Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: x3JyKhN3dsgE/654hmw6ti67hn6sJ15O9TK/uIFMrrU=
Subject key identifier: 8C:A7:C9:9B:8C:3A:93:7C:C5:00:64:97:F5:3E:E6:F5:DD:9D:AD:97
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019D269653FD60CD9F9F9F101C94142F5151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
2: MU2cFzTcb8lIJMfMgnm6TQDjjeg.asa (hash: m5V+hLl9pdXsW7lYUZxethkseNfictsJUrZQ0SPq8rg=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: VyEU6j3yEHgHt4zgFp4qOO8p0FplHjKdiDO+L6zy+Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:53:fd:60:cd:9f:9f:9f:10:1c:94:14:2f:51:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=8ca7c99b8c3a937cc5006497f53ee6f5dd9dad97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:a8:0b:ea:e9:66:16:eb:b4:d2:da:e6:3b:
5c:92:c7:c6:dc:97:0d:cd:03:75:9e:0b:b6:a8:c0:
1c:ca:79:f6:04:fb:a6:55:7c:76:e8:8d:41:9c:e3:
41:f7:89:89:1e:e2:48:82:f4:2e:ab:ff:32:46:94:
7b:b0:da:8a:25:8f:b8:10:a5:d8:7e:fa:19:57:bf:
b9:39:e3:f7:00:73:7b:90:ec:5b:a4:85:29:70:24:
09:75:d2:10:4d:f7:00:5c:c4:da:2e:20:9b:82:da:
67:92:83:5f:2b:27:5b:97:c7:4a:bf:d4:8a:f4:cf:
8b:4d:41:b5:00:c0:93:99:b5:d3:98:d2:96:9a:3e:
0c:c2:90:15:7d:53:7f:be:dc:ab:d2:c6:7e:4e:08:
41:32:62:83:de:74:03:de:4a:f4:de:98:91:09:44:
ff:14:d3:dc:63:ac:44:00:67:9b:21:b1:cf:84:79:
a1:7d:ed:08:a7:6b:1c:00:45:74:ec:64:6c:52:5a:
b3:cd:98:a7:64:73:f6:46:33:22:f3:88:72:57:d2:
6c:29:d9:d6:1c:b6:d9:cf:ac:f1:ae:1e:f7:0c:73:
4e:11:1a:74:9b:d1:7b:d4:40:74:4b:c1:3a:94:b3:
f0:95:13:a0:df:a5:73:f9:cd:27:35:b9:d6:16:e8:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:C9:9B:8C:3A:93:7C:C5:00:64:97:F5:3E:E6:F5:DD:9D:AD:97
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:06:c7:0b:b1:a9:c6:cd:8d:be:89:61:b4:eb:f7:fa:ed:
d9:09:c8:44:5b:f5:30:b9:6b:59:95:5a:0b:8d:70:39:65:67:
29:35:72:51:33:db:73:34:f2:01:01:8c:ea:00:04:ff:34:b1:
d3:f8:e8:0f:2b:72:7d:d8:42:72:e4:2b:e1:bf:32:21:59:b7:
fc:8e:d7:8d:c1:8c:6e:30:cf:53:db:fd:03:30:f1:15:3a:31:
79:53:7f:13:a6:e5:7a:cb:e3:bf:e5:a9:5b:51:08:b3:f4:25:
8d:57:37:2f:69:b5:41:6d:14:b6:83:95:d0:02:df:e1:4f:0d:
28:19:04:03:46:fe:84:cb:34:96:dc:db:b6:ab:d4:1a:37:27:
34:00:41:d6:56:34:9b:37:c4:0b:e7:98:e6:67:9b:6b:81:20:
07:82:34:9e:6f:55:9f:66:90:8a:e2:25:54:cd:d7:1b:eb:a7:
6f:9c:01:45:b1:97:97:e9:0f:9f:5d:cb:59:0e:59:3e:b9:81:
fa:70:65:28:75:1e:37:c2:b0:f4:83:08:b2:8c:cf:81:a4:69:
cc:8a:c5:56:3f:ec:c6:5f:64:9f:b4:b6:eb:32:c6:ed:8b:01:
0e:89:7e:2d:c9:73:52:16:a4:78:c2:73:60:20:79:73:70:4b:
a8:bc:d3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllP9YM2fn58QHJQUL1FRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0
MDFhMzcwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD
Eyg4Y2E3Yzk5YjhjM2E5MzdjYzUwMDY0OTdmNTNlZTZmNWRkOWRhZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCWoC+rpZhbrtNLa5jtcksfG3JcN
zQN1ngu2qMAcynn2BPumVXx26I1BnONB94mJHuJIgvQuq/8yRpR7sNqKJY+4EKXY
fvoZV7+5OeP3AHN7kOxbpIUpcCQJddIQTfcAXMTaLiCbgtpnkoNfKydbl8dKv9SK
9M+LTUG1AMCTmbXTmNKWmj4MwpAVfVN/vtyr0sZ+TghBMmKD3nQD3kr03piRCUT/
FNPcY6xEAGebIbHPhHmhfe0Ip2scAEV07GRsUlqzzZinZHP2RjMi84hyV9JsKdnW
HLbZz6zxrh73DHNOERp0m9F71EB0S8E6lLPwlROg36Vz+c0nNbnWFugTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIynyZuMOpN8xQBkl/U+5vXdna2XMB8GA1UdIwQY
MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt
NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5
LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEsGxwux
qcbNjb6JYbTr9/rt2QnIRFv1MLlrWZVaC41wOWVnKTVyUTPbczTyAQGM6gAE/zSx
0/joDytyfdhCcuQr4b8yIVm3/I7XjcGMbjDPU9v9AzDxFToxeVN/E6blesvjv+Wp
W1EIs/QljVc3L2m1QW0UtoOV0ALf4U8NKBkEA0b+hMs0ltzbtqvUGjcnNABB1lY0
mzfEC+eY5meba4EgB4I0nm9Vn2aQiuIlVM3XG+unb5wBRbGXl+kPn13LWQ5ZPrmB
+nBlKHUeN8Kw9IMIsozPgaRpzIrFVj/sxl9kn7S26zLG7YsBDol+LclzUhakeMJz
YCB5c3BLqLzTog==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:12 2026 by rpki-client