Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: vcqeGQ4C+XY9ox8FTRFJxRv09ZZWo0lhkCLHP2atXns=
Subject key identifier: AF:CB:DA:95:5D:EA:22:00:12:96:73:41:28:B5:56:7A:D4:14:8F:62
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019D28F254C44DB7894EE44699A869DCED36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: KEP9NTL54CanyE9xraHIgHLwwQy1PZmJxheS7JFhsaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:54:c4:4d:b7:89:4e:e4:46:99:a8:69:dc:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=afcbda955dea22001296734128b5567ad4148f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:cc:c2:e7:e9:7c:e3:d3:f6:80:c1:61:3b:
09:3c:20:f4:e4:da:9c:42:86:79:46:c8:82:c3:b5:
d7:a3:bd:90:16:4b:e7:e5:d2:86:cc:6b:c8:16:4c:
4d:04:6f:f0:d4:65:0c:97:8b:50:d7:99:43:2f:08:
13:a6:64:c7:75:2f:53:4b:93:38:bf:c3:51:83:6c:
34:5e:a9:ae:45:87:d4:dc:fe:42:c2:a9:78:a0:29:
a3:ae:5d:4a:c0:9c:96:2b:69:cb:50:b2:e5:b9:4a:
94:d6:3d:33:57:1f:66:4d:50:32:7e:1d:6d:fe:53:
c6:a1:b3:f0:bc:ff:32:14:af:62:b9:f7:e5:e8:7b:
37:f3:8a:03:32:da:b2:9a:75:91:6e:02:79:20:05:
01:3f:b3:37:63:9b:b4:3d:30:36:28:9a:1e:7b:c7:
63:a0:3b:09:6e:18:f5:dc:72:19:00:3a:70:b4:bd:
9f:c1:57:8b:cb:9f:bb:08:0f:da:8e:df:3a:60:49:
d6:d2:0f:5b:6d:0d:e1:a5:f6:f8:eb:db:2f:11:bd:
0d:37:38:38:2e:98:6a:9b:43:f1:d2:ea:9d:de:7e:
f1:c9:a4:74:67:d8:de:05:30:ce:66:90:7c:2e:66:
fe:8e:fb:b2:34:2a:a2:c1:ed:d8:8e:21:8b:e1:4d:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:DA:95:5D:EA:22:00:12:96:73:41:28:B5:56:7A:D4:14:8F:62
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:76:df:54:9e:e3:e2:ab:f8:45:f7:20:61:e2:f3:62:bc:
6e:ca:24:03:44:97:c2:a9:a3:21:7f:70:a8:e3:22:4a:b9:1a:
2e:3b:87:aa:10:3e:53:3a:3f:26:10:03:76:4f:bf:9e:1b:a5:
34:cf:e3:ad:23:50:ad:a2:d0:96:b3:0a:a6:a1:bc:4f:89:4e:
a9:19:d4:37:64:57:44:54:ae:21:d2:71:dc:e7:66:4f:8f:73:
26:c2:36:c3:d6:34:3b:a7:81:4e:ca:05:6e:23:37:35:9c:15:
92:c8:3d:44:31:81:99:61:5f:c1:2d:85:db:ca:c9:45:0d:20:
b2:cc:aa:87:66:c8:29:29:77:61:33:47:cf:76:0e:34:65:c3:
c0:a2:2a:42:18:27:d9:d4:4d:13:b8:42:47:2c:6c:2a:0d:eb:
3d:aa:02:30:8b:73:db:88:f5:cc:e3:a5:0e:87:42:74:53:b5:
dd:0b:93:b9:da:9b:92:a2:5f:26:98:0f:f0:54:e9:1d:2d:db:
a0:8d:04:e0:78:d3:d8:a6:55:d7:d5:35:bc:06:89:af:7a:27:
68:9e:e9:b3:d9:98:96:be:8f:bc:c5:8b:97:a9:24:0c:b8:07:
d4:4d:27:d9:90:fd:56:e5:48:e4:c3:81:a0:21:1f:1b:92:6b:
97:90:72:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lTETbeJTuRGmahp3O02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3
ZmQyNjEwHhcNMjYwMzI2MDcwMTAzWhcNMjYwMzI3MDcwMTAzWjAzMTEwLwYDVQQD
EyhhZmNiZGE5NTVkZWEyMjAwMTI5NjczNDEyOGI1NTY3YWQ0MTQ4ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTMwufpfOPT9oDBYTsJPCD05Nqc
QoZ5RsiCw7XXo72QFkvn5dKGzGvIFkxNBG/w1GUMl4tQ15lDLwgTpmTHdS9TS5M4
v8NRg2w0XqmuRYfU3P5Cwql4oCmjrl1KwJyWK2nLULLluUqU1j0zVx9mTVAyfh1t
/lPGobPwvP8yFK9iuffl6Hs384oDMtqymnWRbgJ5IAUBP7M3Y5u0PTA2KJoee8dj
oDsJbhj13HIZADpwtL2fwVeLy5+7CA/ajt86YEnW0g9bbQ3hpfb469svEb0NNzg4
Lphqm0Px0uqd3n7xyaR0Z9jeBTDOZpB8Lmb+jvuyNCqiwe3YjiGL4U0WJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/L2pVd6iIAEpZzQSi1VnrUFI9iMB8GA1UdIwQY
MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt
MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3
LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8d231Se
4+Kr+EX3IGHi82K8bsokA0SXwqmjIX9wqOMiSrkaLjuHqhA+Uzo/JhADdk+/nhul
NM/jrSNQraLQlrMKpqG8T4lOqRnUN2RXRFSuIdJx3OdmT49zJsI2w9Y0O6eBTsoF
biM3NZwVksg9RDGBmWFfwS2F28rJRQ0gssyqh2bIKSl3YTNHz3YONGXDwKIqQhgn
2dRNE7hCRyxsKg3rPaoCMItz24j1zOOlDodCdFO13QuTudqbkqJfJpgP8FTpHS3b
oI0E4HjT2KZV19U1vAaJr3onaJ7ps9mYlr6PvMWLl6kkDLgH1E0n2ZD9VuVI5MOB
oCEfG5Jrl5ByNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:44 2026 by rpki-client