Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: 7/4/1j/BsOIYGCYL06z31dtv+JSfyVudfLkwp84eFLE=
Subject key identifier: 7D:75:75:62:E8:E3:57:67:48:9F:0F:35:69:5E:E3:B3:86:20:42:5F
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 019D265FC2C33D63E1FA524633DD2DCCB7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: w6ZnbbE1maJfjLo2NE0MtoXNUsfqdQEk0252/FitzYU=)
2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c2:c3:3d:63:e1:fa:52:46:33:dd:2d:cc:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=7d757562e8e35767489f0f35695ee3b38620425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:99:5f:85:0d:1d:99:ae:30:ab:72:7f:8a:
c0:46:88:5c:b3:ae:04:22:c6:30:5c:fa:8f:24:9b:
0c:d6:6d:48:05:8d:cf:96:fc:94:87:c0:be:e8:ff:
b9:7d:28:35:72:33:96:40:75:2a:2d:01:42:9d:62:
0f:96:c1:6b:6e:05:3a:5e:0a:db:1e:c6:92:18:65:
94:ac:94:9a:63:83:ca:43:11:2e:86:8c:9e:bc:f0:
e3:56:37:a5:cf:95:f2:ca:83:24:7d:8a:05:4c:db:
79:9f:84:37:e8:7c:f8:8b:e0:91:5c:94:5a:bd:98:
aa:7c:71:f8:f3:f5:6a:fa:14:f8:8a:05:90:de:48:
d2:22:79:23:fa:da:57:d4:c6:e0:87:7d:ea:63:ce:
06:fd:b8:e4:ad:40:03:61:e9:3a:df:d4:87:2d:ee:
b3:33:20:cf:66:6f:e8:71:e7:39:3a:0e:b3:28:9c:
90:eb:a6:24:54:c7:f7:ef:3e:f5:dd:6e:19:22:c0:
1a:60:f5:50:cb:78:58:78:7f:8e:09:23:63:23:16:
4c:8f:a5:30:42:da:2e:5b:d5:5c:fc:de:f9:9c:1b:
73:7c:68:cb:3e:92:21:fe:a7:6c:c2:5a:c1:0a:4d:
4b:c9:cf:8f:cc:be:bf:85:e7:5f:11:ff:e3:45:31:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:75:75:62:E8:E3:57:67:48:9F:0F:35:69:5E:E3:B3:86:20:42:5F
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3f:ec:82:8b:bf:80:14:87:b9:84:b9:d6:e6:9c:17:1a:78:
fa:44:b4:76:e3:37:a0:8a:36:46:14:98:11:54:8e:1c:6f:d9:
ba:e1:54:20:79:83:39:7b:97:ed:27:dc:67:a0:32:90:28:1c:
be:18:00:3a:00:17:8b:2f:82:26:d1:b4:92:e7:e5:d6:84:a7:
18:4f:dd:7b:25:6b:87:cb:2a:78:89:d6:12:09:18:37:6f:a5:
14:c4:62:3f:1a:63:bb:08:64:76:02:5c:40:d9:06:9a:c9:57:
79:0d:2c:fd:45:38:b5:04:c6:50:7c:45:2a:7a:9c:57:97:3c:
b7:1d:69:e6:12:bb:8b:02:ed:3b:46:69:10:6f:5e:df:ca:25:
ff:61:15:36:ac:f9:85:2f:89:20:fd:2d:00:95:5c:0d:a5:a5:
a0:25:b3:65:70:d9:e5:ab:df:ef:1a:cf:7d:3f:57:37:f9:6f:
f7:12:ce:7e:ab:c3:32:ae:2f:0d:51:3a:74:9e:18:c6:9f:fb:
c1:a1:17:3e:1e:21:85:17:49:34:c3:d7:63:03:bf:c7:55:28:
e0:b0:eb:47:a7:9a:bf:f1:a8:df:93:be:a7:31:48:b5:10:9a:
13:c6:f0:16:dd:2e:15:e2:bd:ee:bc:74:b3:98:fc:8d:9d:ba:
ab:12:27:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8LDPWPh+lJGM90tzLerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWY4YmI5OGU0MDU1MzllYTk4MzM4NGZhZmE4MmIyYjRi
NzE3MjQwHhcNMjYwMzI1MTkwMTQzWhcNMjYwMzI2MTkwMTQzWjAzMTEwLwYDVQQD
Eyg3ZDc1NzU2MmU4ZTM1NzY3NDg5ZjBmMzU2OTVlZTNiMzg2MjA0MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub6ZX4UNHZmuMKtyf4rARohcs64E
IsYwXPqPJJsM1m1IBY3PlvyUh8C+6P+5fSg1cjOWQHUqLQFCnWIPlsFrbgU6Xgrb
HsaSGGWUrJSaY4PKQxEuhoyevPDjVjelz5XyyoMkfYoFTNt5n4Q36Hz4i+CRXJRa
vZiqfHH48/Vq+hT4igWQ3kjSInkj+tpX1Mbgh33qY84G/bjkrUADYek639SHLe6z
MyDPZm/ocec5Og6zKJyQ66YkVMf37z713W4ZIsAaYPVQy3hYeH+OCSNjIxZMj6Uw
QtouW9Vc/N75nBtzfGjLPpIh/qdswlrBCk1Lyc+PzL6/hedfEf/jRTG/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH11dWLo41dnSJ8PNWle47OGIEJfMB8GA1UdIwQY
MBaAFPGvi7mOQFU56pgzhPr6grK0txckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQt
YTM5MzAzZDg1MDY2LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8yZWM0YjMtZTY1ZC00NjEyLTkzMDQtYTM5MzAzZDg1MDY2
LzEvOGEtTHVZNUFWVG5xbURPRS12cUNzclMzRnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz/sgou/
gBSHuYS51uacFxp4+kS0duM3oIo2RhSYEVSOHG/ZuuFUIHmDOXuX7SfcZ6AykCgc
vhgAOgAXiy+CJtG0kufl1oSnGE/deyVrh8sqeInWEgkYN2+lFMRiPxpjuwhkdgJc
QNkGmslXeQ0s/UU4tQTGUHxFKnqcV5c8tx1p5hK7iwLtO0ZpEG9e38ol/2EVNqz5
hS+JIP0tAJVcDaWloCWzZXDZ5avf7xrPfT9XN/lv9xLOfqvDMq4vDVE6dJ4Yxp/7
waEXPh4hhRdJNMPXYwO/x1Uo4LDrR6eav/Go35O+pzFItRCaE8bwFt0uFeK97rx0
s5j8jZ26qxInSQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:01 2026 by rpki-client