Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: 5bWdc2pRWahCmKP8BgbfEOPx8MCajDgRR1hCnNRqSx0=
Subject key identifier: BD:81:49:BA:83:2B:9E:4C:09:7E:6D:3D:49:44:B2:35:08:4F:B0:5C
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019D296174CBFD97BF497F1ECC1885A9326E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: 9V6DhXRXXxu7rsxOnLbKjIg4fWLmjh7VZ6W0HjYwWjo=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:74:cb:fd:97:bf:49:7f:1e:cc:18:85:a9:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=bd8149ba832b9e4c097e6d3d4944b235084fb05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:9d:e0:3b:cb:92:22:3b:ae:18:7e:62:01:
64:a8:94:9e:27:1b:eb:4e:1c:28:8e:94:b1:af:18:
b5:ad:36:db:ae:22:7f:8e:cf:9b:7e:33:82:10:a1:
5b:f5:68:57:39:48:f8:ef:4c:c8:b5:8e:ee:9a:ed:
bc:39:f0:91:a8:14:5b:bd:ff:50:ec:3e:66:26:d6:
ce:20:2c:b8:02:09:b2:64:53:13:f8:a5:49:2a:f5:
aa:ef:65:99:97:c0:92:4f:0f:b1:08:24:53:fb:a4:
8a:f0:91:3a:c9:18:c4:00:1e:98:ba:b6:70:69:8a:
6f:e8:fe:69:a1:82:95:30:0c:8d:4d:90:39:97:63:
c5:b4:89:59:9c:8a:20:a7:6e:ac:ff:a7:7a:14:ea:
aa:6a:9a:91:31:a9:6d:68:4c:9c:8e:1d:8f:e0:cb:
75:a6:10:28:69:0f:06:2c:b7:f6:57:37:db:7e:0c:
ce:72:57:08:b3:59:38:82:15:6b:12:cd:ea:9d:32:
63:5a:8f:a1:e0:cc:43:4a:6f:fe:94:90:49:2f:ba:
e6:cd:31:1c:41:9f:a9:82:09:77:ae:30:45:43:a9:
bc:c1:d0:97:68:65:4b:1f:f1:d1:0e:5d:01:2e:54:
d5:e7:32:5b:f7:5c:1c:0b:79:0b:90:d7:53:85:a2:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:49:BA:83:2B:9E:4C:09:7E:6D:3D:49:44:B2:35:08:4F:B0:5C
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:04:ea:67:23:6d:37:6d:f1:8f:ae:d1:13:a3:cf:49:10:9f:
29:ba:af:0f:90:ea:33:1b:5b:61:ac:85:c5:03:de:14:7e:38:
d6:79:5d:d7:b2:53:d8:86:39:99:7e:ef:76:d3:23:e3:cf:e2:
1e:5a:48:c1:2f:dd:56:6f:c2:03:48:1d:c4:5e:ef:93:c1:c8:
9d:5a:3d:e6:4b:3b:7e:62:d5:20:46:f2:a2:8b:32:03:47:a4:
6a:d6:d4:9f:02:7b:a7:21:73:78:0e:27:51:01:2d:06:80:a4:
86:3a:b8:52:ff:3b:b5:62:1d:8f:05:2f:25:0f:b9:1f:3d:c9:
cf:97:c8:43:cf:be:ee:ac:22:1e:9c:78:54:3b:30:dc:ab:68:
83:dc:73:3e:55:19:54:97:01:e6:77:8c:08:c5:ad:cc:44:fd:
14:f6:f4:34:b0:d4:74:e1:96:25:d7:ef:20:d7:e4:5a:94:b1:
88:34:7f:c5:41:a5:25:3a:d0:ac:f2:ae:da:da:e9:18:24:2a:
d7:b1:63:9d:f2:88:a7:7f:7a:0d:31:66:f7:db:56:e3:db:6d:
25:a4:db:68:71:0c:ce:bb:7a:c0:ce:68:a9:66:7d:7a:35:7c:
92:8b:bf:f2:13:86:f8:c6:b9:e9:c5:26:94:2f:93:22:4c:3a:
a0:10:1e:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYXTL/Ze/SX8ezBiFqTJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjYwMzI2MDkwMjI1WhcNMjYwMzI3MDkwMjI1WjAzMTEwLwYDVQQD
EyhiZDgxNDliYTgzMmI5ZTRjMDk3ZTZkM2Q0OTQ0YjIzNTA4NGZiMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vad4DvLkiI7rhh+YgFkqJSeJxvr
ThwojpSxrxi1rTbbriJ/js+bfjOCEKFb9WhXOUj470zItY7umu28OfCRqBRbvf9Q
7D5mJtbOICy4AgmyZFMT+KVJKvWq72WZl8CSTw+xCCRT+6SK8JE6yRjEAB6YurZw
aYpv6P5poYKVMAyNTZA5l2PFtIlZnIogp26s/6d6FOqqapqRMaltaEycjh2P4Mt1
phAoaQ8GLLf2VzfbfgzOclcIs1k4ghVrEs3qnTJjWo+h4MxDSm/+lJBJL7rmzTEc
QZ+pggl3rjBFQ6m8wdCXaGVLH/HRDl0BLlTV5zJb91wcC3kLkNdThaLB6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2BSbqDK55MCX5tPUlEsjUIT7BcMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngTqZyNt
N23xj67RE6PPSRCfKbqvD5DqMxtbYayFxQPeFH441nld17JT2IY5mX7vdtMj48/i
HlpIwS/dVm/CA0gdxF7vk8HInVo95ks7fmLVIEbyoosyA0ekatbUnwJ7pyFzeA4n
UQEtBoCkhjq4Uv87tWIdjwUvJQ+5Hz3Jz5fIQ8++7qwiHpx4VDsw3Ktog9xzPlUZ
VJcB5neMCMWtzET9FPb0NLDUdOGWJdfvINfkWpSxiDR/xUGlJTrQrPKu2trpGCQq
17FjnfKIp396DTFm99tW49ttJaTbaHEMzrt6wM5oqWZ9ejV8kou/8hOG+Ma56cUm
lC+TIkw6oBAeXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:58 2026 by rpki-client