Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: n3S+WuOrlO5Vf8iIS0V6BsTWIVv30hdlCnwpeG7Hyzg=
Subject key identifier: C4:06:B5:4F:9C:32:38:AB:41:5F:36:C7:F7:8A:6C:38:88:92:06:E7
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 019D284DC40DAB2C6BBE8819DC5C0F3ADDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 0323
Signing time: Thu 26 Mar 2026 04:01:18 +0000
Manifest this update: Thu 26 Mar 2026 04:01:18 +0000
Manifest next update: Fri 27 Mar 2026 04:01:18 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: 9hUmImRW0XfXXCcLfSohUv5v8V0dfxlNUI60MmXrwTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c4:0d:ab:2c:6b:be:88:19:dc:5c:0f:3a:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Mar 26 04:01:18 2026 GMT
Not After : Mar 27 04:01:18 2026 GMT
Subject: CN=c406b54f9c3238ab415f36c7f78a6c38889206e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:0d:5b:25:91:ff:5d:33:02:e5:8c:5c:07:
c2:45:b3:8e:fc:0e:0e:29:88:5d:d1:a8:cb:ad:01:
99:2e:a9:0e:89:35:58:6f:e1:55:41:ca:cb:9d:15:
c7:f5:0d:e0:71:83:9f:d7:f8:73:38:62:0f:68:40:
6b:db:a2:ef:40:4a:33:ce:c5:f6:80:39:35:dc:2f:
dd:59:19:39:87:a3:02:da:de:df:ae:5d:f0:1d:f5:
d3:37:94:55:18:6d:6b:4c:63:1d:83:0b:f9:c3:6c:
17:e7:3d:86:76:41:d3:48:14:a7:a2:45:24:f9:af:
75:14:cc:0b:a9:b4:81:3d:98:73:52:2e:96:f9:28:
fd:66:fc:a1:67:95:03:cf:f1:e6:e4:51:d5:f9:e3:
ba:94:55:52:a9:94:68:13:48:d7:0d:a1:63:3c:62:
dd:e9:36:d6:dc:18:56:2b:71:a8:42:81:80:20:39:
34:f6:57:09:80:84:93:51:3c:e3:4f:24:1e:cc:fd:
39:08:34:f7:54:8f:77:4d:dc:de:5b:17:90:a0:75:
95:88:43:e9:9e:e3:e6:51:56:81:64:43:17:92:1c:
05:96:8a:ab:3a:f4:29:3d:5e:9e:57:e4:e7:9d:82:
56:60:f1:5f:62:a0:bd:42:b1:5d:65:f6:f8:50:04:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:B5:4F:9C:32:38:AB:41:5F:36:C7:F7:8A:6C:38:88:92:06:E7
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:9e:e9:d9:5a:74:f8:b9:82:dd:ef:e8:97:9d:eb:7d:eb:
db:b5:23:bf:c1:ea:29:df:f7:25:cc:ec:8c:9c:f8:44:1e:1d:
cb:d7:dd:7e:90:f3:7d:11:8d:e9:de:c2:bf:d4:d8:83:95:e5:
b5:12:bb:b7:7a:1d:84:f9:5a:a8:33:60:f1:f8:3a:55:0b:40:
f5:ca:66:b6:24:7c:6a:0d:2b:18:ea:39:3e:25:4c:d0:40:91:
97:39:c8:ff:09:c8:5b:05:9d:98:85:ff:2c:d5:72:5c:6e:d5:
9d:40:01:5b:97:c6:28:11:29:e9:14:ae:42:f2:48:2a:d7:ad:
92:18:ea:84:e7:5d:4a:33:e6:d8:ff:9e:d7:fa:25:60:2b:28:
a5:93:15:f6:74:cb:4b:27:a2:f2:27:06:28:8f:a6:e8:f0:42:
e0:79:03:9b:4e:8e:f5:18:15:1e:37:cb:22:d9:9c:e6:95:b3:
94:a1:06:f7:e3:ff:de:24:c3:83:f9:00:2f:bf:9e:cc:c0:94:
dd:09:59:7f:a5:4c:f2:d4:40:b8:f2:d2:6b:f2:0f:22:19:31:
6c:6c:0b:85:25:81:16:e3:82:42:a3:25:b7:02:76:56:03:7d:
bf:8c:48:2e:cd:e6:5c:26:68:0f:54:7a:4d:df:3d:dc:60:7e:
90:9c:19:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTcQNqyxrvogZ3FwPOt3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDQ1MzIwNDAzNzJhMWEwMWFjMDA4OTRiOWYwOGJkM2Zl
MWFkZTMwHhcNMjYwMzI2MDQwMTE4WhcNMjYwMzI3MDQwMTE4WjAzMTEwLwYDVQQD
EyhjNDA2YjU0ZjljMzIzOGFiNDE1ZjM2YzdmNzhhNmMzODg4OTIwNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bINWyWR/10zAuWMXAfCRbOO/A4O
KYhd0ajLrQGZLqkOiTVYb+FVQcrLnRXH9Q3gcYOf1/hzOGIPaEBr26LvQEozzsX2
gDk13C/dWRk5h6MC2t7frl3wHfXTN5RVGG1rTGMdgwv5w2wX5z2GdkHTSBSnokUk
+a91FMwLqbSBPZhzUi6W+Sj9ZvyhZ5UDz/Hm5FHV+eO6lFVSqZRoE0jXDaFjPGLd
6TbW3BhWK3GoQoGAIDk09lcJgISTUTzjTyQezP05CDT3VI93TdzeWxeQoHWViEPp
nuPmUVaBZEMXkhwFloqrOvQpPV6eV+TnnYJWYPFfYqC9QrFdZfb4UASc2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQGtU+cMjirQV82x/eKbDiIkgbnMB8GA1UdIwQY
MBaAFPIEUyBANyoaAawAiUufCL0/4a3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMt
MzQyNDllNjFhNDc0LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMtMzQyNDllNjFhNDc0
LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrme6dla
dPi5gt3v6Jed633r27Ujv8HqKd/3JczsjJz4RB4dy9fdfpDzfRGN6d7Cv9TYg5Xl
tRK7t3odhPlaqDNg8fg6VQtA9cpmtiR8ag0rGOo5PiVM0ECRlznI/wnIWwWdmIX/
LNVyXG7VnUABW5fGKBEp6RSuQvJIKtetkhjqhOddSjPm2P+e1/olYCsopZMV9nTL
Syei8icGKI+m6PBC4HkDm06O9RgVHjfLItmc5pWzlKEG9+P/3iTDg/kAL7+ezMCU
3QlZf6VM8tRAuPLSa/IPIhkxbGwLhSWBFuOCQqMltwJ2VgN9v4xILs3mXCZoD1R6
Td893GB+kJwZDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:27 2026 by rpki-client