Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: JxM2lUMjSPxaptcVp8v0ApDc3x7WG29ZdP/bxS3Sru0=
Subject key identifier: 12:2A:A9:9B:A0:BF:40:01:63:00:38:85:FB:AE:43:1F:98:AA:81:F3
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019D2A3B6C163608B965BA053D353EAB40EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1309
Signing time: Thu 26 Mar 2026 13:00:30 +0000
Manifest this update: Thu 26 Mar 2026 13:00:30 +0000
Manifest next update: Fri 27 Mar 2026 13:00:30 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: ql3vBWxiD/pev9ChfSnXnXSdHZHMMLgtFKvn2HSyzCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:6c:16:36:08:b9:65:ba:05:3d:35:3e:ab:40:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Mar 26 13:00:30 2026 GMT
Not After : Mar 27 13:00:30 2026 GMT
Subject: CN=122aa99ba0bf400163003885fbae431f98aa81f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:a2:ab:e5:5d:94:80:31:ea:3e:57:8f:a3:
f7:bb:4b:f7:ee:a8:dd:73:7d:76:fd:69:75:e6:62:
b4:25:2b:38:05:af:6b:9a:6c:bc:69:57:c0:f4:eb:
f6:31:49:9b:9c:a0:a1:66:d6:64:55:fd:7b:38:1c:
0e:99:9b:36:99:14:0b:04:48:fe:43:84:7e:71:2a:
ab:95:2d:e4:8e:f5:be:29:29:f6:6c:45:0d:33:c4:
41:84:33:78:e1:e2:24:25:37:2b:a8:bc:0f:28:2e:
f4:6e:e6:d4:7e:cd:d9:06:f1:9f:45:dd:0e:23:ed:
46:0d:50:36:09:9c:54:7c:5c:02:9e:f7:68:cf:ad:
24:58:3f:b1:e9:4a:30:a0:d7:15:69:24:de:7e:bb:
d4:55:cd:7c:9b:93:bd:1c:98:b3:cf:d6:9f:e3:64:
78:2b:98:79:41:36:d8:f7:7e:b1:3e:ae:8b:27:e1:
0f:0a:16:66:94:26:56:11:fd:83:9c:96:72:b4:2b:
69:97:71:8c:6e:d9:c1:66:10:91:f1:d7:7b:8b:28:
97:f6:f8:6f:f4:84:8e:71:6e:95:22:83:80:b2:8c:
0b:cb:f2:d3:3d:6c:c7:f0:10:27:8f:45:90:d8:5f:
3e:8d:92:88:aa:1b:da:3c:cc:c7:03:bb:97:c8:10:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:A9:9B:A0:BF:40:01:63:00:38:85:FB:AE:43:1F:98:AA:81:F3
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:aa:6f:66:e2:e0:f1:b8:7c:dc:0e:35:34:ca:97:76:6b:
eb:15:86:fd:82:1f:6b:8d:5d:5b:89:4f:c3:51:2b:a0:4e:fe:
d3:b8:89:44:c3:da:aa:2c:3a:96:d8:fa:d3:e0:63:86:69:9a:
7b:33:8c:9d:0f:b4:19:9c:06:7d:31:fc:23:5f:1a:a8:1b:04:
21:3d:5f:61:f9:e7:8c:8a:ac:41:79:5e:fe:fa:08:d8:54:6f:
2a:ff:9f:6c:2a:15:94:9f:20:87:22:74:32:da:03:4b:59:7d:
dd:24:81:d8:fb:11:ea:d1:19:9d:a6:6a:66:1e:68:80:e8:37:
a5:9f:1e:f4:de:60:64:4d:c2:27:7e:1c:2f:ee:09:02:88:82:
c3:0e:33:6e:18:96:3e:00:90:aa:02:70:2e:18:25:14:5f:89:
f3:f0:2a:6a:53:f6:6f:32:82:83:72:89:b0:ac:5b:b6:c3:c5:
4d:f0:a3:33:d8:22:ac:84:bc:f7:c1:6a:da:31:4e:3d:b6:8d:
21:62:04:b2:67:13:c9:92:e8:0d:9f:87:f2:1d:40:8d:e7:0a:
06:a5:ad:47:2c:d9:d2:0e:89:74:84:a5:64:43:08:af:9d:82:
86:32:44:be:08:4b:45:8f:79:62:87:a0:11:12:06:be:e6:04:
70:c3:ce:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO2wWNgi5ZboFPTU+q0DrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTg1MTY3MDRmNTc0OTI4MzViOTRkMDA3MDI3MzI4YzIy
ZmE0MGUwHhcNMjYwMzI2MTMwMDMwWhcNMjYwMzI3MTMwMDMwWjAzMTEwLwYDVQQD
EygxMjJhYTk5YmEwYmY0MDAxNjMwMDM4ODVmYmFlNDMxZjk4YWE4MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp6iq+VdlIAx6j5Xj6P3u0v37qjd
c312/Wl15mK0JSs4Ba9rmmy8aVfA9Ov2MUmbnKChZtZkVf17OBwOmZs2mRQLBEj+
Q4R+cSqrlS3kjvW+KSn2bEUNM8RBhDN44eIkJTcrqLwPKC70bubUfs3ZBvGfRd0O
I+1GDVA2CZxUfFwCnvdoz60kWD+x6UowoNcVaSTefrvUVc18m5O9HJizz9af42R4
K5h5QTbY936xPq6LJ+EPChZmlCZWEf2DnJZytCtpl3GMbtnBZhCR8dd7iyiX9vhv
9ISOcW6VIoOAsowLy/LTPWzH8BAnj0WQ2F8+jZKIqhvaPMzHA7uXyBCokwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIqqZugv0ABYwA4hfuuQx+YqoHzMB8GA1UdIwQY
MBaAFPKoUWcE9XSSg1uU0AcCcyjCL6QOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODkt
N2Q0ZDk0MWEzN2QxLzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODktN2Q0ZDk0MWEzN2Qx
LzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdiqb2bi
4PG4fNwONTTKl3Zr6xWG/YIfa41dW4lPw1EroE7+07iJRMPaqiw6ltj60+Bjhmma
ezOMnQ+0GZwGfTH8I18aqBsEIT1fYfnnjIqsQXle/voI2FRvKv+fbCoVlJ8ghyJ0
MtoDS1l93SSB2PsR6tEZnaZqZh5ogOg3pZ8e9N5gZE3CJ34cL+4JAoiCww4zbhiW
PgCQqgJwLhglFF+J8/AqalP2bzKCg3KJsKxbtsPFTfCjM9girIS898Fq2jFOPbaN
IWIEsmcTyZLoDZ+H8h1AjecKBqWtRyzZ0g6JdISlZEMIr52ChjJEvghLRY95Yoeg
ERIGvuYEcMPOGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:35 2026 by rpki-client