Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier: IEvSGy6i8WJyhLx/pff3g1Aes4BZx+TumYy/A8hqT2s=
Subject key identifier: DE:AE:ED:3C:1F:5C:92:EF:F7:1E:01:B4:C5:F5:6C:26:08:A1:DA:71
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial: 019D26CCFE710C4F02FB0BAF5D5CE4561692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number: 01DC
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: Goq+A4/gDqbeU+FtE1M5JUERXDkFHRzzx9tgjYvDg+c=)
2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fe:71:0c:4f:02:fb:0b:af:5d:5c:e4:56:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=deaeed3c1f5c92eff71e01b4c5f56c2608a1da71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:86:e9:26:94:b4:a0:ae:ee:74:f7:c0:d5:
b8:85:3f:df:fa:7b:81:c6:87:60:c5:94:dd:2d:ad:
6d:6d:9e:35:41:6b:34:dc:1c:9d:65:13:8e:9e:20:
fc:02:c3:10:5f:16:d8:b2:86:08:de:e6:38:94:ad:
22:5f:3b:02:97:c4:7f:47:76:f3:34:f1:8a:30:0e:
16:21:50:39:c6:0c:8d:fc:f4:d8:d7:88:56:07:4c:
f7:f5:c0:8d:6d:39:ec:65:4b:87:a5:f9:44:fe:1e:
ec:2f:19:96:6e:df:f3:e1:44:57:f9:6c:96:db:4e:
cc:a3:95:c6:e0:b0:fc:43:b5:56:6a:f4:38:a2:c3:
bd:8c:3a:97:ae:65:8c:cf:0b:21:7f:69:e8:a8:0f:
24:45:ff:4e:8a:3c:91:98:84:39:69:08:22:6d:3c:
63:53:15:fb:09:d7:a1:53:c2:c7:32:74:0c:fb:87:
11:e5:cf:0f:2e:72:52:c5:80:81:f2:3d:5e:7d:e0:
53:08:c0:22:46:01:4e:b4:21:1a:97:dc:2d:90:9d:
61:2f:2c:98:19:fb:70:e5:d8:25:7c:d9:74:e0:e9:
ec:66:b9:78:21:b9:31:54:c0:1b:95:b3:b8:25:ca:
b7:ef:62:b8:0b:e0:96:3c:13:49:8e:14:3f:02:7c:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AE:ED:3C:1F:5C:92:EF:F7:1E:01:B4:C5:F5:6C:26:08:A1:DA:71
X509v3 Authority Key Identifier:
keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:74:93:f4:9c:b9:b3:49:c5:a5:1c:ae:5f:2e:3d:a0:c7:
ff:34:04:04:a7:fb:25:a4:57:6f:7c:d0:36:b6:48:84:e0:f2:
61:1e:2b:8a:21:41:e8:8c:6f:17:f5:ed:7a:fb:1b:b1:94:75:
42:26:d1:b9:16:60:96:36:02:3b:26:6a:68:75:15:7d:a3:af:
bb:20:09:ca:36:e3:a0:e3:74:6c:f0:b6:e8:54:13:22:74:1c:
54:31:43:3d:15:f4:7a:2e:15:06:e4:23:a4:44:ee:00:63:3a:
ba:2c:0c:9d:a8:77:1e:55:cb:c8:1a:7f:dc:3b:41:99:33:e7:
21:e5:4e:ec:0c:08:ef:26:9f:a1:5c:59:a4:3e:d6:08:1b:18:
99:43:44:8a:ce:e0:fb:2f:b8:7e:d0:d2:2b:ce:f0:ba:d9:89:
c5:64:d6:13:5e:87:09:ac:18:f5:4a:9b:6a:75:e7:2e:55:a5:
1e:10:a5:f5:64:74:a5:f4:6a:31:28:40:45:ac:b4:a4:7f:f3:
76:aa:49:2f:4c:f6:58:db:70:62:45:b1:fc:a7:23:d4:31:9f:
0e:af:bf:0d:bb:67:93:07:7b:62:0e:fe:a8:cc:fc:f0:bf:7e:
e3:63:75:49:c9:00:d9:bf:f7:fc:92:de:e4:cc:8e:5a:0c:70:
df:d3:32:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzP5xDE8C+wuvXVzkVhaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3
M2U0MjQwHhcNMjYwMzI1MjEwMTAxWhcNMjYwMzI2MjEwMTAxWjAzMTEwLwYDVQQD
EyhkZWFlZWQzYzFmNWM5MmVmZjcxZTAxYjRjNWY1NmMyNjA4YTFkYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunyG6SaUtKCu7nT3wNW4hT/f+nuB
xodgxZTdLa1tbZ41QWs03BydZROOniD8AsMQXxbYsoYI3uY4lK0iXzsCl8R/R3bz
NPGKMA4WIVA5xgyN/PTY14hWB0z39cCNbTnsZUuHpflE/h7sLxmWbt/z4URX+WyW
207Mo5XG4LD8Q7VWavQ4osO9jDqXrmWMzwshf2noqA8kRf9OijyRmIQ5aQgibTxj
UxX7CdehU8LHMnQM+4cR5c8PLnJSxYCB8j1efeBTCMAiRgFOtCEal9wtkJ1hLyyY
Gftw5dglfNl04OnsZrl4IbkxVMAblbO4Jcq372K4C+CWPBNJjhQ/AnwfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6u7TwfXJLv9x4BtMX1bCYIodpxMB8GA1UdIwQY
MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt
NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj
LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewV0k/Sc
ubNJxaUcrl8uPaDH/zQEBKf7JaRXb3zQNrZIhODyYR4riiFB6IxvF/XtevsbsZR1
QibRuRZgljYCOyZqaHUVfaOvuyAJyjbjoON0bPC26FQTInQcVDFDPRX0ei4VBuQj
pETuAGM6uiwMnah3HlXLyBp/3DtBmTPnIeVO7AwI7yafoVxZpD7WCBsYmUNEis7g
+y+4ftDSK87wutmJxWTWE16HCawY9UqbanXnLlWlHhCl9WR0pfRqMShARay0pH/z
dqpJL0z2WNtwYkWx/Kcj1DGfDq+/Dbtnkwd7Yg7+qMz88L9+42N1SckA2b/3/JLe
5MyOWgxw39Mywg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:49 2026 by rpki-client