Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: hsMXLoxj5wHw1lIQgsa6t2aU4OQcHOptilVVEf3kE/M=
Subject key identifier: A3:D1:50:26:AC:85:C0:C7:D2:4E:CF:A2:44:CB:D5:24:9D:F1:58:32
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019D26CCF40706B61DD5AC10A6301B4DDCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0FF4
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: 4-1jTpLuCOAg2Vrbi_YFCr92v_4.roa (hash: fO6SjPHBF8aFGKNbO8o4HrubgQPH9aKLn7J3+znKEj4=)
2: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: 4FhveK97uXws8NZcYKHoyvIyB0ELym1SIwWBHu6vSAQ=)
3: Q5zJR-gWRslSvJRuAC3XMlwqu_8.roa (hash: ArKoVR1HvT27XmVZlqzha6BxLY/5mnRJvZnwQwU+NF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f4:07:06:b6:1d:d5:ac:10:a6:30:1b:4d:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=a3d15026ac85c0c7d24ecfa244cbd5249df15832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:67:5d:f9:e5:ba:db:21:0a:79:94:84:d3:
f8:b6:a4:c2:9b:a5:20:3f:ad:01:ba:cb:5b:a7:f3:
5e:38:67:3e:10:18:b7:eb:ef:ed:5e:ad:ff:93:53:
d9:38:3f:7e:36:fe:0a:55:d6:4a:81:62:a7:9f:de:
7e:04:60:57:66:00:07:9e:43:9f:e7:be:d7:4d:ff:
f3:57:68:b7:64:da:57:63:58:b3:e0:f6:ec:ee:1d:
0f:9f:78:18:e5:e1:92:96:7b:b0:f0:3e:fc:0e:1d:
39:8d:f5:e1:32:f6:32:c1:d8:8a:f2:ad:db:31:52:
3b:89:2c:f4:e5:e5:cc:32:bf:71:f8:ec:05:3e:9d:
23:97:3c:dc:dd:84:8f:89:c4:0a:02:fe:13:f9:fe:
0d:27:4b:da:c2:ee:e7:ad:8b:ff:95:7f:6b:ea:36:
98:31:1c:66:e3:83:e9:5d:05:22:e3:6c:0b:bc:7d:
a6:ca:d8:f6:c8:e4:01:84:e8:91:ae:a9:88:8a:98:
45:1a:a4:c9:52:c2:b2:76:f5:01:16:85:2f:15:c0:
08:2b:9b:b4:17:42:78:43:a3:6a:8d:20:4b:65:b1:
15:84:e9:bd:c2:78:f5:e7:46:10:63:6a:71:43:59:
03:75:0e:6b:85:f7:13:6f:fe:7d:ab:0e:06:59:b3:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:50:26:AC:85:C0:C7:D2:4E:CF:A2:44:CB:D5:24:9D:F1:58:32
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:8b:db:57:74:c0:ec:95:46:c4:7c:db:24:0f:7f:c1:dc:
56:f4:da:68:4c:35:e2:af:d1:fc:0b:77:69:dc:45:fa:a6:96:
d2:6d:dc:9c:4c:ab:a3:e0:30:c0:12:67:d7:c9:c9:df:2e:ee:
51:22:89:f3:70:0f:d8:9b:ec:3c:aa:30:aa:43:8d:f3:de:2a:
63:d5:7f:e6:bc:30:5e:63:79:ff:5c:f6:49:24:02:7d:9b:26:
8b:7e:b3:89:0f:5b:d1:35:27:ed:96:0b:52:61:12:37:49:ad:
32:a9:e2:c6:87:f2:5c:40:09:12:73:53:01:f4:72:58:91:af:
2d:6e:41:ec:cd:b1:a7:1e:9c:1f:d4:e0:cd:46:9e:dd:91:06:
7b:7f:d4:84:bc:52:cc:86:55:e5:66:f2:1b:99:56:6c:67:1f:
f6:71:24:2f:c1:b4:55:e7:c1:e8:8c:98:c1:ea:8f:c8:6e:52:
cf:69:cb:4e:09:ef:24:63:f2:e0:dc:5c:76:65:81:ac:1c:a1:
14:c6:34:20:05:ea:17:e1:5e:49:ac:17:d0:09:7d:cc:20:f0:
47:13:38:66:ce:14:1c:c9:17:52:ab:68:bf:ed:09:0f:9c:51:
a1:02:c2:bf:25:a7:bd:98:10:ea:5b:f6:d5:5d:47:00:0e:31:
e0:5f:4e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPQHBrYd1awQpjAbTdzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjYwMzI1MjEwMDU5WhcNMjYwMzI2MjEwMDU5WjAzMTEwLwYDVQQD
EyhhM2QxNTAyNmFjODVjMGM3ZDI0ZWNmYTI0NGNiZDUyNDlkZjE1ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JnXfnlutshCnmUhNP4tqTCm6Ug
P60Bustbp/NeOGc+EBi36+/tXq3/k1PZOD9+Nv4KVdZKgWKnn95+BGBXZgAHnkOf
577XTf/zV2i3ZNpXY1iz4Pbs7h0Pn3gY5eGSlnuw8D78Dh05jfXhMvYywdiK8q3b
MVI7iSz05eXMMr9x+OwFPp0jlzzc3YSPicQKAv4T+f4NJ0vawu7nrYv/lX9r6jaY
MRxm44PpXQUi42wLvH2mytj2yOQBhOiRrqmIiphFGqTJUsKydvUBFoUvFcAIK5u0
F0J4Q6NqjSBLZbEVhOm9wnj150YQY2pxQ1kDdQ5rhfcTb/59qw4GWbPbcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPRUCashcDH0k7PokTL1SSd8VgyMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8aL21d0
wOyVRsR82yQPf8HcVvTaaEw14q/R/At3adxF+qaW0m3cnEyro+AwwBJn18nJ3y7u
USKJ83AP2JvsPKowqkON894qY9V/5rwwXmN5/1z2SSQCfZsmi36ziQ9b0TUn7ZYL
UmESN0mtMqnixofyXEAJEnNTAfRyWJGvLW5B7M2xpx6cH9TgzUae3ZEGe3/UhLxS
zIZV5WbyG5lWbGcf9nEkL8G0VefB6IyYweqPyG5Sz2nLTgnvJGPy4NxcdmWBrByh
FMY0IAXqF+FeSawX0Al9zCDwRxM4Zs4UHMkXUqtov+0JD5xRoQLCvyWnvZgQ6lv2
1V1HAA4x4F9O/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:17 2026 by rpki-client