Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
File: s8l-xqz0xTcKU8r4I5YxblbkhsY.mft (raw, json)
Hash identifier: RHOs6Qi7CX0oJ5S30NIlqM1m/XzWm7Loz10kpLbhB2A=
Subject key identifier: B3:61:C1:6C:0D:96:2B:C6:97:55:E8:D3:27:C2:01:A1:E0:46:47:4C
Authority key identifier: B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
Certificate issuer: /CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Certificate serial: 019D2AA944FBF9AA726D97872CEE8518EAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
Manifest number: 0852
Signing time: Thu 26 Mar 2026 15:00:29 +0000
Manifest this update: Thu 26 Mar 2026 15:00:29 +0000
Manifest next update: Fri 27 Mar 2026 15:00:29 +0000
Files and hashes: 1: s8l-xqz0xTcKU8r4I5YxblbkhsY.crl (hash: Il4zaOre18ooQ/Hs0BvfYTWbf6U2rmVgXRGo/cfNLOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:44:fb:f9:aa:72:6d:97:87:2c:ee:85:18:ea:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c97ec6acf4c5370a53caf82396316e56e486c6
Validity
Not Before: Mar 26 15:00:29 2026 GMT
Not After : Mar 27 15:00:29 2026 GMT
Subject: CN=b361c16c0d962bc69755e8d327c201a1e046474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:5e:32:fc:70:27:7f:be:0b:70:95:f2:34:
f5:99:70:9b:1a:7b:c5:10:fa:b1:05:3b:52:ab:95:
41:6c:08:7c:0b:db:86:b5:95:75:e8:12:8d:78:4a:
c2:ef:3a:01:32:17:bb:60:ff:a6:be:97:0d:b9:58:
e5:af:b5:7c:86:da:55:64:f8:d7:1b:e3:09:6f:9f:
40:2c:3d:05:33:e1:59:e8:0a:53:f2:3b:52:a2:1b:
ae:d3:0b:ba:d0:ac:e1:bc:ff:16:48:7b:7e:51:27:
19:1f:cf:22:9d:a0:ec:aa:8a:0d:ee:3a:af:25:61:
36:5c:e5:09:0b:54:08:2d:8b:10:a4:10:7c:19:81:
e3:bf:37:60:ff:1a:e4:13:e3:fa:79:f5:91:f8:5a:
a4:e3:c3:53:47:5f:96:ee:8a:79:63:31:c7:5a:ae:
77:43:c1:fb:a5:d5:08:34:2c:97:93:2a:2e:03:c3:
11:00:c4:80:a2:4d:87:ba:2b:c5:4b:00:5d:79:67:
42:af:5f:cb:f9:2a:79:d5:de:0a:33:80:9a:20:03:
4d:78:88:81:a2:f9:57:c7:9f:47:8b:34:e7:02:d1:
16:c3:d2:32:36:69:b5:3a:e7:1a:53:51:6f:5c:75:
eb:85:94:c7:7c:ba:e7:3e:a9:4a:62:4d:bc:bf:c6:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:C1:6C:0D:96:2B:C6:97:55:E8:D3:27:C2:01:A1:E0:46:47:4C
X509v3 Authority Key Identifier:
keyid:B3:C9:7E:C6:AC:F4:C5:37:0A:53:CA:F8:23:96:31:6E:56:E4:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8l-xqz0xTcKU8r4I5YxblbkhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72f328-ce5f-404a-9d4c-d3c19598a0e6/1/s8l-xqz0xTcKU8r4I5YxblbkhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:f6:aa:ad:ec:68:55:6d:40:02:d6:92:a0:96:d0:01:9b:
8c:a0:76:ae:b5:96:db:42:f6:e2:36:8c:a4:2b:e9:9d:32:de:
62:67:f4:b9:e1:80:fa:59:a0:14:d1:8b:67:16:bd:a1:36:86:
6e:b8:4e:2a:71:09:df:4a:e6:78:a0:79:54:c4:8d:1e:44:1a:
97:95:bd:c8:5e:97:f4:73:2a:fc:03:f1:09:37:7a:52:3e:8a:
9e:d5:66:95:8c:64:09:a6:0b:19:16:91:10:f6:ab:47:5d:c6:
ef:51:9c:a5:35:c7:9d:3d:69:3a:27:1e:a4:d4:69:78:02:94:
46:c8:a1:a7:c6:8e:e5:6b:de:53:30:26:ec:67:94:94:36:73:
82:86:00:2d:52:60:bf:4d:3b:ec:12:90:e7:63:4d:54:69:22:
ca:b4:4a:78:31:18:0b:0e:1c:01:b5:00:32:e8:9d:60:ce:e7:
f7:c8:28:e9:bc:04:b7:d0:70:99:ea:e8:4f:ed:8d:ef:28:ae:
ae:7b:a6:d1:f3:08:e2:da:a5:47:0c:96:d1:4b:8a:03:7e:99:
c0:23:be:4e:bf:3d:86:14:87:95:0d:3c:8f:8f:b9:38:06:68:
72:5f:b3:ff:b5:77:36:ca:20:4e:39:93:7c:d7:88:3a:d4:87:
49:00:23:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqUT7+apybZeHLO6FGOrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzk3ZWM2YWNmNGM1MzcwYTUzY2FmODIzOTYzMTZlNTZl
NDg2YzYwHhcNMjYwMzI2MTUwMDI5WhcNMjYwMzI3MTUwMDI5WjAzMTEwLwYDVQQD
EyhiMzYxYzE2YzBkOTYyYmM2OTc1NWU4ZDMyN2MyMDFhMWUwNDY0NzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoleMvxwJ3++C3CV8jT1mXCbGnvF
EPqxBTtSq5VBbAh8C9uGtZV16BKNeErC7zoBMhe7YP+mvpcNuVjlr7V8htpVZPjX
G+MJb59ALD0FM+FZ6ApT8jtSohuu0wu60KzhvP8WSHt+UScZH88inaDsqooN7jqv
JWE2XOUJC1QILYsQpBB8GYHjvzdg/xrkE+P6efWR+Fqk48NTR1+W7op5YzHHWq53
Q8H7pdUINCyXkyouA8MRAMSAok2HuivFSwBdeWdCr1/L+Sp51d4KM4CaIANNeIiB
ovlXx59HizTnAtEWw9IyNmm1OucaU1FvXHXrhZTHfLrnPqlKYk28v8YfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNhwWwNlivGl1Xo0yfCAaHgRkdMMB8GA1UdIwQY
MBaAFLPJfsas9MU3ClPK+COWMW5W5IbGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMt
ZDNjMTk1OThhMGU2LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83MmYzMjgtY2U1Zi00MDRhLTlkNGMtZDNjMTk1OThhMGU2
LzEvczhsLXhxejB4VGNLVThyNEk1WXhibGJraHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIL2qq3s
aFVtQALWkqCW0AGbjKB2rrWW20L24jaMpCvpnTLeYmf0ueGA+lmgFNGLZxa9oTaG
brhOKnEJ30rmeKB5VMSNHkQal5W9yF6X9HMq/APxCTd6Uj6KntVmlYxkCaYLGRaR
EParR13G71GcpTXHnT1pOicepNRpeAKURsihp8aO5WveUzAm7GeUlDZzgoYALVJg
v0077BKQ52NNVGkiyrRKeDEYCw4cAbUAMuidYM7n98go6bwEt9BwmeroT+2N7yiu
rnum0fMI4tqlRwyW0UuKA36ZwCO+Tr89hhSHlQ08j4+5OAZocl+z/7V3NsogTjmT
fNeIOtSHSQAjYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:56 2026 by rpki-client