Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: jc/JCX81sfDsI3J7z0uSiwzRKFptf1Npt00tzqe1DKI=
Subject key identifier: 68:61:8E:BF:A3:AF:FB:FF:BB:C3:32:55:BB:5B:C5:9B:E4:5C:6E:40
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019D2A3BCAC8703F58429B866BA33CD5CCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0A1D
Signing time: Thu 26 Mar 2026 13:00:54 +0000
Manifest this update: Thu 26 Mar 2026 13:00:54 +0000
Manifest next update: Fri 27 Mar 2026 13:00:54 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: VpH68FkglUJpA9N7iupbVw7hwPRxLU6IDX7I67OXSO0=)
2: bZwoK81zuxGi2G9X1qgk4iSNx3g.roa (hash: dPpJ67SvgOVz0s7ktnLlDsBfdNzlyXGXd70CftWD+Gk=)
3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ca:c8:70:3f:58:42:9b:86:6b:a3:3c:d5:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Mar 26 13:00:54 2026 GMT
Not After : Mar 27 13:00:54 2026 GMT
Subject: CN=68618ebfa3affbffbbc33255bb5bc59be45c6e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:67:63:63:00:e3:3f:17:de:5b:19:75:c7:5f:
e0:fa:39:2f:e3:04:53:b9:e2:5d:29:56:34:05:aa:
50:64:b0:8c:fd:69:cd:39:0d:0e:78:67:45:d4:1b:
25:20:a0:23:17:9d:fb:09:f4:30:e8:56:67:93:15:
7a:43:8c:0f:b9:18:b6:85:3d:22:e7:6d:64:38:d3:
ff:db:cb:c8:9f:b5:9b:b2:ce:71:e2:77:f7:8c:54:
fa:5b:53:44:38:7e:00:58:bb:01:ca:80:44:5c:0a:
ff:24:01:0a:6e:21:b4:01:28:e4:7d:71:83:34:2a:
25:90:b7:e5:8f:24:86:95:78:b8:1f:39:f0:d8:49:
ec:5f:b7:96:5c:80:2b:e7:9d:0c:a4:e6:ff:e2:cc:
b1:35:24:93:47:b2:5f:bf:58:8b:f5:bf:cb:fd:5d:
12:51:d2:54:89:7f:63:e2:d7:90:a6:86:e0:65:8f:
b9:de:cf:0f:c6:df:55:13:fa:10:62:6e:a2:ed:49:
4d:e4:8d:8c:83:a3:8d:c9:46:60:03:79:5a:5c:61:
ff:c6:43:c1:13:76:81:4c:59:f9:05:23:05:1f:ae:
bd:79:46:f0:10:82:4a:f8:68:f3:d2:27:06:3c:fb:
86:7e:cb:cb:03:ef:b7:35:87:f5:b0:1f:59:5e:71:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:8E:BF:A3:AF:FB:FF:BB:C3:32:55:BB:5B:C5:9B:E4:5C:6E:40
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a7:9f:fb:a0:e1:6d:c3:17:d3:ce:97:8c:c9:b0:5f:93:a6:
29:c3:c8:e3:ab:b2:65:1e:fc:91:f9:48:44:2b:26:3b:ff:34:
a9:82:84:e0:03:b1:64:a2:10:93:7d:0c:00:45:c5:9f:de:6a:
1c:31:34:af:8a:3c:11:fe:de:5c:d9:f9:9e:ab:0b:cb:4e:98:
42:aa:b6:97:9a:17:5d:20:66:3b:bf:c6:a9:77:66:2e:7e:f2:
06:a0:e3:ec:15:7f:60:f6:e1:c0:89:3f:1b:80:d2:7a:23:c9:
d1:07:9f:a2:f3:38:57:8b:c5:dd:98:f6:04:64:52:56:65:fd:
8d:5a:b2:73:df:eb:1b:b2:3a:76:4f:9d:90:25:ab:5c:0d:32:
18:3c:2b:ee:48:12:4b:7b:b8:e6:67:3d:02:e6:2f:b6:1d:23:
4e:a1:77:94:ca:90:d8:e8:41:54:cc:93:c7:3b:6b:5c:16:60:
b1:8f:f3:18:b9:78:1c:b1:16:24:07:0a:6c:65:76:61:f1:f1:
c8:09:22:f2:cf:22:7c:21:50:1d:1c:75:fc:6b:2a:ce:6f:69:
cc:60:fb:e1:54:ff:63:23:cf:cd:5a:8a:22:1e:5e:f7:07:c4:
56:ca:1f:8c:a9:11:1a:f7:93:74:1c:22:7d:bf:da:2e:7e:0d:
7e:ed:95:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO8rIcD9YQpuGa6M81cygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzExMzQxM2QwZGY1YjhmYTA2OTAxMWVlYjEwOWYwNjdi
NTU3OWEwHhcNMjYwMzI2MTMwMDU0WhcNMjYwMzI3MTMwMDU0WjAzMTEwLwYDVQQD
Eyg2ODYxOGViZmEzYWZmYmZmYmJjMzMyNTViYjViYzU5YmU0NWM2ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WdjYwDjPxfeWxl1x1/g+jkv4wRT
ueJdKVY0BapQZLCM/WnNOQ0OeGdF1BslIKAjF537CfQw6FZnkxV6Q4wPuRi2hT0i
521kONP/28vIn7Wbss5x4nf3jFT6W1NEOH4AWLsByoBEXAr/JAEKbiG0ASjkfXGD
NColkLfljySGlXi4Hznw2EnsX7eWXIAr550MpOb/4syxNSSTR7Jfv1iL9b/L/V0S
UdJUiX9j4teQpobgZY+53s8Pxt9VE/oQYm6i7UlN5I2Mg6ONyUZgA3laXGH/xkPB
E3aBTFn5BSMFH669eUbwEIJK+Gjz0icGPPuGfsvLA++3NYf1sB9ZXnFdMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhhjr+jr/v/u8MyVbtbxZvkXG5AMB8GA1UdIwQY
MBaAFPDBE0E9DfW4+gaQEe6xCfBntVeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUt
NTAyNjFiMTE5MTZiLzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9jMTA0YzYtOWI2NS00ZDQ2LTllNDUtNTAyNjFiMTE5MTZi
LzEvOE1FVFFUME45Ymo2QnBBUjdyRUo4R2UxVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqef+6Dh
bcMX086XjMmwX5OmKcPI46uyZR78kflIRCsmO/80qYKE4AOxZKIQk30MAEXFn95q
HDE0r4o8Ef7eXNn5nqsLy06YQqq2l5oXXSBmO7/GqXdmLn7yBqDj7BV/YPbhwIk/
G4DSeiPJ0QefovM4V4vF3Zj2BGRSVmX9jVqyc9/rG7I6dk+dkCWrXA0yGDwr7kgS
S3u45mc9AuYvth0jTqF3lMqQ2OhBVMyTxztrXBZgsY/zGLl4HLEWJAcKbGV2YfHx
yAki8s8ifCFQHRx1/Gsqzm9pzGD74VT/YyPPzVqKIh5e9wfEVsofjKkRGveTdBwi
fb/aLn4Nfu2VBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:58 2026 by rpki-client