c:dd:
7c:62:f1:40:d5:ba:00:90:b3:13:c3:e7:48:cc:d1:
0c:54:82:c7:6c:76:8d:03:7a:46:bb:c7:8f:fe:3f:
60:3d:1b:a3:33:75:23:74:13:f7:09:3a:9b:3f:c1:
6b:4a:b7:29:47:a3:04:13:aa:1d:44:8d:5b:0d:8c:
51:d3:5b:df:40:11:fe:d8:ff:9e:f8:38:d7:63:46:
3b:40:d1:b0:2c:60:03:e0:3b:ba:ed:29:4a:d4:91:
dc:d9:87:92:b6:bc:0f:21:2c:96:8d:8e:ab:cb:bd:
fb:85:7e:02:6f:93:bc:b3:70:fe:8f:e1:f6:26:0e:
3e:2d:7e:5d:50:f8:85:06:34:aa:e2:33:4d:26:f8:
b4:9f:d1:1f:d8:9d:95:40:f2:cb:ac:69:67:c7:ef:
bb:0b:83:47:ef:3c:de:2d:5b:5f:b9:1d:fb:8a:3b:
7c:26:fd:0a:22:08:3e:c9:bc:92:57:9b:d7:fd:bb:
85:5a:63:92:e3:d9:f3:e4:b2:cf:a1:14:ec:6f:63:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:B1:A1:4B:FB:02:6D:56:85:B6:BD:28:33:E8:C3:B0:EE:4D:86
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5b:c0:5c:16:ba:05:a7:8e:0d:6f:06:77:26:b1:75:fd:dd:
62:44:56:14:ce:23:7d:a2:e9:55:b9:57:ba:29:67:af:c6:64:
e2:5b:57:19:7c:eb:7d:c4:76:be:e9:b0:fd:e1:02:4f:c4:1d:
2e:3d:53:2c:bb:34:d0:31:81:01:16:03:b4:90:43:86:40:71:
50:a4:ed:13:5f:c0:26:13:54:05:3f:69:9b:a3:83:b1:16:11:
99:ba:f9:c3:e9:6e:74:fa:34:9c:42:dd:4d:4f:9e:57:c8:0b:
5e:da:0e:6f:db:4a:c8:12:83:a6:bc:92:92:63:f2:d9:a4:f6:
15:62:12:b5:1a:b4:86:67:d8:0f:fa:7e:b7:94:44:66:10:71:
04:0e:af:ae:f3:af:09:d9:ed:49:85:19:44:3d:56:a1:2c:83:
b5:6b:bc:43:fa:19:82:53:ed:fe:6a:96:9e:50:ba:30:80:b8:
a0:71:7d:88:d2:b9:3d:95:3b:1e:fa:4a:10:35:a3:9d:ce:76:
cd:bd:e3:34:2d:0f:34:57:5c:8d:bc:7d:aa:a7:74:ba:a9:a1:
b3:71:61:f0:23:a3:a7:c5:bb:27:b5:29:4f:96:d5:d6:6e:a8:
39:b4:05:f5:fc:f8:88:33:9d:48:7e:ec:60:1e:0b:03:67:40:
86:1e:e3:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8juKyonjYAGe5UJsv8LLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh
YmNhZjEwHhcNMjYwMzI1MTcwMjA1WhcNMjYwMzI2MTcwMjA1WjAzMTEwLwYDVQQD
Eyg5NmI3YjFhMTRiZmIwMjZkNTY4NWI2YmQyODMzZThjM2IwZWU0ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8XnhOTY1yHaBmaAEwGY7WMQkLNO
/anZzRHS/yNU1awd6UL+w0U5uiofkon7sj8xWsX1uDUYEi3ibN18YvFA1boAkLMT
w+dIzNEMVILHbHaNA3pGu8eP/j9gPRujM3UjdBP3CTqbP8FrSrcpR6MEE6odRI1b
DYxR01vfQBH+2P+e+DjXY0Y7QNGwLGAD4Du67SlK1JHc2YeStrwPISyWjY6ry737
hX4Cb5O8s3D+j+H2Jg4+LX5dUPiFBjSq4jNNJvi0n9Ef2J2VQPLLrGlnx++7C4NH
7zzeLVtfuR37ijt8Jv0KIgg+ybySV5vX/buFWmOS49nz5LLPoRTsb2NGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa3saFL+wJtVoW2vSgz6MOw7k2GMB8GA1UdIwQY
MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt
NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh
LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1vAXBa6
BaeODW8Gdyaxdf3dYkRWFM4jfaLpVblXuilnr8Zk4ltXGXzrfcR2vumw/eECT8Qd
Lj1TLLs00DGBARYDtJBDhkBxUKTtE1/AJhNUBT9pm6ODsRYRmbr5w+ludPo0nELd
TU+eV8gLXtoOb9tKyBKDprySkmPy2aT2FWIStRq0hmfYD/p+t5REZhBxBA6vrvOv
CdntSYUZRD1WoSyDtWu8Q/oZglPt/mqWnlC6MIC4oHF9iNK5PZU7HvpKEDWjnc52
zb3jNC0PNFdcjbx9qqd0uqmhs3Fh8COjp8W7J7UpT5bV1m6oObQF9fz4iDOdSH7s
YB4LA2dAhh7jMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:05 2026 by rpki-client