Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier: tAb+M4kczM94Wuy3sKqzwHVzVNnsFOZdooytERLoQHw=
Subject key identifier: 1C:B6:45:77:B0:9F:5E:8F:3A:69:B7:F0:84:2D:AE:A4:13:44:98:08
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 019D2703D1C268313ABAF621D02EAC6FBCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number: 100A
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: 6q3vtSNcU61NXekMhDK/blycm5rp1Z+MpniryxAYraw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d1:c2:68:31:3a:ba:f6:21:d0:2e:ac:6f:bc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=1cb64577b09f5e8f3a69b7f0842daea413449808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:d9:1f:d4:e1:76:e2:db:75:3a:41:d4:3a:
08:0c:57:71:b1:73:69:67:2b:8e:b3:78:62:4d:ab:
bb:a3:2a:54:ee:6f:09:2a:51:d1:7a:d8:b2:04:75:
a1:dd:c8:c1:fa:88:2c:38:70:4f:02:7b:34:b0:7d:
e3:a9:34:7a:47:84:50:35:a3:65:ad:90:fa:36:98:
0e:d6:01:f8:a2:38:b6:01:83:36:61:b4:2a:fa:24:
3c:a5:a0:e3:3f:be:50:50:7a:dd:f0:48:7d:5f:32:
56:a4:79:a8:49:b4:72:91:7f:6c:a0:d6:0f:71:b9:
b2:76:33:60:e0:0f:a0:c5:7d:d4:4a:c2:b5:e7:58:
e6:10:62:00:94:52:72:82:5c:0c:ef:cc:94:66:21:
2e:8d:2e:1f:89:62:ba:a4:dc:c9:5a:57:a9:e0:4f:
63:ff:29:b9:63:4d:ec:cb:46:c6:a8:08:c6:db:de:
29:a4:9d:ac:a0:72:ea:b6:d0:84:e5:6d:ab:09:24:
2d:24:3b:b5:1a:f0:9d:09:1d:76:f9:ed:6e:49:d0:
8f:da:51:de:a7:0e:9b:1d:4a:47:4f:ae:34:73:ab:
ba:8b:3d:a9:94:d3:79:40:03:42:8d:61:60:af:9b:
fb:a7:23:c1:57:b2:0c:c2:3f:09:23:53:e1:c6:23:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:45:77:B0:9F:5E:8F:3A:69:B7:F0:84:2D:AE:A4:13:44:98:08
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:7c:47:37:6c:ff:90:b3:49:99:aa:62:aa:b0:11:06:08:
fd:eb:cf:31:db:51:6e:93:be:b0:73:12:05:ef:c1:1c:03:41:
4c:66:dc:92:fb:7a:95:30:9e:0f:8b:86:d6:7d:04:22:2e:66:
d6:36:70:ce:74:8f:75:e1:8e:ff:c9:bc:1d:b1:5a:fa:d6:0b:
c5:c0:4a:17:38:da:24:bb:77:c4:70:12:f1:9f:55:50:ba:a7:
0d:05:e1:fc:ed:81:32:15:a4:ae:cd:c9:29:5a:e5:91:8a:e3:
2e:d4:05:4c:c8:8e:0c:7a:73:36:df:f0:d2:99:d2:d4:39:b3:
15:cd:6a:3e:8d:db:8a:60:aa:34:a1:ca:5b:6b:89:57:0d:fd:
5c:2c:d0:9d:91:ec:b0:dd:f3:e9:8d:a5:82:02:40:48:e5:ba:
0f:1e:45:63:a9:0c:ba:3d:12:ed:ed:dd:81:45:4c:20:38:13:
33:cd:36:d7:64:ec:c1:d6:e1:fb:a2:d2:bc:71:db:c1:b1:48:
9d:6c:1c:98:78:23:85:49:ec:59:d2:68:eb:7b:56:be:14:4b:
3d:eb:ba:9b:a7:29:1f:f3:88:b9:9b:af:9c:02:8b:bd:4a:50:
69:86:04:1c:78:20:e5:7b:2d:0d:16:7c:6c:79:41:a0:48:62:
9b:eb:7b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9HCaDE6uvYh0C6sb7ysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl
MGU2ZjQwHhcNMjYwMzI1MjIwMDU0WhcNMjYwMzI2MjIwMDU0WjAzMTEwLwYDVQQD
EygxY2I2NDU3N2IwOWY1ZThmM2E2OWI3ZjA4NDJkYWVhNDEzNDQ5ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiXZH9ThduLbdTpB1DoIDFdxsXNp
ZyuOs3hiTau7oypU7m8JKlHRetiyBHWh3cjB+ogsOHBPAns0sH3jqTR6R4RQNaNl
rZD6NpgO1gH4oji2AYM2YbQq+iQ8paDjP75QUHrd8Eh9XzJWpHmoSbRykX9soNYP
cbmydjNg4A+gxX3USsK151jmEGIAlFJyglwM78yUZiEujS4fiWK6pNzJWlep4E9j
/ym5Y03sy0bGqAjG294ppJ2soHLqttCE5W2rCSQtJDu1GvCdCR12+e1uSdCP2lHe
pw6bHUpHT640c6u6iz2plNN5QANCjWFgr5v7pyPBV7IMwj8JI1PhxiOzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy2RXewn16POmm38IQtrqQTRJgIMB8GA1UdIwQY
MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt
NGVjMWFiZTA4NWVmLzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYtNGVjMWFiZTA4NWVm
LzEvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCV8Rzds
/5CzSZmqYqqwEQYI/evPMdtRbpO+sHMSBe/BHANBTGbckvt6lTCeD4uG1n0EIi5m
1jZwznSPdeGO/8m8HbFa+tYLxcBKFzjaJLt3xHAS8Z9VULqnDQXh/O2BMhWkrs3J
KVrlkYrjLtQFTMiODHpzNt/w0pnS1DmzFc1qPo3bimCqNKHKW2uJVw39XCzQnZHs
sN3z6Y2lggJASOW6Dx5FY6kMuj0S7e3dgUVMIDgTM80212Tswdbh+6LSvHHbwbFI
nWwcmHgjhUnsWdJo63tWvhRLPeu6m6cpH/OIuZuvnAKLvUpQaYYEHHgg5XstDRZ8
bHlBoEhim+t7JQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:37 2026 by rpki-client