Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: bMNoDMuyjlljQqELoD9zYoS3PuqwgdkqXF63+I8ev6g=
Subject key identifier: D9:CD:B8:87:31:55:DB:F2:68:74:6F:48:82:DF:77:75:A7:05:51:7C
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019D2A04F744740767D000980BFE5A7601E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 1278
Signing time: Thu 26 Mar 2026 12:01:01 +0000
Manifest this update: Thu 26 Mar 2026 12:01:01 +0000
Manifest next update: Fri 27 Mar 2026 12:01:01 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: 4fCuKFuGvGKf+6/CW7r0lSFk1KwEADA13/u7WvbwEyw=)
2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f7:44:74:07:67:d0:00:98:0b:fe:5a:76:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Mar 26 12:01:01 2026 GMT
Not After : Mar 27 12:01:01 2026 GMT
Subject: CN=d9cdb8873155dbf268746f4882df7775a705517c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:91:48:d3:a0:fa:98:78:4c:0d:36:86:c6:
c3:2e:de:18:7a:b1:96:0c:4c:65:85:c4:bf:72:b2:
2f:9a:f2:2d:46:3d:34:0c:6f:b8:4a:61:3a:54:d2:
21:5e:60:59:2e:c4:d6:ab:51:7b:c2:d9:cc:43:2e:
85:ee:fb:df:29:11:2b:cb:7e:7c:76:48:6d:2a:21:
68:0d:14:97:7a:97:8b:c4:8c:57:34:97:3a:43:85:
fa:55:7e:f1:b7:b0:2c:ea:ae:f6:76:d0:f9:50:a8:
00:1e:f4:5b:e5:ec:ad:0d:69:f3:a3:0d:16:60:eb:
3d:41:82:f9:9f:e3:ea:33:c1:33:e4:35:86:d7:9f:
1e:86:6a:c1:04:11:0e:f2:bf:d7:90:53:d5:92:07:
0a:33:49:3a:6e:9d:06:ad:02:b4:ad:c0:32:73:8e:
0d:70:aa:d5:c7:d9:80:fd:de:63:7b:5c:4d:9a:97:
15:62:a4:99:8f:e1:fe:2d:6a:ad:c8:fc:a3:9f:eb:
88:60:f2:ba:2e:00:2c:61:77:15:83:47:10:bc:b8:
d4:a6:e8:45:e9:0f:0a:f9:33:cb:39:d1:09:2b:be:
02:e1:66:d3:e6:ae:92:97:8c:b1:4a:d6:c3:36:e0:
c0:4e:c2:6f:ee:9c:9f:b4:f8:16:c7:17:8e:42:d0:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:B8:87:31:55:DB:F2:68:74:6F:48:82:DF:77:75:A7:05:51:7C
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:82:a8:3c:74:40:a5:2f:f2:c5:72:ad:f8:ac:9f:c0:62:f7:
88:a2:a6:24:30:5b:d3:95:7e:a6:de:85:5d:15:56:1a:53:c8:
43:86:fd:c5:26:80:0a:7d:99:ab:0d:8c:0e:8b:96:23:59:6f:
f1:17:5e:47:75:29:91:1a:66:6f:52:f8:80:bb:7d:48:1c:5d:
f2:44:83:b3:a2:6b:b3:68:3e:83:76:61:23:00:1c:40:4d:fb:
98:1e:8e:ba:85:30:2d:42:2e:b5:d5:2c:02:93:21:d9:74:1a:
f0:4b:41:38:24:ff:83:81:fd:db:c0:6a:f6:11:42:df:35:55:
76:fc:90:42:13:cc:f6:e2:b6:a0:85:b3:eb:e1:c8:39:de:2f:
9d:67:d6:b1:47:a5:4d:2c:9d:1b:12:bc:8a:4a:3e:64:f1:f4:
a6:da:26:c6:7b:86:f2:25:86:36:29:d3:a9:e5:6f:a3:42:95:
3b:45:97:c4:70:71:fd:dc:fc:e4:70:30:e4:6e:e5:c6:86:09:
ab:84:b1:3c:c4:28:21:48:21:e3:46:86:74:bc:f1:93:f7:85:
76:2b:ad:71:9c:55:9c:a0:63:34:d1:e7:cc:ea:3f:18:e2:f1:
b8:b5:82:7e:94:cb:c8:98:bd:d5:d8:5a:2e:2e:32:ac:32:aa:
f8:5c:b8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBPdEdAdn0ACYC/5adgHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi
NzJiZTUwHhcNMjYwMzI2MTIwMTAxWhcNMjYwMzI3MTIwMTAxWjAzMTEwLwYDVQQD
EyhkOWNkYjg4NzMxNTVkYmYyNjg3NDZmNDg4MmRmNzc3NWE3MDU1MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6yRSNOg+ph4TA02hsbDLt4YerGW
DExlhcS/crIvmvItRj00DG+4SmE6VNIhXmBZLsTWq1F7wtnMQy6F7vvfKREry358
dkhtKiFoDRSXepeLxIxXNJc6Q4X6VX7xt7As6q72dtD5UKgAHvRb5eytDWnzow0W
YOs9QYL5n+PqM8Ez5DWG158ehmrBBBEO8r/XkFPVkgcKM0k6bp0GrQK0rcAyc44N
cKrVx9mA/d5je1xNmpcVYqSZj+H+LWqtyPyjn+uIYPK6LgAsYXcVg0cQvLjUpuhF
6Q8K+TPLOdEJK74C4WbT5q6Sl4yxStbDNuDATsJv7pyftPgWxxeOQtDkUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnNuIcxVdvyaHRvSILfd3WnBVF8MB8GA1UdIwQY
MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct
YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm
LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuoKoPHRA
pS/yxXKt+KyfwGL3iKKmJDBb05V+pt6FXRVWGlPIQ4b9xSaACn2Zqw2MDouWI1lv
8RdeR3UpkRpmb1L4gLt9SBxd8kSDs6Jrs2g+g3ZhIwAcQE37mB6OuoUwLUIutdUs
ApMh2XQa8EtBOCT/g4H928Bq9hFC3zVVdvyQQhPM9uK2oIWz6+HIOd4vnWfWsUel
TSydGxK8iko+ZPH0ptomxnuG8iWGNinTqeVvo0KVO0WXxHBx/dz85HAw5G7lxoYJ
q4SxPMQoIUgh40aGdLzxk/eFdiutcZxVnKBjNNHnzOo/GOLxuLWCfpTLyJi91dha
Li4yrDKq+Fy4xQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:53 2026 by rpki-client