Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: YhBJRZzVlO3qIhFHlZRwgCgswuFuUx8BN96TwcybFNY=
Subject key identifier: 73:9A:27:D5:E9:3D:9F:31:A6:7D:0D:E9:2F:BA:A0:B3:54:AF:9F:D0
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019D28168B8DEFB87B2868DB4DB11E3FE233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 1297
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: /wiM3YXEWEbACKrhSAqFVUVxBt9b0E/ypIIFV1UWQTM=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8b:8d:ef:b8:7b:28:68:db:4d:b1:1e:3f:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=739a27d5e93d9f31a67d0de92fbaa0b354af9fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:34:52:1d:0b:06:ca:f1:87:69:b7:06:d7:
ba:37:76:2b:3e:e2:73:76:86:75:d6:e7:2a:e1:8b:
0f:09:6e:1d:cc:6f:94:a0:70:56:fc:f0:62:86:50:
7e:0f:74:44:c1:70:22:22:dd:fa:38:61:d0:17:04:
7d:96:e1:4b:17:c2:58:85:c8:eb:15:95:f9:49:70:
9e:83:b6:53:de:1f:48:d3:cc:6c:6c:4b:37:25:83:
3b:6a:db:25:7c:aa:22:ad:01:14:bf:15:f3:28:dc:
e0:2d:f7:2c:18:af:b5:f3:72:ff:14:16:c6:c8:a3:
ca:2e:c7:cd:2f:f2:c7:f8:57:3e:ad:02:da:3e:83:
ae:39:d0:cf:62:fc:1d:64:be:0e:d3:e0:e9:7c:8f:
0e:55:a8:54:00:32:ac:68:f6:c2:59:ad:e2:29:41:
05:4d:fb:d3:9c:2a:84:f2:64:58:ff:d6:95:ed:bf:
f3:10:02:03:c9:f1:28:f2:60:e1:a5:3c:87:0f:cc:
36:3e:8e:41:26:a0:79:f5:0d:76:b2:c5:37:2c:40:
8f:d5:ab:c1:f4:df:85:df:86:89:f4:97:99:33:e1:
e9:02:3a:8b:b1:11:41:94:a2:13:b8:a1:e9:9c:8e:
39:b0:26:f8:2f:c0:91:c5:46:1b:73:1a:02:33:62:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:27:D5:E9:3D:9F:31:A6:7D:0D:E9:2F:BA:A0:B3:54:AF:9F:D0
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b6:0e:1f:92:18:f6:bf:61:b0:e9:2a:2c:a4:22:ca:ad:36:
53:ff:70:19:bc:9c:7c:e0:bc:66:e5:34:85:c9:a9:85:94:1a:
ad:22:39:44:4f:52:de:64:3f:e6:64:97:7a:9b:d6:cc:ff:aa:
6f:44:44:f0:cc:bd:6c:65:bc:e5:09:a1:85:f3:26:99:a4:67:
18:be:9b:62:10:24:22:65:fb:01:40:01:0d:9d:66:f0:6a:fb:
4b:8b:78:8e:4b:ae:fe:f1:40:5d:8b:44:37:42:7b:78:a3:53:
a6:76:42:fe:eb:ff:7a:78:05:5a:ee:b7:09:82:15:a4:29:1e:
cc:02:07:17:8e:e7:c2:e6:2c:55:8c:2e:42:9e:c8:69:f5:27:
b0:02:84:c2:1e:8e:46:65:e3:f2:8f:29:a5:6a:a2:2e:1a:f2:
f1:17:54:27:d6:74:0b:ec:9a:48:0a:68:e6:74:96:83:3d:f9:
e9:8f:79:07:fd:3d:bf:b3:da:d1:12:95:8b:a3:0a:7a:3b:d6:
98:e6:e0:6a:7c:d9:3a:d1:9f:66:eb:95:ef:c4:16:2c:30:fe:
ac:15:86:e6:87:77:b6:85:37:42:a9:d7:3e:8a:44:02:49:e2:
bd:79:0c:a8:8a:f2:8c:31:b4:8b:ec:3c:f2:a2:d9:f5:c0:a0:
f5:f1:d9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFouN77h7KGjbTbEeP+IzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjYwMzI2MDMwMDU5WhcNMjYwMzI3MDMwMDU5WjAzMTEwLwYDVQQD
Eyg3MzlhMjdkNWU5M2Q5ZjMxYTY3ZDBkZTkyZmJhYTBiMzU0YWY5ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk180Uh0LBsrxh2m3Bte6N3YrPuJz
doZ11ucq4YsPCW4dzG+UoHBW/PBihlB+D3REwXAiIt36OGHQFwR9luFLF8JYhcjr
FZX5SXCeg7ZT3h9I08xsbEs3JYM7atslfKoirQEUvxXzKNzgLfcsGK+183L/FBbG
yKPKLsfNL/LH+Fc+rQLaPoOuOdDPYvwdZL4O0+DpfI8OVahUADKsaPbCWa3iKUEF
TfvTnCqE8mRY/9aV7b/zEAIDyfEo8mDhpTyHD8w2Po5BJqB59Q12ssU3LECP1avB
9N+F34aJ9JeZM+HpAjqLsRFBlKITuKHpnI45sCb4L8CRxUYbcxoCM2JwmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOaJ9XpPZ8xpn0N6S+6oLNUr5/QMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbYOH5IY
9r9hsOkqLKQiyq02U/9wGbycfOC8ZuU0hcmphZQarSI5RE9S3mQ/5mSXepvWzP+q
b0RE8My9bGW85QmhhfMmmaRnGL6bYhAkImX7AUABDZ1m8Gr7S4t4jkuu/vFAXYtE
N0J7eKNTpnZC/uv/engFWu63CYIVpCkezAIHF47nwuYsVYwuQp7IafUnsAKEwh6O
RmXj8o8ppWqiLhry8RdUJ9Z0C+yaSApo5nSWgz356Y95B/09v7Pa0RKVi6MKejvW
mObganzZOtGfZuuV78QWLDD+rBWG5od3toU3QqnXPopEAknivXkMqIryjDG0i+w8
8qLZ9cCg9fHZRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:59 2026 by rpki-client