Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: Ogkk+TUrG9txVhvulg8Ueb+7h0rtjJrbF02GlhKluyQ=
Subject key identifier: 0E:8D:F4:F2:E7:F3:D7:7A:74:D5:08:64:AC:8E:32:35:FE:9B:6B:CA
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019D2A72BDA07685181B92EAAF2388D4C03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 14:00:55 +0000
Manifest this update: Thu 26 Mar 2026 14:00:55 +0000
Manifest next update: Fri 27 Mar 2026 14:00:55 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: 2RcNP5KHsPKLoseeuOYYSW7BszzPVBzONOORyB7WvWw=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:bd:a0:76:85:18:1b:92:ea:af:23:88:d4:c0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Mar 26 14:00:55 2026 GMT
Not After : Mar 27 14:00:55 2026 GMT
Subject: CN=0e8df4f2e7f3d77a74d50864ac8e3235fe9b6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:e3:f6:d8:c6:2a:ee:c3:ac:8c:2a:1f:56:
df:28:b9:a9:4a:34:f5:61:55:52:88:f2:f8:85:3d:
12:c4:f5:e7:4f:84:45:f8:f5:2f:23:51:7e:fc:f5:
bd:c4:66:76:c1:38:37:3f:71:f2:09:66:50:37:5e:
f4:49:06:68:9f:68:41:06:c5:2e:69:0b:7f:e6:0b:
0d:12:a7:4a:64:27:db:c9:e7:ce:68:8e:ff:ae:69:
5b:b6:a3:ec:5e:6f:99:96:75:48:52:23:1b:4f:0d:
e2:77:7e:29:42:9a:d6:fd:48:53:71:22:23:58:1e:
3a:e0:52:25:04:79:e1:f4:9c:9e:cb:dc:f9:7b:6d:
49:05:9a:29:71:2e:d1:36:fe:e3:8d:2e:18:07:92:
d8:a5:9d:1f:7d:4c:2e:10:4b:d7:f1:9c:28:80:b6:
42:99:28:a7:8e:b0:20:c9:1d:64:38:b3:a6:f7:47:
c8:45:e3:5b:39:1d:94:5e:7d:ba:f6:fb:07:b5:7d:
cd:91:71:38:75:e7:8b:0c:70:5c:b0:1d:5a:de:6a:
19:31:5b:3d:0b:35:59:48:8e:d3:22:d7:0e:05:ae:
a8:dd:b5:12:03:b3:65:0f:43:f7:50:0a:1e:f2:b7:
be:67:eb:53:09:64:a5:57:29:61:8a:48:4f:1c:b3:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8D:F4:F2:E7:F3:D7:7A:74:D5:08:64:AC:8E:32:35:FE:9B:6B:CA
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5d:4b:67:f5:fc:88:be:6d:8c:66:25:b1:df:e4:36:16:bc:
67:cc:bb:6f:05:82:04:45:a4:b2:07:3e:a1:3f:0f:a5:5a:1d:
1f:8d:c4:e9:53:c3:87:b4:c5:c9:98:60:6c:07:d9:f1:be:e2:
08:6b:6f:e5:19:35:b2:0d:86:2a:10:dc:23:62:b3:bc:fd:51:
3e:e2:0c:e1:cd:6b:9a:ea:61:42:97:a6:27:d2:dd:b3:f8:3c:
4b:33:0a:ea:ef:4f:d7:ec:7c:2c:65:b5:00:f1:df:2d:59:35:
f2:69:89:86:b7:9b:b1:d8:74:df:48:49:e8:5d:d1:db:bb:21:
1c:ab:f3:a8:df:51:80:5a:4d:d7:dc:fc:60:ea:56:5c:b9:42:
41:fd:78:bf:dc:1f:9d:e0:b3:41:54:68:f5:61:ec:ef:1b:9a:
95:e3:07:0e:e9:6d:49:a9:c0:f2:4c:c2:82:d4:45:7a:84:c8:
27:49:02:cf:e2:b0:48:3f:0e:dd:7c:19:c9:a1:3a:64:47:70:
a3:84:4a:40:b6:a4:06:bc:16:3e:4b:9e:ea:2c:3a:a4:08:9e:
2d:8d:22:6b:53:22:ac:96:cf:c6:db:85:8b:e9:ca:f3:c5:ca:
d0:fa:b5:81:5e:a0:11:c2:de:57:c1:a4:3c:6c:c9:5c:0d:56:
64:d1:8a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcr2gdoUYG5LqryOI1MA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjYwMzI2MTQwMDU1WhcNMjYwMzI3MTQwMDU1WjAzMTEwLwYDVQQD
EygwZThkZjRmMmU3ZjNkNzdhNzRkNTA4NjRhYzhlMzIzNWZlOWI2YmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p/j9tjGKu7DrIwqH1bfKLmpSjT1
YVVSiPL4hT0SxPXnT4RF+PUvI1F+/PW9xGZ2wTg3P3HyCWZQN170SQZon2hBBsUu
aQt/5gsNEqdKZCfbyefOaI7/rmlbtqPsXm+ZlnVIUiMbTw3id34pQprW/UhTcSIj
WB464FIlBHnh9Jyey9z5e21JBZopcS7RNv7jjS4YB5LYpZ0ffUwuEEvX8ZwogLZC
mSinjrAgyR1kOLOm90fIReNbOR2UXn269vsHtX3NkXE4deeLDHBcsB1a3moZMVs9
CzVZSI7TItcOBa6o3bUSA7NlD0P3UAoe8re+Z+tTCWSlVylhikhPHLPJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6N9PLn89d6dNUIZKyOMjX+m2vKMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc11LZ/X8
iL5tjGYlsd/kNha8Z8y7bwWCBEWksgc+oT8PpVodH43E6VPDh7TFyZhgbAfZ8b7i
CGtv5Rk1sg2GKhDcI2KzvP1RPuIM4c1rmuphQpemJ9Lds/g8SzMK6u9P1+x8LGW1
APHfLVk18mmJhrebsdh030hJ6F3R27shHKvzqN9RgFpN19z8YOpWXLlCQf14v9wf
neCzQVRo9WHs7xualeMHDultSanA8kzCgtRFeoTIJ0kCz+KwSD8O3XwZyaE6ZEdw
o4RKQLakBrwWPkue6iw6pAieLY0ia1MirJbPxtuFi+nK88XK0Pq1gV6gEcLeV8Gk
PGzJXA1WZNGKLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:29 2026 by rpki-client