Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: yhE8PvOTI0ItkpJ4oNP9hx3b1ecXLZBy3OkcrtA5R1M=
Subject key identifier: 16:C8:D6:9C:FF:98:03:35:6C:00:47:2E:68:C0:DE:60:D4:9D:79:E4
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 019D26CD76B203443CEE84AD694D525DA599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: qdQI6TP3+gsQuJvS32Xup2f5OAxYwLjr+d+UUs9le3M=)
2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:76:b2:03:44:3c:ee:84:ad:69:4d:52:5d:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=16c8d69cff9803356c00472e68c0de60d49d79e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:96:b4:71:38:7c:0b:3c:47:30:81:c3:f3:
a5:6c:53:f9:f2:70:08:90:fa:f5:bf:93:38:98:93:
da:5c:d3:a1:4f:b3:7a:36:98:b9:e5:8a:a7:bb:bd:
a0:50:cd:e2:78:9d:a4:be:ed:39:db:29:e9:6d:d5:
0a:61:ad:59:42:ea:b6:b0:87:1e:f1:e5:a9:77:99:
d4:c5:de:2a:27:67:67:3d:46:18:83:df:4c:bc:67:
3a:d1:54:7a:ef:13:9b:89:0d:79:c8:28:8c:82:0a:
9c:99:06:2d:ce:4b:5f:fd:19:9c:0f:f9:4c:dd:0b:
08:89:e2:3c:d7:60:8c:21:4d:78:08:dd:bb:16:4d:
12:d5:cc:7f:66:73:22:f8:ee:68:7c:f5:37:ae:f3:
c5:73:1f:7d:aa:5a:f9:02:c0:44:c2:78:0a:7c:80:
16:a0:b0:4c:59:cc:19:6a:02:d9:4d:d5:f7:02:48:
fc:d3:f5:57:e0:51:58:7a:f6:a1:74:30:0c:8f:0d:
fb:4e:c6:1e:d5:7b:bc:ff:64:9e:51:1b:14:e9:97:
25:55:d3:6f:bc:e5:1a:12:57:0d:4f:eb:d1:d6:60:
1d:98:d7:f3:73:fc:9f:e1:e6:73:93:0d:de:24:34:
e7:93:5c:cf:6d:19:c6:80:e8:10:76:e0:52:7f:e9:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:D6:9C:FF:98:03:35:6C:00:47:2E:68:C0:DE:60:D4:9D:79:E4
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:5f:8c:bb:dd:96:17:24:53:71:cd:2c:fa:68:aa:92:ef:
be:1e:64:e2:1a:b5:64:67:a7:ff:1c:e7:e9:d6:13:93:b2:c3:
24:fb:cc:99:8a:8a:b8:86:77:10:c1:22:eb:89:29:f1:ce:b1:
18:62:4a:a4:04:b4:14:51:63:19:be:01:8f:35:b6:07:71:60:
5b:a6:4f:fc:91:64:a0:0c:e5:b8:2b:1b:ca:86:53:1a:bc:da:
0f:00:91:b5:ab:11:93:18:50:80:94:03:4b:be:72:d2:63:83:
1d:d8:e6:f9:0d:e5:a5:c1:97:f8:f7:54:7d:94:91:da:7b:2c:
ed:56:c5:6b:31:67:2d:43:19:f8:e4:1d:56:09:30:fe:d9:d2:
a7:cd:ce:30:81:14:51:74:fa:eb:bb:50:5a:6b:1f:71:b5:e7:
24:89:84:be:87:44:4c:8c:9f:35:08:7b:d4:f0:df:ae:80:fb:
eb:9b:f2:46:d0:84:51:6a:ba:4e:04:ea:fe:12:82:87:12:b7:
6c:c5:72:97:e0:66:e6:9f:35:b0:54:90:84:d1:22:6e:ab:e2:
8d:f1:87:00:c7:d7:7c:d8:9c:1b:2b:60:e4:8b:76:89:12:af:
77:b3:c2:e0:d9:ad:84:25:ab:97:fe:6f:b2:04:eb:3b:15:f4:
d7:9e:c9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXayA0Q87oStaU1SXaWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2VlMThjNDYzOWVlYWExNmE2MTkwOGNjYjQ1YzdhOThk
NWRkNmIwHhcNMjYwMzI1MjEwMTMyWhcNMjYwMzI2MjEwMTMyWjAzMTEwLwYDVQQD
EygxNmM4ZDY5Y2ZmOTgwMzM1NmMwMDQ3MmU2OGMwZGU2MGQ0OWQ3OWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6iWtHE4fAs8RzCBw/OlbFP58nAI
kPr1v5M4mJPaXNOhT7N6Npi55Yqnu72gUM3ieJ2kvu052ynpbdUKYa1ZQuq2sIce
8eWpd5nUxd4qJ2dnPUYYg99MvGc60VR67xObiQ15yCiMggqcmQYtzktf/RmcD/lM
3QsIieI812CMIU14CN27Fk0S1cx/ZnMi+O5ofPU3rvPFcx99qlr5AsBEwngKfIAW
oLBMWcwZagLZTdX3Akj80/VX4FFYevahdDAMjw37TsYe1Xu8/2SeURsU6ZclVdNv
vOUaElcNT+vR1mAdmNfzc/yf4eZzkw3eJDTnk1zPbRnGgOgQduBSf+k3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbI1pz/mAM1bABHLmjA3mDUnXnkMB8GA1UdIwQY
MBaAFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDkt
YTBkZDNiNWYxNWY4LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDktYTBkZDNiNWYxNWY4
LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrhfjLvd
lhckU3HNLPpoqpLvvh5k4hq1ZGen/xzn6dYTk7LDJPvMmYqKuIZ3EMEi64kp8c6x
GGJKpAS0FFFjGb4BjzW2B3FgW6ZP/JFkoAzluCsbyoZTGrzaDwCRtasRkxhQgJQD
S75y0mODHdjm+Q3lpcGX+PdUfZSR2nss7VbFazFnLUMZ+OQdVgkw/tnSp83OMIEU
UXT667tQWmsfcbXnJImEvodETIyfNQh71PDfroD765vyRtCEUWq6TgTq/hKChxK3
bMVyl+Bm5p81sFSQhNEibqvijfGHAMfXfNicGytg5It2iRKvd7PC4NmthCWrl/5v
sgTrOxX0157JRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:09 2026 by rpki-client