Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: qdj76aQUa3K0Yzuu5slAZayC/+AlUxu7TIOi/zMNNbU=
Subject key identifier: 41:79:83:5B:ED:A4:0A:2A:41:29:0D:A2:98:A5:3A:31:B5:CC:E8:DB
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019D3263A2E8334BACBBCD60A6CD9A558881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 03:01:23 +0000
Manifest this update: Sat 28 Mar 2026 03:01:23 +0000
Manifest next update: Sun 29 Mar 2026 03:01:23 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: X+IyEug9VtoZbpIcTH4FvTht6rsFEcvxIySQf6rfZ4Y=)
2: PLcdq8HBbATb33TrLOZuRDuXEVQ.roa (hash: XGsrxoZcwiWsioFa6/X1psR1kn5m17Bl9f4lBLZE5dk=)
3: yYbe2iJW7P_sCDhFY34_L0RrDto.roa (hash: a8JSg8aR8AsTXy0JLCDrOWelsw6IkJ4MgTxTFuy83io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:a2:e8:33:4b:ac:bb:cd:60:a6:cd:9a:55:88:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Mar 28 03:01:23 2026 GMT
Not After : Mar 29 03:01:23 2026 GMT
Subject: CN=4179835beda40a2a41290da298a53a31b5cce8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:62:74:07:c6:fd:2b:b9:a4:3a:a0:89:30:
b7:ec:85:ed:a5:42:36:28:0c:cc:f3:ff:99:32:c1:
f0:e7:90:a3:9f:92:aa:d1:31:b3:65:51:b3:78:3f:
ef:99:d5:5b:ca:d1:36:69:bd:29:37:30:56:94:70:
1f:be:ee:f4:8b:79:db:c3:71:f9:12:db:84:7a:a7:
73:25:3c:92:d8:cd:b8:81:33:c9:ee:99:8f:58:bf:
a4:99:c9:c9:5c:f0:f1:d1:3c:f8:29:4e:be:95:0b:
1c:15:ee:c9:12:c9:8f:8a:a3:2c:db:0a:3a:23:1f:
4e:9f:d9:53:1d:6a:9d:b3:43:87:54:f2:45:be:95:
82:88:8f:29:30:fc:1b:13:63:c2:a7:07:97:1a:34:
15:b5:2c:cb:9f:2d:df:b8:69:6d:dd:72:07:58:23:
95:8c:a8:15:11:82:3b:13:46:44:06:68:c2:84:8a:
7a:fc:b8:01:e6:a0:c5:02:87:96:b8:cf:3b:ea:b2:
97:80:0b:71:cc:37:58:e9:e9:ce:1d:77:a1:18:00:
af:65:75:78:f7:c7:65:c8:0a:f1:de:50:da:94:41:
e9:d7:98:ce:9a:c4:6a:11:7c:16:5c:33:3d:6e:08:
c0:88:bf:80:26:b2:0c:c4:e5:47:eb:17:a8:87:2a:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:83:5B:ED:A4:0A:2A:41:29:0D:A2:98:A5:3A:31:B5:CC:E8:DB
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:26:81:ac:c4:26:50:89:85:96:6b:ec:61:9b:91:90:97:28:
62:fd:6f:f2:f4:a0:e3:30:70:b5:bb:22:f6:97:04:e5:6e:bd:
4a:61:c5:a9:16:9b:97:72:02:55:84:58:64:eb:2f:e2:77:31:
1f:e2:22:2b:3b:12:13:9b:12:13:8b:91:6b:d5:54:23:3b:91:
8a:e1:85:17:63:71:d7:06:b4:c7:b8:06:70:05:23:bf:fd:ac:
e3:36:fa:46:16:bc:62:bb:39:c3:c2:21:c3:52:29:fd:81:b2:
21:e5:00:51:ad:6d:76:e7:4e:0b:5c:ff:70:db:61:15:77:65:
de:39:6d:19:22:87:d8:e6:3d:9c:f0:44:f2:ba:c6:e7:b0:3a:
7b:3d:06:7c:0b:a5:25:27:cd:68:59:41:a5:03:78:e3:f8:f6:
b2:04:df:7b:9c:06:c9:aa:0c:cb:5c:52:7c:84:d1:81:b8:01:
79:86:fc:f4:cf:d3:12:40:82:95:ad:6f:76:d1:33:49:c2:b1:
1f:ec:42:4b:f4:0f:af:90:c7:5a:1d:0d:04:2d:a6:02:e1:e5:
64:0f:b6:18:37:3f:04:46:cb:8d:86:1d:15:35:8b:89:9e:eb:
8f:70:cd:fa:4c:fa:cb:2e:13:5c:98:c4:fa:de:92:bb:22:07:
17:9e:03:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yY6LoM0usu81gps2aVYiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMWM4OTk3YTM1NGJjN2Q0ZTVhNjBhOWY0MjQzOGExODJm
YTk5OGEwHhcNMjYwMzI4MDMwMTIzWhcNMjYwMzI5MDMwMTIzWjAzMTEwLwYDVQQD
Eyg0MTc5ODM1YmVkYTQwYTJhNDEyOTBkYTI5OGE1M2EzMWI1Y2NlOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4JidAfG/Su5pDqgiTC37IXtpUI2
KAzM8/+ZMsHw55Cjn5Kq0TGzZVGzeD/vmdVbytE2ab0pNzBWlHAfvu70i3nbw3H5
EtuEeqdzJTyS2M24gTPJ7pmPWL+kmcnJXPDx0Tz4KU6+lQscFe7JEsmPiqMs2wo6
Ix9On9lTHWqds0OHVPJFvpWCiI8pMPwbE2PCpweXGjQVtSzLny3fuGlt3XIHWCOV
jKgVEYI7E0ZEBmjChIp6/LgB5qDFAoeWuM876rKXgAtxzDdY6enOHXehGACvZXV4
98dlyArx3lDalEHp15jOmsRqEXwWXDM9bgjAiL+AJrIMxOVH6xeohyoEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF5g1vtpAoqQSkNopilOjG1zOjbMB8GA1UdIwQY
MBaAFPAciZejVLx9TlpgqfQkOKGC+pmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMt
YzI3YzRhNjEwYmQzLzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYWE5NWYtM2IzMi00MWZlLWFiZTMtYzI3YzRhNjEwYmQz
LzEvOEJ5Smw2TlV2SDFPV21DcDlDUTRvWUw2bVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSaBrMQm
UImFlmvsYZuRkJcoYv1v8vSg4zBwtbsi9pcE5W69SmHFqRabl3ICVYRYZOsv4ncx
H+IiKzsSE5sSE4uRa9VUIzuRiuGFF2Nx1wa0x7gGcAUjv/2s4zb6Rha8Yrs5w8Ih
w1Ip/YGyIeUAUa1tdudOC1z/cNthFXdl3jltGSKH2OY9nPBE8rrG57A6ez0GfAul
JSfNaFlBpQN44/j2sgTfe5wGyaoMy1xSfITRgbgBeYb89M/TEkCCla1vdtEzScKx
H+xCS/QPr5DHWh0NBC2mAuHlZA+2GDc/BEbLjYYdFTWLiZ7rj3DN+kz6yy4TXJjE
+t6SuyIHF54DbA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:46 2026 by rpki-client