Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: 2MnrKkSAtuMV0pWDqW59pCym5j2SYOAy2yW+5B1UG1A=
Subject key identifier: EB:CF:14:FC:23:A4:D3:EF:4A:A0:F5:9C:E0:2B:5E:00:A1:D0:34:1E
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 019D27A8764E20BD306E3E05D265D29015DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: Q2aiRqZ3CPvPmHrE///SaHuBjKkH6jki8TVMaNxr6jU=)
2: G0gRp1hMj3IVrRMDtVlrM5GgoMQ.roa (hash: sfK58h/s6Lw9x7/XNuXAh6Lj4orMmzdUBf2OZPGupM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:76:4e:20:bd:30:6e:3e:05:d2:65:d2:90:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=ebcf14fc23a4d3ef4aa0f59ce02b5e00a1d0341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:f7:95:e5:15:ca:cb:e8:b4:cb:6d:3f:1c:
bd:6a:0d:14:31:4b:da:3c:dc:1d:a7:33:4d:22:bb:
d1:05:6d:88:ac:8d:2b:b8:50:c4:39:ed:67:2a:cc:
55:b8:04:61:cd:46:11:3a:25:ee:99:d5:ec:fd:b2:
e3:ab:a9:74:b9:ee:59:87:9e:71:63:89:98:50:16:
11:11:cc:11:30:37:83:04:fc:6c:b9:e5:33:8c:9a:
88:66:4e:70:42:0e:79:b2:7c:d1:b4:f3:36:f9:c0:
22:49:63:25:d8:6c:bb:a8:d6:57:d1:7e:6c:18:c0:
38:37:31:ac:3f:8a:47:57:de:5a:70:1b:af:d3:79:
d1:f3:3d:70:0a:c9:b7:9b:e7:a8:da:d0:44:c6:ef:
a3:8e:c8:3c:47:f2:c8:e4:9e:ad:4c:61:3c:b6:10:
be:4d:a7:83:90:01:90:c5:34:0f:9d:15:bb:03:c2:
a7:b0:37:fd:c2:61:f1:0f:3a:a6:72:95:cb:60:06:
57:59:03:a8:67:17:17:24:aa:76:ae:51:e4:59:90:
3e:d2:f7:93:3d:e9:89:d9:2e:77:74:af:4b:fa:92:
40:db:0b:14:d0:9f:69:91:e9:af:87:d1:6b:72:2f:
5f:eb:f7:df:55:df:e3:c5:16:0a:81:91:2e:20:45:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:14:FC:23:A4:D3:EF:4A:A0:F5:9C:E0:2B:5E:00:A1:D0:34:1E
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fe:9b:b7:df:e0:3c:11:8e:f0:e1:25:73:33:3e:fe:40:00:
82:63:f4:ed:aa:28:5f:5e:9b:4b:2c:02:ca:2a:c8:a6:23:77:
09:bd:f0:07:dc:86:c9:0f:01:fc:82:f4:2e:95:9f:c7:a1:11:
df:58:c8:84:31:de:55:2a:ac:ca:57:74:9f:d3:e3:5b:62:30:
a5:8c:c3:71:db:72:31:81:6b:42:7c:6c:af:98:18:73:98:c2:
36:3b:ea:fb:29:dd:2a:4c:00:02:58:fa:51:c8:2b:ca:d4:17:
b8:42:32:98:db:9e:39:19:15:b2:09:9a:87:2c:bc:4f:97:80:
e0:69:62:60:2e:dc:d3:82:de:96:51:05:28:fb:3a:e4:cc:9c:
ed:6d:3c:1b:4b:62:bd:af:ee:02:bc:39:01:59:45:f5:54:2b:
4b:3e:0a:93:8f:d7:c0:54:f6:96:7c:1a:39:c6:5e:f2:fa:d9:
2e:6a:3c:7b:03:ed:13:d2:2e:cd:3f:69:23:24:b0:7f:b7:ab:
fb:4f:29:7e:06:7c:2b:5f:03:a8:2a:37:cb:ad:e1:6d:96:4d:
70:50:ee:2e:1b:7a:bb:3a:59:46:8a:a5:31:9b:be:59:3d:89:
5c:99:5b:e7:f4:51:6d:8e:01:93:ae:91:45:6d:9d:b2:99:89:
66:36:70:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqHZOIL0wbj4F0mXSkBXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMzgyMzc1OTY2OTQ4ZTIxNjg4ZThiYTEzODNhNGEzMDll
MDU2MmYwHhcNMjYwMzI2MDEwMDQ0WhcNMjYwMzI3MDEwMDQ0WjAzMTEwLwYDVQQD
EyhlYmNmMTRmYzIzYTRkM2VmNGFhMGY1OWNlMDJiNWUwMGExZDAzNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPT3leUVysvotMttPxy9ag0UMUva
PNwdpzNNIrvRBW2IrI0ruFDEOe1nKsxVuARhzUYROiXumdXs/bLjq6l0ue5Zh55x
Y4mYUBYREcwRMDeDBPxsueUzjJqIZk5wQg55snzRtPM2+cAiSWMl2Gy7qNZX0X5s
GMA4NzGsP4pHV95acBuv03nR8z1wCsm3m+eo2tBExu+jjsg8R/LI5J6tTGE8thC+
TaeDkAGQxTQPnRW7A8KnsDf9wmHxDzqmcpXLYAZXWQOoZxcXJKp2rlHkWZA+0veT
PemJ2S53dK9L+pJA2wsU0J9pkemvh9Frci9f6/ffVd/jxRYKgZEuIEXH5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvPFPwjpNPvSqD1nOArXgCh0DQeMB8GA1UdIwQY
MBaAFPI4I3WWaUjiFojouhODpKMJ4FYvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEt
ZDJmZDlmZmMzMWJmLzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZDBmMWEtNmI5NC00ZTBkLThhNGEtZDJmZDlmZmMzMWJm
LzEvOGpnamRaWnBTT0lXaU9pNkU0T2tvd25nVmk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP6bt9/g
PBGO8OElczM+/kAAgmP07aooX16bSywCyirIpiN3Cb3wB9yGyQ8B/IL0LpWfx6ER
31jIhDHeVSqsyld0n9PjW2IwpYzDcdtyMYFrQnxsr5gYc5jCNjvq+yndKkwAAlj6
UcgrytQXuEIymNueORkVsgmahyy8T5eA4GliYC7c04LellEFKPs65Myc7W08G0ti
va/uArw5AVlF9VQrSz4Kk4/XwFT2lnwaOcZe8vrZLmo8ewPtE9IuzT9pIySwf7er
+08pfgZ8K18DqCo3y63hbZZNcFDuLht6uzpZRoqlMZu+WT2JXJlb5/RRbY4Bk66R
RW2dspmJZjZwaA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:14 2026 by rpki-client