Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier: LXJiKBpt97+dPHNnpbPV7uqxXP06xDPq5cTsSPBaxDo=
Subject key identifier: 24:15:92:05:DB:51:B7:21:3D:3E:72:4F:6B:AB:C2:01:6E:FB:89:62
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial: 019D2AE0B7BF451F946304A95CA0622AFCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number: 0844
Signing time: Thu 26 Mar 2026 16:01:03 +0000
Manifest this update: Thu 26 Mar 2026 16:01:03 +0000
Manifest next update: Fri 27 Mar 2026 16:01:03 +0000
Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: tKm5M+87WOuL/imn+0JObRIDFO2AaDEsn6zB3JQiYG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b7:bf:45:1f:94:63:04:a9:5c:a0:62:2a:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Validity
Not Before: Mar 26 16:01:03 2026 GMT
Not After : Mar 27 16:01:03 2026 GMT
Subject: CN=24159205db51b7213d3e724f6babc2016efb8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:64:a6:49:81:c0:f4:3d:72:18:8f:80:38:
7c:00:44:b9:a6:8a:89:84:d6:4f:7b:b8:21:37:ce:
37:e6:fc:1c:e5:a7:e7:54:09:f7:8d:0b:4b:44:e7:
84:78:0c:a3:ef:6c:4e:e8:45:38:5d:d9:84:87:28:
b5:80:ab:7e:af:7d:87:b1:83:19:63:40:00:86:a7:
70:34:2f:f6:54:0b:d1:e8:55:5c:c1:4f:46:2a:4d:
e5:f8:56:ce:31:70:f0:e3:1a:90:35:6c:f7:b4:34:
1d:d7:48:dd:4a:9a:6e:e1:69:53:4f:86:55:26:f6:
16:a9:34:c9:88:f3:ee:9b:ef:4d:47:27:90:d6:bd:
1c:d6:bb:86:80:5f:9a:84:8c:85:b2:7a:b5:03:8d:
8c:7d:af:3b:38:fd:32:9b:a7:19:46:65:8e:ed:79:
80:72:2b:08:29:5a:d5:54:de:09:75:c3:1c:c9:72:
60:b8:66:a4:27:9a:5b:4f:35:f0:bd:14:84:5d:e1:
f5:b9:32:c7:49:a9:b3:4f:be:bb:c0:4f:bc:74:40:
c0:cf:9c:f4:26:93:c0:eb:0a:ba:f3:f4:34:8e:54:
aa:7f:fd:b5:9e:d3:39:3d:4d:43:f8:d3:de:ed:0e:
f8:3b:16:83:95:8e:f3:b4:eb:d6:6d:ec:11:c4:a7:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:15:92:05:DB:51:B7:21:3D:3E:72:4F:6B:AB:C2:01:6E:FB:89:62
X509v3 Authority Key Identifier:
keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:93:30:27:96:d9:bc:4b:d0:70:7d:11:f4:41:ae:95:f7:82:
5c:84:90:36:da:97:6f:14:74:b3:81:56:28:a0:90:6e:e3:19:
64:57:f0:11:cf:4b:e7:61:cd:16:ea:a8:c5:38:3f:50:c2:f5:
97:64:39:e1:21:c4:8f:5f:e9:54:a4:40:3f:44:7d:25:c1:d0:
9c:66:34:7a:62:ca:3e:d6:81:8c:e9:8e:d0:13:3f:be:15:6b:
59:2d:59:33:f7:8c:7f:69:12:ee:75:2d:a6:aa:c3:aa:cc:8f:
3a:4f:5e:86:7a:f2:76:50:35:0c:69:85:7c:3a:06:5e:5f:f9:
bb:09:04:4a:e7:ab:40:2e:0d:aa:77:fc:49:f5:40:e8:57:3a:
ff:01:50:e6:08:f0:ec:7c:36:d8:f0:c1:42:7b:04:30:3a:5b:
d7:19:bb:04:05:77:a3:b7:18:09:ae:e4:7a:63:21:12:cc:36:
68:79:ba:e6:f6:03:b9:1b:b5:8a:20:31:68:d9:04:0a:38:59:
da:59:16:77:23:e5:e2:9d:ff:ef:a6:38:73:01:0c:78:45:87:
7b:b8:da:d0:96:c0:d0:4b:11:76:a7:3f:e8:03:32:ea:e6:69:
51:e4:8a:7c:fc:e1:30:5b:8b:5f:4f:c4:4d:48:ee:06:32:b7:
3d:4c:1a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Le/RR+UYwSpXKBiKvygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1
N2NjOWMwHhcNMjYwMzI2MTYwMTAzWhcNMjYwMzI3MTYwMTAzWjAzMTEwLwYDVQQD
EygyNDE1OTIwNWRiNTFiNzIxM2QzZTcyNGY2YmFiYzIwMTZlZmI4OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq49kpkmBwPQ9chiPgDh8AES5poqJ
hNZPe7ghN8435vwc5afnVAn3jQtLROeEeAyj72xO6EU4XdmEhyi1gKt+r32HsYMZ
Y0AAhqdwNC/2VAvR6FVcwU9GKk3l+FbOMXDw4xqQNWz3tDQd10jdSppu4WlTT4ZV
JvYWqTTJiPPum+9NRyeQ1r0c1ruGgF+ahIyFsnq1A42Mfa87OP0ym6cZRmWO7XmA
cisIKVrVVN4JdcMcyXJguGakJ5pbTzXwvRSEXeH1uTLHSamzT767wE+8dEDAz5z0
JpPA6wq68/Q0jlSqf/21ntM5PU1D+NPe7Q74OxaDlY7ztOvWbewRxKeMeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQVkgXbUbchPT5yT2urwgFu+4liMB8GA1UdIwQY
MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt
MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk
LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5MwJ5bZ
vEvQcH0R9EGulfeCXISQNtqXbxR0s4FWKKCQbuMZZFfwEc9L52HNFuqoxTg/UML1
l2Q54SHEj1/pVKRAP0R9JcHQnGY0emLKPtaBjOmO0BM/vhVrWS1ZM/eMf2kS7nUt
pqrDqsyPOk9ehnrydlA1DGmFfDoGXl/5uwkESuerQC4Nqnf8SfVA6Fc6/wFQ5gjw
7Hw22PDBQnsEMDpb1xm7BAV3o7cYCa7kemMhEsw2aHm65vYDuRu1iiAxaNkECjhZ
2lkWdyPl4p3/76Y4cwEMeEWHe7ja0JbA0EsRdqc/6AMy6uZpUeSKfPzhMFuLX0/E
TUjuBjK3PUwaHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:12 2026 by rpki-client