Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
File: El8g0e9f8vAdgiSGvZ7or01la38.mft (raw, json)
Hash identifier: mL8RWeTefMRZR56U4pjEJfdNWempE5Z94ivgyGVlZDI=
Subject key identifier: 2F:75:D2:E8:C8:29:71:81:46:7F:21:9E:48:54:9B:4D:0A:67:8B:34
Authority key identifier: 12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
Certificate issuer: /CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Certificate serial: 019D265FCCF3765A912435BB17E3CCE4361C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
Manifest number: 01E9
Signing time: Wed 25 Mar 2026 19:01:45 +0000
Manifest this update: Wed 25 Mar 2026 19:01:45 +0000
Manifest next update: Thu 26 Mar 2026 19:01:45 +0000
Files and hashes: 1: El8g0e9f8vAdgiSGvZ7or01la38.crl (hash: 3sJHB/zamQInwig1tmjaGQl7UqO1yUT8dURL2xkkUTM=)
2: yO5VUy12ddh73zDCCV8z_vcmXj4.roa (hash: JXSS7iXS89n3AmF1lMYl9UTKNor1TEXY5nMl7r8w9ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:cc:f3:76:5a:91:24:35:bb:17:e3:cc:e4:36:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=125f20d1ef5ff2f01d822486bd9ee8af4d656b7f
Validity
Not Before: Mar 25 19:01:45 2026 GMT
Not After : Mar 26 19:01:45 2026 GMT
Subject: CN=2f75d2e8c8297181467f219e48549b4d0a678b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:25:a9:bd:e6:51:ae:bc:15:6a:8d:f9:59:
18:dc:d3:5c:01:10:f4:07:cb:c3:d5:19:c8:05:0b:
a5:c0:d8:89:bc:3e:2a:d0:20:4c:6b:0f:e7:cb:92:
5e:cc:aa:42:b1:06:39:84:61:c1:23:6b:6e:82:6c:
a4:04:9b:a9:ae:8a:cd:23:d6:fd:fd:b8:33:66:e9:
49:df:00:44:a4:cd:20:9d:a2:38:5f:21:63:7f:89:
c9:8c:85:4a:29:7d:58:ad:cc:2e:4e:fb:cb:23:36:
47:66:d0:6f:e5:27:e5:36:89:cb:6a:3f:fe:36:0c:
ab:e5:93:93:66:df:69:9d:38:ab:2d:4b:40:5f:33:
f0:51:22:4c:d2:0c:df:a2:75:bd:bb:39:f9:1c:bd:
a4:86:f5:d6:7a:80:f0:dc:14:f8:36:3a:50:4b:15:
ff:25:d7:4c:70:35:ae:71:32:fd:e8:d7:d8:cb:ee:
ae:c4:fb:2c:2c:54:c9:04:91:30:83:3d:b1:e5:13:
b4:21:cf:a0:82:34:ff:b4:ae:46:70:54:e2:44:d6:
29:46:a5:99:50:4f:b1:d7:95:8c:e4:50:6c:79:81:
cb:74:96:f9:f4:02:e7:47:9b:bc:bc:ef:d1:48:be:
38:9a:9d:ad:60:d1:d1:64:84:bc:40:a6:45:f8:23:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:D2:E8:C8:29:71:81:46:7F:21:9E:48:54:9B:4D:0A:67:8B:34
X509v3 Authority Key Identifier:
keyid:12:5F:20:D1:EF:5F:F2:F0:1D:82:24:86:BD:9E:E8:AF:4D:65:6B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/El8g0e9f8vAdgiSGvZ7or01la38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dc4d7-bc34-4584-b0f9-fe9a064181b2/1/El8g0e9f8vAdgiSGvZ7or01la38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:63:49:b7:dc:ac:ef:1d:70:03:b7:f0:24:11:04:e8:3c:
