Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier: EKPpHVxeVo3VU9tAtjOHckoplM4lScrv8Iim1YS8nz4=
Subject key identifier: B9:E1:87:22:E8:F1:F0:85:36:25:0C:84:F0:0A:DA:81:28:CE:DA:18
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer: /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial: 019D27A8BF2FCCC92DC2B7C750479A1DC2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number: 0867
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: gDNUGFgv3m3/5VFTVHGr6ayoU8ixaspDZ3ORZmw4OQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:bf:2f:cc:c9:2d:c2:b7:c7:50:47:9a:1d:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bffa2742563265037029a78f9317339053009c
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=b9e18722e8f1f08536250c84f00ada8128ceda18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:42:39:f7:1a:b3:77:5f:2f:f9:0b:f4:4c:
79:a5:13:16:f0:f4:be:51:16:18:80:60:b5:96:3a:
9b:69:71:0c:69:25:fe:30:5d:fc:29:3d:29:f2:a4:
63:12:12:b9:3a:53:33:1e:86:f4:10:0b:01:21:08:
04:fa:2b:f0:da:bf:20:09:e0:68:fc:35:73:d9:ce:
18:23:84:49:70:40:8a:c9:5f:4b:d5:bd:1d:bb:31:
1f:a5:44:91:f7:53:65:dc:1a:b5:91:15:ab:1f:15:
68:c2:c4:55:2f:db:5b:29:ab:de:48:55:27:20:f1:
3e:0f:d5:68:cb:a3:f5:5b:72:05:ae:b5:7b:b3:27:
72:f7:ab:88:7a:82:f8:e8:ab:31:56:ed:b3:a0:39:
97:d5:78:02:88:89:bd:35:72:5d:bc:f3:43:73:02:
2d:3e:41:d8:33:ba:8d:9e:61:75:2c:dc:0a:9b:c5:
b3:a1:c1:8d:e3:5d:81:dd:d8:a8:cf:4b:8d:23:60:
0b:4f:dd:59:70:0c:22:af:c4:2d:40:ff:0c:96:d4:
91:5d:83:90:71:9c:c4:38:9b:51:d4:04:b7:73:66:
d2:27:7f:db:3a:6e:80:d9:b7:fd:e8:cc:b2:b7:1c:
14:74:5e:30:61:c2:b3:06:bd:76:36:75:a2:4e:54:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:87:22:E8:F1:F0:85:36:25:0C:84:F0:0A:DA:81:28:CE:DA:18
X509v3 Authority Key Identifier:
keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:a4:91:22:ae:92:c5:c2:ac:ce:0c:7c:6e:f4:b0:4f:11:
9d:80:3a:c6:7b:86:84:87:19:ac:31:4a:bb:a4:30:ca:3c:c8:
75:98:e0:ef:9a:54:a0:f2:72:c9:60:89:1d:15:83:b3:4f:67:
20:2b:5f:67:f1:d9:9e:28:d6:4b:b0:b2:8b:e8:03:94:47:09:
7f:c4:e3:94:a1:a8:68:60:95:6e:05:08:8a:b3:be:fd:d4:fc:
07:32:c6:7f:be:b3:7c:35:85:99:82:e9:cc:bc:70:65:5a:5d:
6d:57:fe:97:42:43:51:aa:91:39:75:3f:69:de:77:7e:d5:62:
5e:eb:61:9b:64:9b:69:39:cb:73:f1:d1:43:fc:d1:43:87:be:
13:42:e8:29:6a:77:58:38:11:f8:e6:0a:65:50:0e:ae:a0:e7:
bc:57:df:33:4b:8e:67:4b:9f:bb:d3:f4:db:84:1d:f5:0a:45:
9e:9a:06:66:3c:8a:0d:68:1d:9f:6d:5b:65:c2:64:81:40:eb:
15:f9:fa:fe:ce:10:5e:fa:53:85:ae:8d:3f:9a:73:6b:6b:05:
26:64:0e:15:26:e0:15:5a:4d:9e:2d:2d:38:a6:1f:ec:4c:b0:
0b:b1:40:3a:52:7d:b4:9d:60:50:fe:83:7f:ce:5c:7a:8e:51:
cb:96:8d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqL8vzMktwrfHUEeaHcK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmZmYTI3NDI1NjMyNjUwMzcwMjlhNzhmOTMxNzMzOTA1
MzAwOWMwHhcNMjYwMzI2MDEwMTAzWhcNMjYwMzI3MDEwMTAzWjAzMTEwLwYDVQQD
EyhiOWUxODcyMmU4ZjFmMDg1MzYyNTBjODRmMDBhZGE4MTI4Y2VkYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpVCOfcas3dfL/kL9Ex5pRMW8PS+
URYYgGC1ljqbaXEMaSX+MF38KT0p8qRjEhK5OlMzHob0EAsBIQgE+ivw2r8gCeBo
/DVz2c4YI4RJcECKyV9L1b0duzEfpUSR91Nl3Bq1kRWrHxVowsRVL9tbKaveSFUn
IPE+D9Voy6P1W3IFrrV7sydy96uIeoL46KsxVu2zoDmX1XgCiIm9NXJdvPNDcwIt
PkHYM7qNnmF1LNwKm8WzocGN412B3dioz0uNI2ALT91ZcAwir8QtQP8MltSRXYOQ
cZzEOJtR1AS3c2bSJ3/bOm6A2bf96MyytxwUdF4wYcKzBr12NnWiTlRqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnhhyLo8fCFNiUMhPAK2oEoztoYMB8GA1UdIwQY
MBaAFPK/+idCVjJlA3App4+TFzOQUwCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2Yt
ZGU4NjZmYjA2NmQ3LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2YtZGU4NjZmYjA2NmQ3
LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrqkkSKu
ksXCrM4MfG70sE8RnYA6xnuGhIcZrDFKu6QwyjzIdZjg75pUoPJyyWCJHRWDs09n
ICtfZ/HZnijWS7Cyi+gDlEcJf8TjlKGoaGCVbgUIirO+/dT8BzLGf76zfDWFmYLp
zLxwZVpdbVf+l0JDUaqROXU/ad53ftViXuthm2SbaTnLc/HRQ/zRQ4e+E0LoKWp3
WDgR+OYKZVAOrqDnvFffM0uOZ0ufu9P024Qd9QpFnpoGZjyKDWgdn21bZcJkgUDr
Ffn6/s4QXvpTha6NP5pza2sFJmQOFSbgFVpNni0tOKYf7EywC7FAOlJ9tJ1gUP6D
f85ceo5Ry5aN0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:19 2026 by rpki-client