Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: 5LfSDthbKXn1UQRl4Lb+FBA7Kxbe+d2npOOimE9ApY4=
Subject key identifier: E4:B3:BB:93:42:DF:26:95:47:3A:DD:D8:E9:61:2F:CA:CB:D2:62:DC
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019D2AE0547F8EAC47AE942E65DA3AAD96CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 16:00:37 +0000
Manifest this update: Thu 26 Mar 2026 16:00:37 +0000
Manifest next update: Fri 27 Mar 2026 16:00:37 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: wTAG9wS3J1rp8LIehM4lW6A6H7YicBMLS00Oysf9fCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:54:7f:8e:ac:47:ae:94:2e:65:da:3a:ad:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Mar 26 16:00:37 2026 GMT
Not After : Mar 27 16:00:37 2026 GMT
Subject: CN=e4b3bb9342df2695473addd8e9612fcacbd262dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:df:c7:8f:8b:6c:a2:be:22:6c:0f:5a:89:
bd:46:7e:a2:95:48:a9:76:02:9e:fb:7d:99:f1:11:
a6:48:ea:29:00:c5:3d:ec:fc:be:f3:d6:30:71:3b:
78:13:b8:50:b4:e5:86:c3:fe:1e:d5:c9:0c:b5:b0:
ab:33:bb:46:2d:18:ec:ea:4b:5d:70:42:9d:24:1e:
ee:03:47:be:8b:7f:c5:e5:25:e9:b2:62:7f:54:02:
3e:fc:de:39:f2:ce:7b:a2:24:89:51:60:cf:0c:d6:
21:9c:a6:02:75:ba:0a:8c:33:ca:5a:d5:6a:db:76:
d2:98:41:ee:4f:41:97:2b:48:e0:33:d2:20:e4:2c:
47:0d:ae:c2:8b:a7:55:a6:d3:ac:ac:84:f7:8b:7c:
60:3c:0d:f9:4d:68:8a:9f:0a:dd:88:cf:5b:7f:85:
c7:16:9c:1d:56:a3:4b:39:f8:f2:27:5e:f0:f3:df:
d0:b2:59:3d:f6:67:bd:44:36:5a:79:64:2d:1a:15:
bd:bb:02:4f:c3:2b:35:80:fe:14:e4:5d:bd:43:42:
f4:c1:ea:ea:09:dd:7c:1c:c8:52:aa:a5:5e:ab:3b:
65:60:6d:63:d7:0e:13:2d:ac:e0:a7:ba:ef:c5:f7:
16:01:0c:36:73:52:fe:30:49:1d:aa:50:46:26:b0:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:BB:93:42:DF:26:95:47:3A:DD:D8:E9:61:2F:CA:CB:D2:62:DC
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0a:6f:6a:ff:ff:a2:5b:2f:18:3b:e9:43:97:04:e8:ef:34:
be:0f:6d:f1:11:4b:19:1f:c5:27:bb:d3:0b:ae:ca:2b:a0:72:
3e:8d:9e:a4:6c:47:f2:de:db:54:16:c1:3e:1c:b3:6e:d3:f5:
b4:5d:f3:3b:9d:66:68:26:7c:2f:7e:91:84:3b:16:62:2b:5b:
84:13:ea:01:62:88:1f:56:f9:bf:dd:bb:13:89:c6:1f:e6:93:
64:df:59:9d:b1:55:86:21:70:47:45:12:72:f2:0c:61:d7:a7:
61:8d:0f:c9:47:f3:49:31:ac:9f:38:f3:7f:94:69:6f:ad:2d:
0c:8c:ba:2f:86:48:fb:23:fa:f8:48:6a:68:34:a9:af:3d:e1:
e1:f5:1d:f0:42:26:c8:6a:0e:61:1d:1a:ec:7d:bd:20:72:bc:
84:46:3e:ef:b7:42:10:cd:dc:e6:d8:a4:1e:49:d1:e8:24:8b:
5e:15:8f:9e:4b:8d:ca:1e:8f:14:6f:98:b1:8f:1f:2c:43:25:
2e:d7:c0:fc:81:6c:1b:1f:d5:f8:d1:ef:d1:dd:d6:8c:95:98:
65:07:bc:24:6d:a6:08:34:c4:a5:fc:56:fc:22:79:f4:54:cd:
20:a7:bb:b4:13:89:93:00:19:db:2c:fd:60:38:08:bf:b4:51:
d6:30:3a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4FR/jqxHrpQuZdo6rZbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmJhN2MyZDAyZGUxNDhhYTllOGZhMDlhMWM3YTJiNzcw
YTE5ZGMwHhcNMjYwMzI2MTYwMDM3WhcNMjYwMzI3MTYwMDM3WjAzMTEwLwYDVQQD
EyhlNGIzYmI5MzQyZGYyNjk1NDczYWRkZDhlOTYxMmZjYWNiZDI2MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQnfx4+LbKK+ImwPWom9Rn6ilUip
dgKe+32Z8RGmSOopAMU97Py+89YwcTt4E7hQtOWGw/4e1ckMtbCrM7tGLRjs6ktd
cEKdJB7uA0e+i3/F5SXpsmJ/VAI+/N458s57oiSJUWDPDNYhnKYCdboKjDPKWtVq
23bSmEHuT0GXK0jgM9Ig5CxHDa7Ci6dVptOsrIT3i3xgPA35TWiKnwrdiM9bf4XH
FpwdVqNLOfjyJ17w89/Qslk99me9RDZaeWQtGhW9uwJPwys1gP4U5F29Q0L0werq
Cd18HMhSqqVeqztlYG1j1w4TLazgp7rvxfcWAQw2c1L+MEkdqlBGJrCHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSzu5NC3yaVRzrd2OlhL8rL0mLcMB8GA1UdIwQY
MBaAFPK7p8LQLeFIqp6PoJoceit3ChncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEt
NWJkZDE0MmJhZTc0LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEtNWJkZDE0MmJhZTc0
LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgpvav//
olsvGDvpQ5cE6O80vg9t8RFLGR/FJ7vTC67KK6ByPo2epGxH8t7bVBbBPhyzbtP1
tF3zO51maCZ8L36RhDsWYitbhBPqAWKIH1b5v927E4nGH+aTZN9ZnbFVhiFwR0US
cvIMYdenYY0PyUfzSTGsnzjzf5Rpb60tDIy6L4ZI+yP6+EhqaDSprz3h4fUd8EIm
yGoOYR0a7H29IHK8hEY+77dCEM3c5tikHknR6CSLXhWPnkuNyh6PFG+YsY8fLEMl
LtfA/IFsGx/V+NHv0d3WjJWYZQe8JG2mCDTEpfxW/CJ59FTNIKe7tBOJkwAZ2yz9
YDgIv7RR1jA6Iw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:54 2026 by rpki-client