Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: i3GaiU+NYQIMS88zOCPjpPGh4grcHuxbp+o38ItLDtk=
Subject key identifier: 47:98:81:8A:C3:6F:CE:FD:8F:CE:65:74:EE:8C:52:2B:35:EB:E6:D5
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019D28F2544E9580E9E8081C6DB5F1A4F4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 13C8
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: uYdmEM2lUUBdVy8pksY1wVP15fXWGI0Su1LVpyvJsL4=)
2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:54:4e:95:80:e9:e8:08:1c:6d:b5:f1:a4:f4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=4798818ac36fcefd8fce6574ee8c522b35ebe6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:d5:48:f5:46:17:5e:c0:de:9c:eb:c0:ea:
df:7d:c8:48:99:89:68:e4:34:8f:de:3b:a5:1f:ef:
83:7a:89:6a:19:64:b5:59:cd:dd:f6:d0:d7:e2:f9:
e3:c2:18:5b:5b:52:75:b3:34:03:90:9c:16:9a:d2:
e5:20:89:23:53:8c:d3:4b:8d:27:8e:e1:18:fc:cf:
05:36:21:84:6c:33:8c:44:99:1b:45:5f:62:c3:4a:
f4:a6:f1:30:21:2a:cd:5a:e2:97:ed:df:49:a1:0b:
6f:1c:e2:aa:91:bd:85:42:6f:04:b2:33:37:75:f2:
b0:09:b2:f8:5d:f2:b1:a0:22:0c:bf:86:07:0d:ce:
c7:6f:22:3c:53:6c:09:21:ab:90:c7:5a:28:05:5f:
28:09:b6:9e:76:80:c0:ea:29:ed:69:be:76:f6:01:
43:5c:b0:bf:b4:cc:c9:f9:9e:bb:3c:d9:35:ce:17:
92:7c:be:f0:f7:81:8d:60:75:69:9a:62:c8:a2:6f:
2b:8b:19:37:8e:c7:e9:a3:bb:82:82:de:74:32:a3:
8d:c2:1b:41:72:72:18:52:cd:7b:36:a1:ed:e9:18:
de:fc:9d:99:41:03:41:50:49:07:3a:91:7f:05:be:
86:d2:7f:93:3d:4c:8a:2c:4d:98:37:f3:f1:1e:fa:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:81:8A:C3:6F:CE:FD:8F:CE:65:74:EE:8C:52:2B:35:EB:E6:D5
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4b:4c:fe:3c:ca:d8:67:e2:33:90:d6:0f:d4:e2:74:ab:19:
00:aa:6c:66:a9:12:67:25:03:ec:b7:76:74:f1:8f:9a:54:bb:
96:89:d0:bf:cb:15:3d:4b:0a:1d:73:f9:51:f1:ed:d5:8a:2d:
3a:a8:22:c9:cd:8d:4e:83:42:15:87:bc:ba:20:4b:d2:d6:64:
ee:dc:ff:96:b8:03:f7:90:80:a4:a7:ae:a4:5b:0d:b5:dd:4b:
a1:42:c9:a2:6e:35:ce:b2:b4:a1:ee:d2:81:39:f3:c6:cf:fa:
3e:72:b3:2e:d8:44:9d:ab:8d:bf:d6:10:f6:38:06:70:84:e5:
38:c1:64:9c:53:32:84:ef:cc:ae:b5:74:cb:d0:3d:24:37:3f:
3d:db:a1:37:b6:fe:2f:74:99:74:ab:02:61:f1:ae:c1:c0:ab:
6b:d6:76:af:29:08:6c:4f:d1:4a:43:59:89:13:38:e9:09:b8:
32:20:4d:36:74:51:5d:e6:05:07:9a:24:1c:3a:80:f2:1d:f8:
cf:ec:6a:43:f4:a5:a7:30:98:b5:da:d5:57:80:a0:56:f0:be:
0a:04:ec:bd:d5:e6:20:3a:bb:c5:f3:9a:26:e6:5a:14:e7:7a:
08:6c:87:04:13:be:12:b3:8a:9d:92:e2:5a:46:71:e3:e2:5c:
a0:5f:74:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lROlYDp6AgcbbXxpPSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5
OTAxMzcwHhcNMjYwMzI2MDcwMTAyWhcNMjYwMzI3MDcwMTAyWjAzMTEwLwYDVQQD
Eyg0Nzk4ODE4YWMzNmZjZWZkOGZjZTY1NzRlZThjNTIyYjM1ZWJlNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/VSPVGF17A3pzrwOrffchImYlo
5DSP3julH++DeolqGWS1Wc3d9tDX4vnjwhhbW1J1szQDkJwWmtLlIIkjU4zTS40n
juEY/M8FNiGEbDOMRJkbRV9iw0r0pvEwISrNWuKX7d9JoQtvHOKqkb2FQm8EsjM3
dfKwCbL4XfKxoCIMv4YHDc7HbyI8U2wJIauQx1ooBV8oCbaedoDA6intab529gFD
XLC/tMzJ+Z67PNk1zheSfL7w94GNYHVpmmLIom8rixk3jsfpo7uCgt50MqONwhtB
cnIYUs17NqHt6Rje/J2ZQQNBUEkHOpF/Bb6G0n+TPUyKLE2YN/PxHvrBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeYgYrDb879j85ldO6MUis16+bVMB8GA1UdIwQY
MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt
NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx
LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsktM/jzK
2GfiM5DWD9TidKsZAKpsZqkSZyUD7Ld2dPGPmlS7lonQv8sVPUsKHXP5UfHt1Yot
Oqgiyc2NToNCFYe8uiBL0tZk7tz/lrgD95CApKeupFsNtd1LoULJom41zrK0oe7S
gTnzxs/6PnKzLthEnauNv9YQ9jgGcITlOMFknFMyhO/MrrV0y9A9JDc/PduhN7b+
L3SZdKsCYfGuwcCra9Z2rykIbE/RSkNZiRM46Qm4MiBNNnRRXeYFB5okHDqA8h34
z+xqQ/SlpzCYtdrVV4CgVvC+CgTsvdXmIDq7xfOaJuZaFOd6CGyHBBO+ErOKnZLi
WkZx4+JcoF90Xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:48 2026 by rpki-client