Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: XqNjj/giE1GPTRdQcJxP8FETShBZ03gr+3GgdmEsJOk=
Subject key identifier: 8D:FF:37:22:6A:79:22:BF:51:28:0B:58:37:85:99:FD:EE:54:64:DA
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019D27044E94923A0EDC9DE7405F8462CDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 15C0
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: Z3eMocNcX2Yod7ta03nAeTTtcb5vskSjXqrrMbKEv2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4e:94:92:3a:0e:dc:9d:e7:40:5f:84:62:cd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=8dff37226a7922bf51280b58378599fdee5464da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:f3:c6:a3:5f:6e:c5:3e:27:57:89:64:3e:
f6:8d:77:b3:37:21:f9:be:77:d0:a4:25:96:8b:54:
2c:3b:28:20:0b:09:38:56:6c:e5:72:14:27:ef:69:
40:50:90:74:cc:c9:aa:af:64:64:1f:3a:1f:88:9e:
bc:33:7d:31:65:f0:a6:00:c3:e7:e5:f4:9a:7b:20:
e7:55:43:40:79:81:cf:ae:3e:e1:48:2a:65:f7:16:
35:1c:27:73:1e:6c:1d:b9:22:48:fa:ff:99:29:51:
b6:4a:0a:f6:74:db:29:c4:43:c9:f0:7b:87:9f:21:
2b:d7:b1:4c:c1:e2:2b:0d:0e:e6:25:a9:22:8a:c7:
0a:df:4e:b7:fb:6d:46:5e:73:cc:6d:f8:78:fe:5c:
28:11:63:62:bf:14:35:4e:fb:41:34:d3:98:6f:b6:
6a:0d:b5:76:6e:75:e8:59:f1:04:05:cb:39:e1:57:
e0:e1:d6:48:f7:38:a8:db:52:7f:7f:c6:06:61:e9:
75:b1:75:92:fa:61:02:78:da:f2:fe:aa:fb:c3:94:
3c:a2:52:1e:b5:9c:be:d8:d3:9e:07:2a:4f:12:47:
53:7d:1b:fc:68:d6:f5:b3:15:35:4f:e1:51:d0:5b:
9a:93:3b:f7:39:cb:31:95:fa:35:e3:3c:6c:78:c8:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FF:37:22:6A:79:22:BF:51:28:0B:58:37:85:99:FD:EE:54:64:DA
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c5:20:d6:fd:96:75:99:31:58:14:1e:c0:75:81:72:0c:9f:
1e:08:ab:d4:dc:bb:0f:f4:25:aa:f3:e0:11:2d:d3:a4:57:18:
0b:61:8e:25:93:8c:66:5a:38:c2:8e:2f:71:ae:22:c1:97:0d:
6b:46:b0:d0:42:da:64:44:f7:d9:d6:2d:6d:3f:7e:33:83:44:
ef:f6:9c:0f:77:8f:6a:14:27:03:52:54:c2:71:21:66:bc:e0:
8f:9f:ec:a1:fd:2f:a1:80:ce:02:67:9b:12:2c:f7:e2:be:03:
28:0f:7d:bc:fa:4c:49:ce:dc:a1:e5:cf:fb:ad:a1:02:70:f9:
0b:27:46:75:de:7d:8f:97:08:9e:b3:54:aa:13:5b:ee:18:11:
17:64:55:60:06:4c:a2:1e:71:dc:34:5b:8b:6e:34:5a:07:61:
f9:78:7c:ab:e6:9a:d7:a9:9e:37:51:1b:0d:a8:74:7a:c4:65:
58:df:94:42:e7:ef:bc:e2:50:90:75:3a:36:b4:29:c9:06:f8:
54:27:75:af:14:c1:c7:11:41:77:e6:a7:6d:a7:07:66:87:b7:
84:66:7d:37:a1:ca:aa:5e:e5:79:1e:3c:0d:2d:80:e7:1a:4f:
dd:0d:4b:ed:f3:fd:08:47:83:9b:00:dc:7b:d0:e7:68:c3:5a:
95:54:ab:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBE6UkjoO3J3nQF+EYs2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjYwMzI1MjIwMTI2WhcNMjYwMzI2MjIwMTI2WjAzMTEwLwYDVQQD
Eyg4ZGZmMzcyMjZhNzkyMmJmNTEyODBiNTgzNzg1OTlmZGVlNTQ2NGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsizzxqNfbsU+J1eJZD72jXezNyH5
vnfQpCWWi1QsOyggCwk4VmzlchQn72lAUJB0zMmqr2RkHzofiJ68M30xZfCmAMPn
5fSaeyDnVUNAeYHPrj7hSCpl9xY1HCdzHmwduSJI+v+ZKVG2Sgr2dNspxEPJ8HuH
nyEr17FMweIrDQ7mJakiiscK3063+21GXnPMbfh4/lwoEWNivxQ1TvtBNNOYb7Zq
DbV2bnXoWfEEBcs54Vfg4dZI9zio21J/f8YGYel1sXWS+mECeNry/qr7w5Q8olIe
tZy+2NOeBypPEkdTfRv8aNb1sxU1T+FR0Fuakzv3Ocsxlfo14zxseMhhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3/NyJqeSK/USgLWDeFmf3uVGTaMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesUg1v2W
dZkxWBQewHWBcgyfHgir1Ny7D/QlqvPgES3TpFcYC2GOJZOMZlo4wo4vca4iwZcN
a0aw0ELaZET32dYtbT9+M4NE7/acD3ePahQnA1JUwnEhZrzgj5/sof0voYDOAmeb
Eiz34r4DKA99vPpMSc7coeXP+62hAnD5CydGdd59j5cInrNUqhNb7hgRF2RVYAZM
oh5x3DRbi240Wgdh+Xh8q+aa16meN1EbDah0esRlWN+UQufvvOJQkHU6NrQpyQb4
VCd1rxTBxxFBd+anbacHZoe3hGZ9N6HKql7leR48DS2A5xpP3Q1L7fP9CEeDmwDc
e9DnaMNalVSrPQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:20 2026 by rpki-client