Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: TPjN0VYMf6lX363GmltsditVdEnGH6Ij3VXS/RfjFAY=
Subject key identifier: A4:D1:7E:11:98:2F:8A:10:11:64:4E:95:C7:BF:C4:B7:57:89:DE:5A
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019D281691A94C9D3C1FE2E87B3FCF570C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0806
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: a+CwRMawAXhK0sHgCPA+Jx7N7w/Rl2SZItCKQl7NvBE=)
2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:91:a9:4c:9d:3c:1f:e2:e8:7b:3f:cf:57:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=a4d17e11982f8a1011644e95c7bfc4b75789de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:e6:7e:86:5b:16:eb:c3:28:ab:b6:74:31:
46:96:b4:fc:66:06:e5:3c:7e:7d:6a:ce:f0:1d:3e:
07:48:03:eb:2c:eb:35:3c:9a:a3:04:4f:d5:78:31:
2d:db:df:05:8a:83:d8:e7:60:5c:c2:e9:fe:84:a8:
cb:ff:0c:90:b9:b8:00:97:b7:17:fe:1a:60:f5:fb:
60:c9:ea:0f:7b:83:3e:37:f7:b7:ee:99:76:5c:a1:
9b:89:2d:2b:c5:7e:3d:3f:a6:e8:13:7c:4e:33:55:
a3:aa:d4:94:0b:9c:5c:f1:6a:50:e1:b9:25:d7:ae:
98:17:c7:f6:c7:50:b7:00:70:e6:1d:04:bd:f6:a6:
d9:86:8f:0d:fc:ac:9f:7b:9b:7b:96:0b:9e:28:c3:
6a:09:45:b8:50:0d:6d:0c:cb:58:e4:34:6c:07:0c:
58:85:3c:9b:d0:b9:bf:e5:0d:a8:b1:02:f6:7d:23:
b2:bf:79:1d:03:0e:72:19:43:a7:da:74:0b:a7:c0:
8d:a9:36:41:91:b3:3e:11:9d:93:58:64:51:78:c4:
a4:5c:7f:9b:c0:50:23:dd:7c:cf:6c:cd:7f:0f:6d:
78:5f:3f:e6:25:52:c1:b5:4f:bc:e2:61:f9:77:0b:
44:c9:c3:33:99:d2:5d:b9:03:b8:10:a6:1a:7b:9a:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:7E:11:98:2F:8A:10:11:64:4E:95:C7:BF:C4:B7:57:89:DE:5A
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:37:d3:a8:9e:b7:67:56:86:40:f0:87:48:6f:34:71:58:55:
3e:6b:c3:d5:88:cc:c7:e1:74:d3:7f:54:79:f3:e5:01:bb:8e:
6a:2c:ae:f0:33:3a:09:71:fd:53:4f:3d:50:18:92:61:50:91:
3e:2e:c7:6e:48:06:c8:8e:0a:0e:5b:04:94:e0:21:84:34:70:
6d:c3:17:84:46:50:d0:39:d8:1e:95:03:f5:ad:fd:c0:f2:4a:
1d:46:3a:65:b9:77:27:60:2b:4f:50:bf:89:d0:ce:bc:1c:c8:
6b:d6:1f:2b:e7:47:62:ea:f7:be:11:2b:a7:57:c0:93:60:55:
a2:24:af:31:06:0b:e9:78:ab:d9:0d:c7:93:b2:69:9e:b9:ea:
7f:a9:d9:9b:7e:e6:d3:2a:46:25:23:5e:dd:90:8d:d4:3e:a2:
72:d0:89:8c:ca:06:13:ae:9b:23:48:59:2e:ad:fa:36:a3:ec:
73:fc:0c:14:f6:e3:8c:6d:32:40:f7:0c:e1:cc:c5:6d:f5:5d:
de:94:ad:63:b6:d7:21:a6:64:07:19:85:63:37:be:f5:f5:ee:
e2:35:04:5b:ef:9e:01:27:37:60:56:e7:e8:fb:0d:5b:7d:66:
78:52:66:56:a0:13:c0:d0:01:7c:16:2c:87:92:5f:7d:9f:25:
40:6c:53:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFpGpTJ08H+Loez/PVwwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjYwMzI2MDMwMTAwWhcNMjYwMzI3MDMwMTAwWjAzMTEwLwYDVQQD
EyhhNGQxN2UxMTk4MmY4YTEwMTE2NDRlOTVjN2JmYzRiNzU3ODlkZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhXmfoZbFuvDKKu2dDFGlrT8Zgbl
PH59as7wHT4HSAPrLOs1PJqjBE/VeDEt298FioPY52Bcwun+hKjL/wyQubgAl7cX
/hpg9ftgyeoPe4M+N/e37pl2XKGbiS0rxX49P6boE3xOM1WjqtSUC5xc8WpQ4bkl
166YF8f2x1C3AHDmHQS99qbZho8N/Kyfe5t7lgueKMNqCUW4UA1tDMtY5DRsBwxY
hTyb0Lm/5Q2osQL2fSOyv3kdAw5yGUOn2nQLp8CNqTZBkbM+EZ2TWGRReMSkXH+b
wFAj3XzPbM1/D214Xz/mJVLBtU+84mH5dwtEycMzmdJduQO4EKYae5q1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTRfhGYL4oQEWROlce/xLdXid5aMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADfTqJ63
Z1aGQPCHSG80cVhVPmvD1YjMx+F0039UefPlAbuOaiyu8DM6CXH9U089UBiSYVCR
Pi7HbkgGyI4KDlsElOAhhDRwbcMXhEZQ0DnYHpUD9a39wPJKHUY6Zbl3J2ArT1C/
idDOvBzIa9YfK+dHYur3vhErp1fAk2BVoiSvMQYL6Xir2Q3Hk7Jpnrnqf6nZm37m
0ypGJSNe3ZCN1D6ictCJjMoGE66bI0hZLq36NqPsc/wMFPbjjG0yQPcM4czFbfVd
3pStY7bXIaZkBxmFYze+9fXu4jUEW++eASc3YFbn6PsNW31meFJmVqATwNABfBYs
h5JffZ8lQGxTGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:19 2026 by rpki-client