d4:55:34:49:e4:32:2b:f4:e9:f6:e2:c7:9a:9f:d9:4a:98:24:
c5:79:c0:53:ec:a3:2d:ce:ff:d4:10:f7:73:bd:29:d9:15:2f:
23:92:8f:4d:e7:16:13:1a:49:0c:17:2e:21:75:36:1e:25:a1:
45:7c:aa:da:52:08:02:66:70:dd:5d:d9:6b:6b:64:8d:1f:26:
92:be:b6:04:67:33:00:d1:3a:08:8b:27:fe:3e:80:01:b3:20:
2e:2e:a0:8f:bb:ef:49:a2:2b:18:e0:8b:03:e4:66:cd:21:07:
c1:21:fb:77:9c:31:c8:1b:43:bf:53:47:cc:df:58:b6:d5:e6:
6f:07:28:c1:84:f2:11:26:f5:dc:87:21:1f:9f:58:63:62:6c:
f2:83:2f:0f:d0:78:2c:7c:df:7f:36:dd:e9:40:9a:60:e4:8c:
ce:18:f1:c2:07:fc:1e:c6:42:99:40:b6:18:b7:fd:ee:55:f2:
3e:30:a5:e1:a8:b8:b5:4d:b7:c3:05:56:24:a2:00:3f:c6:5f:
7a:6c:8c:22:e8:b6:04:15:57:2e:a4:ef:88:41:4f:00:20:8c:
65:e1:c3:78:58:23:32:77:41:92:ca:ad:9d:69:9a:3c:90:86:
ad:85:04:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8zzdlqRJDW7F+PM5DYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWYyMGQxZWY1ZmYyZjAxZDgyMjQ4NmJkOWVlOGFmNGQ2
NTZiN2YwHhcNMjYwMzI1MTkwMTQ1WhcNMjYwMzI2MTkwMTQ1WjAzMTEwLwYDVQQD
EygyZjc1ZDJlOGM4Mjk3MTgxNDY3ZjIxOWU0ODU0OWI0ZDBhNjc4YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Ulqb3mUa68FWqN+VkY3NNcARD0
B8vD1RnIBQulwNiJvD4q0CBMaw/ny5JezKpCsQY5hGHBI2tugmykBJuprorNI9b9
/bgzZulJ3wBEpM0gnaI4XyFjf4nJjIVKKX1YrcwuTvvLIzZHZtBv5SflNonLaj/+
Ngyr5ZOTZt9pnTirLUtAXzPwUSJM0gzfonW9uzn5HL2khvXWeoDw3BT4NjpQSxX/
JddMcDWucTL96NfYy+6uxPssLFTJBJEwgz2x5RO0Ic+ggjT/tK5GcFTiRNYpRqWZ
UE+x15WM5FBseYHLdJb59ALnR5u8vO/RSL44mp2tYNHRZIS8QKZF+CPNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC910ujIKXGBRn8hnkhUm00KZ4s0MB8GA1UdIwQY
MBaAFBJfINHvX/LwHYIkhr2e6K9NZWt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjkt
ZmU5YTA2NDE4MWIyLzEvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yZGM0ZDctYmMzNC00NTg0LWIwZjktZmU5YTA2NDE4MWIy
LzEvRWw4ZzBlOWY4dkFkZ2lTR3ZaN29yMDFsYTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbFjSbfc
rO8dcAO38CQRBOg81FU0SeQyK/Tp9uLHmp/ZSpgkxXnAU+yjLc7/1BD3c70p2RUv
I5KPTecWExpJDBcuIXU2HiWhRXyq2lIIAmZw3V3Za2tkjR8mkr62BGczANE6CIsn
/j6AAbMgLi6gj7vvSaIrGOCLA+RmzSEHwSH7d5wxyBtDv1NHzN9YttXmbwcowYTy
ESb13IchH59YY2Js8oMvD9B4LHzffzbd6UCaYOSMzhjxwgf8HsZCmUC2GLf97lXy
PjCl4ai4tU23wwVWJKIAP8ZfemyMIui2BBVXLqTviEFPACCMZeHDeFgjMndBksqt
nWmaPJCGrYUERQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:27 2026 by rpki-client