Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: 7xnTEpjzUtijdd5aE7sZP/iVlCdUrlWyrM8SN7JzvKc=
Subject key identifier: 71:9B:0F:31:1F:D4:02:CC:BC:87:5F:CA:BA:2F:D8:12:27:9C:62:6B
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019D2695DB5D323186F13E02DE6474FAEF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0A05
Signing time: Wed 25 Mar 2026 20:00:48 +0000
Manifest this update: Wed 25 Mar 2026 20:00:48 +0000
Manifest next update: Thu 26 Mar 2026 20:00:48 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: sXdhyzbOE85QBL6Um0Z4uP67laPas0ur/KlQRA3f4G4=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:db:5d:32:31:86:f1:3e:02:de:64:74:fa:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Mar 25 20:00:48 2026 GMT
Not After : Mar 26 20:00:48 2026 GMT
Subject: CN=719b0f311fd402ccbc875fcaba2fd812279c626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:0e:61:7d:d8:2b:b8:e0:af:d7:76:20:04:
76:8f:a0:6e:72:64:49:d7:43:3c:9b:e4:55:74:53:
3b:da:6e:02:ee:09:86:ce:56:28:da:f0:ec:5d:88:
62:59:ed:c9:fc:c5:6a:74:71:f4:e6:8c:cf:33:d8:
ce:fb:f2:7a:81:55:60:d5:b0:27:42:c2:b3:0c:0b:
86:1f:d8:ef:6b:60:22:af:60:09:7e:42:4c:1d:c3:
2d:f8:66:90:cc:0e:d0:bf:1b:92:bc:fe:bc:1b:d6:
c4:02:de:27:e7:28:a9:61:57:72:9e:b9:88:ce:e2:
8d:6c:54:d5:26:2b:0d:f2:8d:07:64:4b:e2:3b:65:
85:15:e5:70:13:61:8e:b3:b4:c9:85:32:6e:e0:06:
64:49:f1:79:52:90:90:73:fa:42:c7:35:42:ac:d4:
d5:78:dc:f2:de:75:03:75:f7:b0:62:56:97:53:0c:
83:00:82:9d:73:ce:9d:23:0a:c5:a8:9c:24:92:7e:
25:db:53:df:71:19:92:51:da:07:da:ce:99:73:a8:
3a:ac:a1:4f:cb:c2:af:35:68:5e:7b:21:eb:5a:0c:
71:1c:1d:33:f9:ea:3f:9f:37:0d:b5:de:3a:30:23:
58:df:8e:c2:10:79:17:a7:6e:44:34:ca:41:7f:33:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:0F:31:1F:D4:02:CC:BC:87:5F:CA:BA:2F:D8:12:27:9C:62:6B
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:2c:97:07:76:d6:16:d0:cf:56:d2:b8:2b:24:26:3d:8d:
e2:70:2d:34:45:67:39:63:a7:78:7b:d3:94:19:d6:54:f7:9d:
57:78:2d:be:4b:c3:5d:b7:01:ff:98:6a:83:4c:ce:e5:7d:ff:
8b:75:0d:a8:81:a8:db:28:cd:69:74:ac:40:24:a6:7a:a9:d1:
ba:79:bf:5d:c8:3f:3d:cd:fe:a9:9f:47:d5:25:e2:58:a5:9a:
ba:a1:7d:63:a3:84:4b:75:b2:e6:fc:be:1d:2d:64:e5:06:6f:
e4:8b:b1:80:99:63:24:fa:bd:81:29:a5:85:ca:ec:a0:74:8f:
95:68:a9:ef:ac:8f:0b:7f:f0:94:7c:49:fe:71:d5:e5:18:87:
33:bd:8c:55:f4:9d:9e:64:27:0d:29:90:14:d0:ea:b4:60:5e:
0e:d9:c6:c9:f0:87:73:44:da:cd:7b:b1:9c:6c:4f:ed:d1:fd:
5c:b2:ec:b4:ec:fa:70:c8:f1:34:ce:f2:1f:01:d8:4f:80:d4:
2d:a7:4b:d9:5a:aa:d0:48:9e:fd:0a:f7:fa:ee:f6:25:00:f0:
9f:07:5b:be:8b:64:2c:dd:87:3b:d8:0d:1a:03:e1:a6:a7:fe:
e7:76:cb:84:02:92:ba:88:f6:bf:29:d5:6f:4d:8f:69:1c:2f:
56:0d:27:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldtdMjGG8T4C3mR0+u+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjYwMzI1MjAwMDQ4WhcNMjYwMzI2MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg3MTliMGYzMTFmZDQwMmNjYmM4NzVmY2FiYTJmZDgxMjI3OWM2MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W0OYX3YK7jgr9d2IAR2j6BucmRJ
10M8m+RVdFM72m4C7gmGzlYo2vDsXYhiWe3J/MVqdHH05ozPM9jO+/J6gVVg1bAn
QsKzDAuGH9jva2Air2AJfkJMHcMt+GaQzA7QvxuSvP68G9bEAt4n5yipYVdynrmI
zuKNbFTVJisN8o0HZEviO2WFFeVwE2GOs7TJhTJu4AZkSfF5UpCQc/pCxzVCrNTV
eNzy3nUDdfewYlaXUwyDAIKdc86dIwrFqJwkkn4l21PfcRmSUdoH2s6Zc6g6rKFP
y8KvNWheeyHrWgxxHB0z+eo/nzcNtd46MCNY347CEHkXp25ENMpBfzM/+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGbDzEf1ALMvIdfyrov2BInnGJrMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP8slwd2
1hbQz1bSuCskJj2N4nAtNEVnOWOneHvTlBnWVPedV3gtvkvDXbcB/5hqg0zO5X3/
i3UNqIGo2yjNaXSsQCSmeqnRunm/Xcg/Pc3+qZ9H1SXiWKWauqF9Y6OES3Wy5vy+
HS1k5QZv5IuxgJljJPq9gSmlhcrsoHSPlWip76yPC3/wlHxJ/nHV5RiHM72MVfSd
nmQnDSmQFNDqtGBeDtnGyfCHc0TazXuxnGxP7dH9XLLstOz6cMjxNM7yHwHYT4DU
LadL2Vqq0Eie/Qr3+u72JQDwnwdbvotkLN2HO9gNGgPhpqf+53bLhAKSuoj2vynV
b02PaRwvVg0n1Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:10 2026 by rpki-client