Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: srxRzHOyn0qai//h3pvGEIOtGwDBHirupEo8uJXAxz4=
Subject key identifier: 50:6B:71:B1:5B:88:20:01:17:A0:8A:4F:D0:68:59:34:26:3D:08:E5
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 019D27DF57C4BA34CCFBE67468781A870921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: TBovewG4XNfT-AXXW_cdOvWTQ_s.roa (hash: YA6Ko3u2RNnOBu+b0YRR5au4lqdCjuXBaHqeZND+6cM=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: aZOXewqJoa0eQPrpBs5bRfjMNoY7D4SFUZWphs62YJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:57:c4:ba:34:cc:fb:e6:74:68:78:1a:87:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=506b71b15b88200117a08a4fd0685934263d08e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:d5:37:40:1a:34:c3:fa:69:bf:f9:0b:5f:
93:68:2b:94:4c:9c:04:b3:31:f0:4a:53:61:37:85:
04:54:a4:b3:fd:5d:84:5b:7f:95:85:fb:64:8e:03:
51:e4:bc:28:8d:e4:c5:ed:db:e3:79:23:d1:78:c6:
17:b1:e2:42:a8:65:89:5d:b5:3f:48:f4:0e:11:b4:
df:6f:d3:64:53:ed:49:14:89:bb:88:55:66:bb:5f:
26:b0:19:7d:ac:b7:25:da:ea:2e:6c:c4:7e:0c:9a:
65:25:1f:49:b6:29:d7:fb:a8:65:da:c1:3a:73:c4:
3a:ac:35:4d:6d:0f:a3:d9:03:f3:fe:5c:e3:0a:c7:
e9:f4:a9:7a:74:c9:12:5f:e6:11:fc:f9:f4:90:c8:
31:60:68:39:67:22:3f:18:75:62:73:23:d7:89:ff:
a2:12:dd:6e:d5:d9:fb:65:a0:be:38:8f:3a:95:eb:
c4:e4:ce:66:f2:50:fa:8d:81:c8:f2:b9:4c:3b:15:
ec:63:f3:88:fa:d5:2e:2c:4e:fe:9f:31:f2:ea:35:
eb:41:28:99:7a:bb:3e:46:13:f3:a8:2c:fc:21:4b:
ed:1a:7f:e8:78:cb:cf:f6:b9:9f:45:4c:fd:a3:04:
e6:67:a7:7d:33:2c:21:44:57:95:b1:b2:1f:da:ec:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:71:B1:5B:88:20:01:17:A0:8A:4F:D0:68:59:34:26:3D:08:E5
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:64:0e:17:af:46:26:a8:7c:7c:0d:a6:07:86:43:00:76:f7:
94:4d:e3:4e:2c:c3:f6:8a:86:22:83:b7:52:c3:d9:3c:d1:1d:
e5:44:bc:6b:d9:4f:e1:0c:ae:62:c4:f0:4a:c1:ff:f6:c2:78:
44:84:ae:3d:f8:86:b8:13:30:7e:b3:5c:ac:d6:81:7a:96:e6:
b3:c9:78:58:c4:9c:b0:85:c3:5d:37:eb:44:b4:e4:c8:b1:c2:
51:73:fc:ee:48:aa:cc:92:24:27:28:02:73:6b:86:ff:58:2e:
3e:df:1f:a3:68:47:1c:1a:6c:1a:30:2a:26:ce:b5:11:d0:df:
fa:16:06:72:d5:34:4a:f4:69:cd:12:14:c3:e5:b2:c0:0b:0a:
d7:04:0d:ee:c3:a2:5d:82:e6:35:a4:22:ee:22:da:cc:f1:eb:
d3:82:00:64:b9:52:02:69:14:1f:bd:60:58:a2:9d:ac:ed:a8:
a9:a1:5b:bf:51:c9:4e:b3:43:ac:60:81:fb:e7:f6:d6:e1:07:
f0:2d:4b:52:70:4f:4f:1f:75:a0:79:c5:b4:11:c5:e1:5e:cc:
a2:10:47:d7:db:7a:bf:d3:86:00:5c:ba:41:06:55:4b:fc:92:
f9:ce:f5:b9:5e:fe:80:d6:e1:3c:c7:fd:84:71:53:54:2f:8e:
27:f0:3a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n31fEujTM++Z0aHgahwkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzFhZDE2NzZhMmEzMmE0NWEwY2YzOTJmN2Y5YzVlYTY4
ZTJkZWEwHhcNMjYwMzI2MDIwMDQxWhcNMjYwMzI3MDIwMDQxWjAzMTEwLwYDVQQD
Eyg1MDZiNzFiMTViODgyMDAxMTdhMDhhNGZkMDY4NTkzNDI2M2QwOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpDVN0AaNMP6ab/5C1+TaCuUTJwE
szHwSlNhN4UEVKSz/V2EW3+VhftkjgNR5LwojeTF7dvjeSPReMYXseJCqGWJXbU/
SPQOEbTfb9NkU+1JFIm7iFVmu18msBl9rLcl2uoubMR+DJplJR9JtinX+6hl2sE6
c8Q6rDVNbQ+j2QPz/lzjCsfp9Kl6dMkSX+YR/Pn0kMgxYGg5ZyI/GHVicyPXif+i
Et1u1dn7ZaC+OI86levE5M5m8lD6jYHI8rlMOxXsY/OI+tUuLE7+nzHy6jXrQSiZ
ers+RhPzqCz8IUvtGn/oeMvP9rmfRUz9owTmZ6d9MywhRFeVsbIf2uzD3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBrcbFbiCABF6CKT9BoWTQmPQjlMB8GA1UdIwQY
MBaAFGvBrRZ2oqMqRaDPOS9/nF6mji3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDkt
ZWYxYWFhYWJmZTJiLzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDktZWYxYWFhYWJmZTJi
LzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWQOF69G
Jqh8fA2mB4ZDAHb3lE3jTizD9oqGIoO3UsPZPNEd5US8a9lP4QyuYsTwSsH/9sJ4
RISuPfiGuBMwfrNcrNaBepbms8l4WMScsIXDXTfrRLTkyLHCUXP87kiqzJIkJygC
c2uG/1guPt8fo2hHHBpsGjAqJs61EdDf+hYGctU0SvRpzRIUw+WywAsK1wQN7sOi
XYLmNaQi7iLazPHr04IAZLlSAmkUH71gWKKdrO2oqaFbv1HJTrNDrGCB++f21uEH
8C1LUnBPTx91oHnFtBHF4V7MohBH19t6v9OGAFy6QQZVS/yS+c71uV7+gNbhPMf9
hHFTVC+OJ/A6Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:22 2026 by rpki-client