Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: 3KG7EWCOggFOXKe+qztIioERiX9mzPgqpRtzJNcLPkY=
Subject key identifier: F0:09:FD:D5:CA:BB:DC:FE:25:89:E6:1E:86:DB:BD:6D:CE:BE:D0:85
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019D2696199D2F150F6438966AE6721E2ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: axf41M3+mrAGv49AGDe99/uA2MhpnJ/i43pFrGXJmKo=)
2: Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (hash: mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=)
3: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (hash: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:19:9d:2f:15:0f:64:38:96:6a:e6:72:1e:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=f009fdd5cabbdcfe2589e61e86dbbd6dcebed085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:e3:be:e4:3e:1e:b8:a1:4f:4c:a4:5b:2a:
b2:1a:5b:33:4d:d2:74:41:15:6b:14:07:a9:3a:44:
d5:c2:41:92:61:53:d7:46:15:dd:98:02:e3:eb:31:
4d:cf:b6:4f:ae:79:84:e0:67:66:9e:71:b0:d3:20:
0f:e9:01:1a:3a:29:b4:79:0f:2c:54:49:5b:93:a8:
74:96:7b:da:bb:b6:de:70:6e:79:ea:36:77:05:31:
bc:4a:37:90:44:06:c3:36:46:7a:77:e9:e3:cc:2b:
1b:38:59:79:44:b0:ed:a9:01:b3:17:8d:36:e1:82:
a0:31:c5:5e:9b:3d:7d:ac:a2:6e:26:f0:b4:9c:c0:
ec:39:82:f9:37:2b:7f:78:5a:87:d6:f7:03:1d:39:
9b:6a:12:5c:68:f1:02:00:5e:81:24:8c:90:03:b7:
27:72:83:fa:c8:78:a5:60:3c:40:fd:42:6a:eb:91:
af:27:77:61:4b:f1:f3:f9:73:53:f7:76:10:05:67:
08:65:4e:09:65:a9:4c:36:ab:6b:8f:65:12:f7:b5:
a4:f3:1e:4a:20:7a:ff:1d:1d:0d:4b:73:42:8a:17:
2d:c5:d9:82:28:d1:2c:9c:58:b9:6f:bf:b5:92:d9:
8c:3d:23:71:9f:07:c6:04:df:d3:fc:48:e9:0c:c1:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:FD:D5:CA:BB:DC:FE:25:89:E6:1E:86:DB:BD:6D:CE:BE:D0:85
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3c:f3:ce:2e:68:70:cb:83:ff:15:d7:a6:92:d2:c6:3f:c7:
90:97:8b:c5:ea:24:b0:f5:5f:e8:69:cf:27:cd:f9:3f:92:dd:
1e:99:8c:60:1f:f9:80:5f:ba:e5:22:5d:80:fe:c1:18:50:1f:
1e:3e:69:30:0d:3d:ae:8c:c6:e3:6b:63:48:1e:63:82:a6:ec:
6b:b4:a5:7d:c1:18:56:dc:a0:eb:3b:6a:69:e0:f7:41:a7:46:
a1:b4:19:54:3d:c2:e9:22:22:f2:7b:ca:a2:a9:be:bd:b7:df:
0d:f8:c1:70:93:61:9f:66:cd:1b:e0:4f:d2:95:0b:51:b8:8d:
f7:95:a2:8e:4f:88:4e:94:fb:71:b1:01:25:08:f1:45:0a:8b:
31:07:3f:cd:25:a7:85:25:56:95:ee:69:15:f6:92:4b:42:77:
11:60:ae:18:33:e9:1a:f4:13:f7:6b:75:37:ca:2f:b6:3d:f8:
36:cf:c9:b3:fb:4c:43:fc:41:3f:35:f3:d9:64:4d:7a:25:e7:
e0:f4:8f:2c:df:29:61:91:2b:5d:f2:24:d3:da:ce:54:73:23:
fa:b3:a3:d0:3e:d1:8b:f0:e4:85:8f:40:2a:a7:04:4b:28:07:
5d:a6:bd:98:b9:c0:e8:68:7d:50:e6:ae:dc:e3:0c:7a:35:ee:
b7:ef:8c:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlhmdLxUPZDiWauZyHiq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3
MDc3NjUwHhcNMjYwMzI1MjAwMTA0WhcNMjYwMzI2MjAwMTA0WjAzMTEwLwYDVQQD
EyhmMDA5ZmRkNWNhYmJkY2ZlMjU4OWU2MWU4NmRiYmQ2ZGNlYmVkMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvPjvuQ+HrihT0ykWyqyGlszTdJ0
QRVrFAepOkTVwkGSYVPXRhXdmALj6zFNz7ZPrnmE4GdmnnGw0yAP6QEaOim0eQ8s
VElbk6h0lnvau7becG556jZ3BTG8SjeQRAbDNkZ6d+njzCsbOFl5RLDtqQGzF402
4YKgMcVemz19rKJuJvC0nMDsOYL5Nyt/eFqH1vcDHTmbahJcaPECAF6BJIyQA7cn
coP6yHilYDxA/UJq65GvJ3dhS/Hz+XNT93YQBWcIZU4JZalMNqtrj2US97Wk8x5K
IHr/HR0NS3NCihctxdmCKNEsnFi5b7+1ktmMPSNxnwfGBN/T/EjpDMESkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAJ/dXKu9z+JYnmHobbvW3OvtCFMB8GA1UdIwQY
MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt
ZmI5OTUzYzA3ZjE1LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1
LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTzzzi5o
cMuD/xXXppLSxj/HkJeLxeoksPVf6GnPJ835P5LdHpmMYB/5gF+65SJdgP7BGFAf
Hj5pMA09rozG42tjSB5jgqbsa7SlfcEYVtyg6ztqaeD3QadGobQZVD3C6SIi8nvK
oqm+vbffDfjBcJNhn2bNG+BP0pULUbiN95Wijk+ITpT7cbEBJQjxRQqLMQc/zSWn
hSVWle5pFfaSS0J3EWCuGDPpGvQT92t1N8ovtj34Ns/Js/tMQ/xBPzXz2WRNeiXn
4PSPLN8pYZErXfIk09rOVHMj+rOj0D7Ri/DkhY9AKqcESygHXaa9mLnA6Gh9UOau
3OMMejXut++Mqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:16 2026 by rpki-client