Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: tUZgA1MHNKx6a5jFfvaYNRaz85LnnIH85JhsrNPHnSA=
Subject key identifier: B9:26:C6:52:4B:D4:64:1F:50:F8:0F:A8:E7:8E:AD:3D:56:6A:1B:2A
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 019D2B177E1179823C336298B9380E33C960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 17:00:52 +0000
Manifest this update: Thu 26 Mar 2026 17:00:52 +0000
Manifest next update: Fri 27 Mar 2026 17:00:52 +0000
Files and hashes: 1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: YclJvb+aWzOv6fTTgB5IFwPx9wM50AvTU3U7PjfJeus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:7e:11:79:82:3c:33:62:98:b9:38:0e:33:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Mar 26 17:00:52 2026 GMT
Not After : Mar 27 17:00:52 2026 GMT
Subject: CN=b926c6524bd4641f50f80fa8e78ead3d566a1b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:37:47:6a:c8:d4:3d:9d:0a:84:00:6c:be:
b7:e2:90:59:97:34:31:18:61:ac:ba:5f:37:99:77:
d0:a0:a3:82:bd:d7:aa:6b:79:f5:3f:e5:19:80:d5:
58:2e:0d:50:0d:16:3e:49:23:ac:16:a4:68:04:3b:
ea:ca:00:69:56:40:f2:8e:8e:64:9d:6e:e5:d0:eb:
0a:5a:72:81:4d:55:97:51:40:d6:0e:a0:18:5c:d9:
9f:13:7c:e9:89:c5:dd:02:cc:00:0d:9d:d6:ab:da:
05:85:6d:91:22:fa:8f:62:c4:55:54:c9:5b:69:2b:
9a:b4:4e:c9:22:ff:72:11:11:4e:ca:2d:e5:2f:56:
13:4a:e1:97:f8:f0:9d:ee:24:93:b6:e0:f0:4c:7a:
17:97:0a:bc:e4:13:9e:45:93:50:cb:28:fa:c7:1d:
d9:91:b1:b1:7b:ae:79:42:e0:85:64:e5:20:22:fa:
3d:a1:cb:23:97:3c:86:f8:c0:f3:c1:83:0c:97:27:
6f:d9:33:98:8d:66:bf:04:f9:48:f8:d3:ad:af:ba:
f9:4e:b7:cd:19:cd:c7:53:e5:38:ac:4c:b8:e9:80:
a2:89:3d:98:1c:6b:8d:34:18:0f:b5:1b:86:0d:99:
7b:bd:b2:a5:28:44:48:75:d8:25:82:ec:5a:a8:9f:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:26:C6:52:4B:D4:64:1F:50:F8:0F:A8:E7:8E:AD:3D:56:6A:1B:2A
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:73:80:60:18:1e:36:48:15:f8:e7:6a:f2:d3:7b:61:28:
a5:29:28:fa:94:79:0d:ce:5c:70:ae:63:ff:70:96:fb:61:fc:
9f:61:a8:1f:4f:e1:8b:89:77:29:a3:78:d9:be:59:0b:f2:eb:
b6:c3:9d:0e:83:2b:63:8f:54:d9:01:28:02:c1:a2:25:3a:20:
7c:47:ea:52:58:06:d6:6b:45:63:9e:68:b8:d3:9e:cc:08:72:
e6:62:5b:86:0c:22:bf:f3:89:2a:dc:a2:77:f5:aa:2c:46:f7:
51:40:17:76:6b:df:e8:a5:9b:7d:a4:e9:d0:0e:50:cd:11:74:
cd:26:8c:f4:17:00:20:c4:4e:fd:8a:e8:2c:22:37:a2:9e:48:
bb:14:76:e8:1c:4b:c6:0d:2c:38:46:b3:fc:99:7c:25:b6:e8:
d0:75:80:b2:64:78:d9:32:54:1d:65:2b:1e:4b:c9:13:ea:85:
54:f4:5b:82:5b:38:69:02:4a:c2:78:b3:c6:44:51:46:33:be:
94:e7:6b:24:f8:49:84:19:05:d4:93:54:fe:3f:25:51:31:3f:
00:81:9c:d5:dc:18:80:68:13:a9:80:1a:2d:d4:c0:32:e5:3d:
e2:2e:2f:f5:32:ad:10:f9:1a:43:21:c0:35:cd:ff:36:24:e8:
61:32:db:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF34ReYI8M2KYuTgOM8lgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjYwMzI2MTcwMDUyWhcNMjYwMzI3MTcwMDUyWjAzMTEwLwYDVQQD
EyhiOTI2YzY1MjRiZDQ2NDFmNTBmODBmYThlNzhlYWQzZDU2NmExYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8o3R2rI1D2dCoQAbL634pBZlzQx
GGGsul83mXfQoKOCvdeqa3n1P+UZgNVYLg1QDRY+SSOsFqRoBDvqygBpVkDyjo5k
nW7l0OsKWnKBTVWXUUDWDqAYXNmfE3zpicXdAswADZ3Wq9oFhW2RIvqPYsRVVMlb
aSuatE7JIv9yERFOyi3lL1YTSuGX+PCd7iSTtuDwTHoXlwq85BOeRZNQyyj6xx3Z
kbGxe655QuCFZOUgIvo9ocsjlzyG+MDzwYMMlydv2TOYjWa/BPlI+NOtr7r5TrfN
Gc3HU+U4rEy46YCiiT2YHGuNNBgPtRuGDZl7vbKlKERIddglguxaqJ/KjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkmxlJL1GQfUPgPqOeOrT1WahsqMB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkVzgGAY
HjZIFfjnavLTe2EopSko+pR5Dc5ccK5j/3CW+2H8n2GoH0/hi4l3KaN42b5ZC/Lr
tsOdDoMrY49U2QEoAsGiJTogfEfqUlgG1mtFY55ouNOezAhy5mJbhgwiv/OJKtyi
d/WqLEb3UUAXdmvf6KWbfaTp0A5QzRF0zSaM9BcAIMRO/YroLCI3op5IuxR26BxL
xg0sOEaz/Jl8Jbbo0HWAsmR42TJUHWUrHkvJE+qFVPRbgls4aQJKwnizxkRRRjO+
lOdrJPhJhBkF1JNU/j8lUTE/AIGc1dwYgGgTqYAaLdTAMuU94i4v9TKtEPkaQyHA
Nc3/NiToYTLblQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:00 2026 by rpki-client