Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: jW+Yadh33dl+C+oLNtDVXMRTYHaEtMgjjSFDDfSZ02s=
Subject key identifier: 09:BE:57:41:0E:7B:BD:8B:D8:A9:11:63:60:73:2B:C5:44:1F:C4:AD
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 019D26282D4B8C9E77DC733E7263D9B04FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:00 +0000
Manifest this update: Wed 25 Mar 2026 18:01:00 +0000
Manifest next update: Thu 26 Mar 2026 18:01:00 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: nCAqlYRaPbC3mQzxCItH4OhKhShr3ehRllWTRfrtLfY=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2d:4b:8c:9e:77:dc:73:3e:72:63:d9:b0:4f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Mar 25 18:01:00 2026 GMT
Not After : Mar 26 18:01:00 2026 GMT
Subject: CN=09be57410e7bbd8bd8a9116360732bc5441fc4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:d2:43:70:7c:cc:78:cd:0a:4c:85:fb:20:
cc:96:fe:e3:23:99:7e:57:c5:b3:8e:03:e6:67:d1:
cb:82:0f:99:a5:03:be:ef:af:b2:4e:6f:c5:20:81:
7e:02:e5:ce:f2:13:e1:e8:48:ae:81:c4:49:be:e9:
9d:d1:ae:bc:fd:47:bd:2e:25:51:51:21:dc:ea:b8:
e9:f4:73:c1:5e:0b:01:25:57:ba:9c:66:69:2a:00:
3a:fe:10:fe:2c:d2:7d:77:ac:42:50:b0:0d:58:94:
2a:3b:be:72:0d:a2:d9:cc:81:db:c7:30:b7:8d:54:
0b:44:84:db:95:62:f6:31:9c:fd:79:2a:a6:c4:db:
08:a2:80:b9:2b:e6:2b:5a:c8:ce:eb:28:8f:24:83:
97:8c:5a:16:25:f7:59:69:9c:e3:cc:24:1c:27:c0:
d0:7d:bf:94:1d:fa:7c:3f:2c:88:f0:ef:0a:e7:68:
27:ea:86:39:ac:d6:41:d9:87:ee:5f:a8:29:e9:d7:
29:16:a3:75:e1:d2:70:0d:a7:f0:f4:bb:67:a9:f8:
d3:92:1f:43:a2:e0:ff:7a:59:2c:3b:a1:f7:8d:9f:
65:a0:fb:7a:20:be:be:d9:dc:cc:eb:12:89:6d:d6:
ba:1a:f9:7d:13:5c:d7:19:23:6d:63:cb:00:8c:04:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:57:41:0E:7B:BD:8B:D8:A9:11:63:60:73:2B:C5:44:1F:C4:AD
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:05:62:75:93:cf:4c:86:eb:aa:76:5c:13:51:40:dd:31:9b:
cf:99:ea:60:8f:17:d0:86:3b:6a:92:6b:67:2a:19:fa:65:e4:
e2:6a:3e:86:04:6d:8f:d2:48:d1:3b:46:ca:b3:57:10:95:a3:
4e:80:57:c9:ed:12:0a:57:a0:1a:00:ff:7c:57:a6:68:d3:a9:
e3:26:16:12:d8:a5:24:20:35:39:95:18:7b:e2:98:40:60:98:
b3:81:29:3b:80:45:8f:3c:d1:26:25:67:61:1d:cb:d6:7c:7a:
39:ab:5d:26:54:6b:96:0b:18:d3:b0:f1:0c:4d:d1:1e:9e:7b:
95:5e:81:d4:f0:5f:29:91:98:61:c8:37:eb:25:0d:2c:8b:fe:
da:14:32:2a:2f:96:ae:e6:a9:cf:51:df:2e:2f:2b:a4:37:9f:
b3:2e:e3:7c:50:97:e8:85:47:e9:4e:e5:50:84:dc:a4:6c:e6:
f8:62:39:17:a0:70:2e:02:56:b4:f1:0b:bd:44:2a:21:3b:9d:
c9:84:c2:39:5a:eb:78:5e:0e:af:44:b7:b2:c1:d5:b6:cd:e2:
35:7f:e0:61:e7:ec:9c:09:97:21:c3:0c:5a:d5:92:0a:d1:c6:
66:fa:af:61:83:20:27:77:3b:ff:7e:8d:a5:f2:70:fd:5e:f1:
72:41:fc:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKC1LjJ533HM+cmPZsE/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjYwMzI1MTgwMTAwWhcNMjYwMzI2MTgwMTAwWjAzMTEwLwYDVQQD
EygwOWJlNTc0MTBlN2JiZDhiZDhhOTExNjM2MDczMmJjNTQ0MWZjNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzDSQ3B8zHjNCkyF+yDMlv7jI5l+
V8WzjgPmZ9HLgg+ZpQO+76+yTm/FIIF+AuXO8hPh6EiugcRJvumd0a68/Ue9LiVR
USHc6rjp9HPBXgsBJVe6nGZpKgA6/hD+LNJ9d6xCULANWJQqO75yDaLZzIHbxzC3
jVQLRITblWL2MZz9eSqmxNsIooC5K+YrWsjO6yiPJIOXjFoWJfdZaZzjzCQcJ8DQ
fb+UHfp8PyyI8O8K52gn6oY5rNZB2YfuX6gp6dcpFqN14dJwDafw9LtnqfjTkh9D
ouD/elksO6H3jZ9loPt6IL6+2dzM6xKJbda6Gvl9E1zXGSNtY8sAjAR3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm+V0EOe72L2KkRY2BzK8VEH8StMB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwVidZPP
TIbrqnZcE1FA3TGbz5nqYI8X0IY7apJrZyoZ+mXk4mo+hgRtj9JI0TtGyrNXEJWj
ToBXye0SClegGgD/fFemaNOp4yYWEtilJCA1OZUYe+KYQGCYs4EpO4BFjzzRJiVn
YR3L1nx6OatdJlRrlgsY07DxDE3RHp57lV6B1PBfKZGYYcg36yUNLIv+2hQyKi+W
ruapz1HfLi8rpDefsy7jfFCX6IVH6U7lUITcpGzm+GI5F6BwLgJWtPELvUQqITud
yYTCOVrreF4Or0S3ssHVts3iNX/gYefsnAmXIcMMWtWSCtHGZvqvYYMgJ3c7/36N
pfJw/V7xckH8Bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:40 2026 by rpki-client