Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: S9JSSE4ARR3OWXD8TP4eNkVzWNUE0cEJRZdiyOn7GF8=
Subject key identifier: 44:E8:3F:4B:9D:E6:B8:53:EA:24:23:1F:F6:31:4B:4D:42:E4:83:11
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 019D27A8CF4F9316A3A60306133F04675D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: KZmR7Xs6FiVYkUpM/JRhg+bOG8IE/3L5IzG8o0Gahrg=)
2: OXg0TjUhSvtV7LtPBTa7S_RSHjs.roa (hash: canGGkhdPWTKzNqqcACagBLpPsyetsivYP+q4meoXFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cf:4f:93:16:a3:a6:03:06:13:3f:04:67:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=44e83f4b9de6b853ea24231ff6314b4d42e48311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:54:c0:fa:dc:d6:e0:71:41:2a:5f:33:ec:
ca:3a:75:2c:65:46:9b:7c:73:9f:a5:d4:2b:80:43:
b7:8a:e7:0f:53:12:78:57:f1:b2:33:3a:10:dc:9a:
82:21:b1:9e:2b:94:43:fa:1d:26:c5:35:13:eb:c6:
9b:ca:8d:b6:3c:66:54:87:fc:9a:ad:e8:d5:7f:aa:
4b:ef:75:77:e4:fb:a8:c4:a3:e6:37:df:31:26:56:
7e:87:12:93:5f:5a:53:aa:27:90:88:3f:4f:48:d4:
44:ec:f8:bd:88:f7:88:de:cd:ee:88:6c:69:ef:88:
4c:12:23:92:93:24:44:d2:c0:78:37:06:84:3c:14:
32:6e:bd:bc:97:ca:c3:b4:b3:e2:b1:1d:ef:7c:46:
dc:ed:a8:43:86:27:32:b0:ad:97:6b:a4:40:05:2c:
d6:bb:29:29:e2:b2:5f:1c:6e:67:74:62:66:8f:72:
76:f8:cf:e7:00:61:34:67:b8:fb:dd:49:e5:6f:5b:
83:f8:91:26:3d:3b:a8:b4:db:12:cf:7c:b3:f3:3c:
38:a2:0c:e8:ba:cf:1d:0b:f3:b5:f1:50:87:6f:de:
fb:a9:2e:37:89:bc:39:7b:34:59:a8:aa:5c:ff:d8:
85:75:ad:12:ba:6d:31:a2:e6:fc:97:49:0c:cf:64:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:3F:4B:9D:E6:B8:53:EA:24:23:1F:F6:31:4B:4D:42:E4:83:11
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1e:ce:7a:e0:16:7f:ea:d5:50:ab:6c:47:4a:35:66:93:07:
3f:65:c3:89:6e:1b:a8:c0:03:28:6b:df:c7:4a:f1:37:9e:fc:
75:de:e3:5d:0b:0f:49:c6:bf:a2:33:a4:14:63:6c:92:c2:9c:
52:a2:cd:0b:d7:47:75:e8:67:59:0d:f0:37:af:21:9f:a6:67:
3a:da:64:ac:9e:12:7a:36:ea:a3:46:28:40:7c:77:35:eb:2e:
1f:df:33:67:2d:9d:b6:f2:9a:45:29:fa:cb:32:c9:4d:00:e8:
04:a9:68:f7:0e:fe:b5:3b:58:bd:8d:3a:cf:4e:0a:d5:cb:77:
86:97:33:aa:c3:6b:51:5f:5e:77:a3:1d:56:be:69:df:65:a8:
2f:f7:be:7d:f0:8f:5d:db:2d:44:48:6f:13:d3:77:87:e4:06:
3d:04:3a:68:87:ab:51:35:9b:e0:3e:b8:de:18:41:76:ce:5d:
47:3e:61:f8:78:63:4b:1d:a1:c3:59:3e:2e:66:e8:71:dc:0d:
ee:90:b3:88:09:da:83:52:f2:9f:d0:3a:69:99:fd:96:7d:26:
0d:89:1f:c6:09:f0:12:5e:06:54:1f:e9:26:f2:b3:f5:77:28:
35:ef:cf:ec:fd:a8:5c:d2:71:7a:70:f5:05:b9:23:9d:a0:df:
da:9c:99:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqM9PkxajpgMGEz8EZ11VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5
NmRmYWYwHhcNMjYwMzI2MDEwMTA3WhcNMjYwMzI3MDEwMTA3WjAzMTEwLwYDVQQD
Eyg0NGU4M2Y0YjlkZTZiODUzZWEyNDIzMWZmNjMxNGI0ZDQyZTQ4MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKlUwPrc1uBxQSpfM+zKOnUsZUab
fHOfpdQrgEO3iucPUxJ4V/GyMzoQ3JqCIbGeK5RD+h0mxTUT68abyo22PGZUh/ya
rejVf6pL73V35PuoxKPmN98xJlZ+hxKTX1pTqieQiD9PSNRE7Pi9iPeI3s3uiGxp
74hMEiOSkyRE0sB4NwaEPBQybr28l8rDtLPisR3vfEbc7ahDhicysK2Xa6RABSzW
uykp4rJfHG5ndGJmj3J2+M/nAGE0Z7j73Unlb1uD+JEmPTuotNsSz3yz8zw4ogzo
us8dC/O18VCHb977qS43ibw5ezRZqKpc/9iFda0Sum0xoub8l0kMz2R0ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEToP0ud5rhT6iQjH/YxS01C5IMRMB8GA1UdIwQY
MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt
NzBkNTljYzRmN2NjLzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj
LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx7OeuAW
f+rVUKtsR0o1ZpMHP2XDiW4bqMADKGvfx0rxN578dd7jXQsPSca/ojOkFGNsksKc
UqLNC9dHdehnWQ3wN68hn6ZnOtpkrJ4Sejbqo0YoQHx3NesuH98zZy2dtvKaRSn6
yzLJTQDoBKlo9w7+tTtYvY06z04K1ct3hpczqsNrUV9ed6MdVr5p32WoL/e+ffCP
XdstREhvE9N3h+QGPQQ6aIerUTWb4D643hhBds5dRz5h+HhjSx2hw1k+LmbocdwN
7pCziAnag1Lyn9A6aZn9ln0mDYkfxgnwEl4GVB/pJvKz9XcoNe/P7P2oXNJxenD1
BbkjnaDf2pyZ2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:45 2026 by rpki-client