Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: 3qzrau6jFlofAH+nchCiSYAsHVvXPHWxzvlNz9TRZwA=
Subject key identifier: 8C:D6:CD:27:85:8A:D3:D8:28:39:49:5B:8E:8F:D1:2E:8C:70:99:D4
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019D2816627EED1DDCCCFF5785D0B4D2F0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0CF4
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: 01g88Mf9SvV1LAy3d0ibSh0mfjGokAiIV836gFu0G/0=)
2: _3UhzExQEW793JDsh27iQiX2gzM.roa (hash: nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:62:7e:ed:1d:dc:cc:ff:57:85:d0:b4:d2:f0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=8cd6cd27858ad3d82839495b8e8fd12e8c7099d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:e6:d8:e8:dd:41:6c:be:50:c2:bd:56:7a:
79:49:12:e1:70:88:32:a6:5d:ad:07:82:b0:89:bf:
f5:4e:76:b0:34:71:42:5c:0a:20:64:c1:ec:8a:73:
dc:03:d9:07:2a:80:07:7a:f9:d2:e6:38:49:8b:b3:
2b:d5:89:37:4f:a7:eb:e4:6b:7d:8b:90:7f:6b:44:
1e:74:b4:4a:ef:59:cf:ee:c9:04:25:22:13:ab:75:
16:63:7e:b9:e7:1c:d3:7f:8a:14:a9:65:a9:04:ee:
66:ae:26:51:5a:04:4a:98:83:a3:0b:ab:0d:99:db:
88:57:8f:0a:c5:36:8b:81:d3:38:5c:05:f6:92:a9:
fc:be:4c:00:68:6a:43:b0:a2:64:fc:de:bc:7b:33:
48:ad:b7:55:c5:5b:0f:63:96:0b:b7:b8:0e:ce:ab:
f3:7f:7f:13:5a:76:73:53:47:7b:f6:c4:ce:4e:d0:
05:37:ae:d5:bf:4b:7b:05:ce:a7:1b:91:9e:c4:3c:
bb:25:e6:e9:ee:66:ad:ad:09:8b:de:43:6a:ee:fc:
ab:8b:4e:7a:fb:a9:e7:d5:4c:ac:1c:eb:10:28:c4:
f5:12:82:11:fb:25:31:dd:04:00:54:d8:31:f9:11:
b1:9c:17:b0:0c:a8:ab:bf:9a:67:11:b9:b2:4f:4c:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:CD:27:85:8A:D3:D8:28:39:49:5B:8E:8F:D1:2E:8C:70:99:D4
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:49:5a:59:32:a2:4c:00:51:38:e5:af:af:e4:75:04:75:58:
d9:a9:30:bd:56:02:fd:19:73:40:69:a8:bf:08:a8:b6:df:7f:
40:84:bb:f7:bf:cc:aa:1e:b0:57:af:48:aa:8c:d1:f3:64:e1:
cf:5e:6f:65:38:f4:04:df:03:af:75:1a:c2:52:f9:d9:c3:d1:
6b:61:b2:91:f8:91:7c:0e:b1:32:bd:d3:0a:b5:2b:65:3f:bf:
16:b9:dc:eb:2d:dc:f0:3e:d4:1b:84:03:fc:d7:1a:61:76:6a:
86:ec:31:ac:0c:06:98:a6:92:56:6c:a5:bc:1b:bb:74:b5:ad:
3e:ce:34:62:3a:2f:83:7b:f7:f3:36:e3:c0:ee:9d:a5:10:1a:
14:ad:92:3d:b0:5e:6c:21:dd:2a:2d:92:e9:a5:fd:3c:f0:e4:
e5:e9:ed:9a:f3:36:fd:28:b6:b1:da:14:b2:0b:0a:b0:2d:97:
92:a7:00:31:f4:b4:80:b5:13:4d:ac:19:80:6e:c3:b5:ec:01:
08:6b:ea:c6:7b:e6:8e:30:51:7d:ea:be:f9:12:0a:17:0a:f1:
a9:a4:c5:77:68:53:12:0c:5a:95:37:e7:f7:7e:f6:bc:40:f1:
4a:3b:89:e4:67:7d:49:0b:d2:78:5c:52:b3:37:2d:8e:5b:06:
e7:df:b2:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmJ+7R3czP9XhdC00vD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzcxZGYxNmRkMGI0N2NkMGFmOTcxZjE0ZDFkY2E2ZDgy
MDZiYjEwHhcNMjYwMzI2MDMwMDQ4WhcNMjYwMzI3MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg4Y2Q2Y2QyNzg1OGFkM2Q4MjgzOTQ5NWI4ZThmZDEyZThjNzA5OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLjm2OjdQWy+UMK9Vnp5SRLhcIgy
pl2tB4Kwib/1TnawNHFCXAogZMHsinPcA9kHKoAHevnS5jhJi7Mr1Yk3T6fr5Gt9
i5B/a0QedLRK71nP7skEJSITq3UWY3655xzTf4oUqWWpBO5mriZRWgRKmIOjC6sN
mduIV48KxTaLgdM4XAX2kqn8vkwAaGpDsKJk/N68ezNIrbdVxVsPY5YLt7gOzqvz
f38TWnZzU0d79sTOTtAFN67Vv0t7Bc6nG5GexDy7Jebp7matrQmL3kNq7vyri056
+6nn1UysHOsQKMT1EoIR+yUx3QQAVNgx+RGxnBewDKirv5pnEbmyT0wIiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzWzSeFitPYKDlJW46P0S6McJnUMB8GA1UdIwQY
MBaAFAvHHfFt0LR80K+XHxTR3KbYIGuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2It
NWI0OTNhYTA3MjY4LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hY2RhNWUtNGQyZC00Zjg2LWExN2ItNWI0OTNhYTA3MjY4
LzEvQzhjZDhXM1F0SHpRcjVjZkZOSGNwdGdnYTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0laWTKi
TABROOWvr+R1BHVY2akwvVYC/RlzQGmovwiott9/QIS797/Mqh6wV69IqozR82Th
z15vZTj0BN8Dr3UawlL52cPRa2GykfiRfA6xMr3TCrUrZT+/Frnc6y3c8D7UG4QD
/NcaYXZqhuwxrAwGmKaSVmylvBu7dLWtPs40Yjovg3v38zbjwO6dpRAaFK2SPbBe
bCHdKi2S6aX9PPDk5entmvM2/Si2sdoUsgsKsC2XkqcAMfS0gLUTTawZgG7DtewB
CGvqxnvmjjBRfeq++RIKFwrxqaTFd2hTEgxalTfn9372vEDxSjuJ5Gd9SQvSeFxS
szctjlsG59+y5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:55 2026 by rpki-client