Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json)
Hash identifier: GH3MxO97L0R87fLDMr7O1NXRteJVGAz2FwSbU2GY4Y4=
Subject key identifier: DE:09:55:ED:C6:73:81:B5:93:5B:32:4B:84:92:38:EA:8C:0C:8A:B2
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019D2470E7DE7322E53DD03B641B197A0733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
Manifest number: 65
Signing time: Wed 25 Mar 2026 10:01:12 +0000
Manifest this update: Wed 25 Mar 2026 10:01:12 +0000
Manifest next update: Thu 26 Mar 2026 10:01:12 +0000
Files and hashes: 1: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: tInE9hnK1/CO8IrjgeQHKiC4hQvxzL+gq+EylhOv9p8=)
2: 90xEgVZejrYurMIAxT-ide4W5w8.asa (hash: NBidMC6eVV6gEylJ444MZYBsssGoS33egENq9NcJl4M=)
3: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=)
4: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:e7:de:73:22:e5:3d:d0:3b:64:1b:19:7a:07:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Mar 25 10:01:12 2026 GMT
Not After : Mar 26 10:01:12 2026 GMT
Subject: CN=de0955edc67381b5935b324b849238ea8c0c8ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:62:8a:98:0e:3e:0b:37:8a:00:e2:f2:fc:
d1:be:4f:0a:51:a8:7b:4e:43:1d:b4:7d:a2:07:07:
04:6f:43:3b:19:4c:df:f2:1f:a3:eb:1f:9b:2b:0b:
5b:d7:cb:19:74:3c:b9:f0:6c:cc:0e:f4:35:d8:91:
ed:ce:9f:c9:19:41:2e:bc:96:cb:a5:62:77:19:d6:
d7:6e:40:2f:61:f9:34:e5:cd:db:da:32:60:f6:70:
3a:4c:8d:28:0b:15:a7:4f:f8:e6:a9:e0:d3:bf:e7:
cf:38:ee:1b:8a:40:40:f7:8e:2a:d7:0b:23:5f:4a:
47:f7:93:c6:5b:64:0b:2a:cf:cf:1a:aa:74:af:2b:
e8:4b:0e:19:14:72:f4:b5:76:23:54:86:8a:df:1e:
6d:38:db:95:a4:84:d2:8e:e2:4e:a6:c3:d2:84:4b:
a7:f4:d3:fa:8b:c2:c9:5f:5f:1b:85:80:22:c2:f4:
df:00:fb:68:a3:c6:41:c4:64:73:10:2c:bd:0f:eb:
80:92:d4:0e:fa:94:59:04:93:ed:db:6b:1b:e0:77:
9f:e9:66:67:7e:51:15:8d:09:c8:54:15:8a:a4:6a:
07:b9:80:3c:af:eb:63:ff:3b:82:ac:da:8b:20:12:
3b:66:12:51:2f:15:7a:e4:71:77:b6:b5:c7:39:8a:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:55:ED:C6:73:81:B5:93:5B:32:4B:84:92:38:EA:8C:0C:8A:B2
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cb:f3:ef:94:d8:4c:b5:2d:9a:51:e5:3b:9b:37:45:65:c3:
e5:6b:0b:c2:88:0b:61:8f:7d:18:ed:b3:e1:76:da:54:c1:d4:
92:a7:a7:fd:b9:15:8b:e9:3b:5c:dc:2d:52:f8:ee:7a:68:0e:
a4:aa:c3:ef:b0:6f:3e:74:d5:67:f0:74:03:9f:c4:8e:e3:59:
9e:ec:63:57:94:3b:cd:33:30:1c:db:cb:86:e0:40:96:18:eb:
20:4f:c0:d9:10:ee:d5:49:4f:2d:50:f1:26:f3:d9:1e:fd:0b:
8e:6d:1d:f3:73:3c:48:e3:7d:83:ec:ea:5f:43:87:4e:dc:6e:
d7:27:02:0b:ab:d1:00:8f:25:8d:c3:7a:24:79:5a:fe:b9:aa:
ec:c8:ae:2e:70:82:ed:4a:7e:51:5f:84:23:31:c6:48:22:dc:
f8:2b:c1:ae:fd:14:6a:f0:c6:b8:a4:6a:34:a4:87:98:73:de:
7c:4b:80:19:45:ec:25:3f:4b:a7:f0:90:e0:5f:95:69:69:b5:
5e:bf:32:50:25:93:6a:17:3f:1c:2d:5b:cc:31:ec:ed:f2:20:
5f:7b:ad:51:7e:84:0f:fd:53:e2:d3:50:3d:43:1c:3d:8b:7b:
05:f9:1a:30:e5:26:18:7f:72:55:78:7d:35:f3:b9:c5:2d:6a:
aa:17:dd:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kcOfecyLlPdA7ZBsZegczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2
NGM2ZDEwHhcNMjYwMzI1MTAwMTEyWhcNMjYwMzI2MTAwMTEyWjAzMTEwLwYDVQQD
EyhkZTA5NTVlZGM2NzM4MWI1OTM1YjMyNGI4NDkyMzhlYThjMGM4YWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA1iipgOPgs3igDi8vzRvk8KUah7
TkMdtH2iBwcEb0M7GUzf8h+j6x+bKwtb18sZdDy58GzMDvQ12JHtzp/JGUEuvJbL
pWJ3GdbXbkAvYfk05c3b2jJg9nA6TI0oCxWnT/jmqeDTv+fPOO4bikBA944q1wsj
X0pH95PGW2QLKs/PGqp0ryvoSw4ZFHL0tXYjVIaK3x5tONuVpITSjuJOpsPShEun
9NP6i8LJX18bhYAiwvTfAPtoo8ZBxGRzECy9D+uAktQO+pRZBJPt22sb4Hef6WZn
flEVjQnIVBWKpGoHuYA8r+tj/zuCrNqLIBI7ZhJRLxV65HF3trXHOYoagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4JVe3Gc4G1k1syS4SSOOqMDIqyMB8GA1UdIwQY
MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt
Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi
LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMvz75TY
TLUtmlHlO5s3RWXD5WsLwogLYY99GO2z4XbaVMHUkqen/bkVi+k7XNwtUvjuemgO
pKrD77BvPnTVZ/B0A5/EjuNZnuxjV5Q7zTMwHNvLhuBAlhjrIE/A2RDu1UlPLVDx
JvPZHv0Ljm0d83M8SON9g+zqX0OHTtxu1ycCC6vRAI8ljcN6JHla/rmq7MiuLnCC
7Up+UV+EIzHGSCLc+CvBrv0UavDGuKRqNKSHmHPefEuAGUXsJT9Lp/CQ4F+VaWm1
Xr8yUCWTahc/HC1bzDHs7fIgX3utUX6ED/1T4tNQPUMcPYt7BfkaMOUmGH9yVXh9
NfO5xS1qqhfdGA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:02 2026 by rpki-client