Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: 1H0WC7q0cN7viPipDMoyo8Ud4Hf96FpazGg0rc5eDZU=
Subject key identifier: 62:CC:A2:E7:A4:82:69:B6:86:31:B8:24:D9:6A:F7:A2:C8:F1:19:0E
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 019D26CD17817E80285B5D1B4D079B0845E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0807
Signing time: Wed 25 Mar 2026 21:01:08 +0000
Manifest this update: Wed 25 Mar 2026 21:01:08 +0000
Manifest next update: Thu 26 Mar 2026 21:01:08 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: pKJjDZaXL6W+YRQe7pnIBYVMUd+Gaw95C0Cil83hiWY=)
2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:17:81:7e:80:28:5b:5d:1b:4d:07:9b:08:45:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Mar 25 21:01:08 2026 GMT
Not After : Mar 26 21:01:08 2026 GMT
Subject: CN=62cca2e7a48269b68631b824d96af7a2c8f1190e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:78:0d:1e:07:63:93:66:ab:f5:59:32:79:
4b:69:03:5a:23:63:e7:f7:8e:30:e4:8c:8f:9f:10:
18:f8:47:aa:8b:35:28:41:3b:8b:3e:6d:34:77:4b:
4c:87:1b:35:be:e3:34:8a:bc:f6:bc:b3:13:d0:8b:
51:51:64:56:2f:fe:f1:bd:45:d4:51:ee:4e:6f:90:
9f:df:bf:4e:db:a4:7b:98:70:d1:93:22:31:52:e8:
fb:92:a2:e3:24:7e:3a:59:7b:e5:f5:ce:a7:14:15:
ea:f0:79:1b:b8:33:92:bf:79:1c:b7:23:4a:03:78:
48:74:1d:c5:13:8b:7e:66:15:6b:21:88:a4:63:c5:
ff:c4:a0:63:9e:82:be:d3:19:69:fc:ac:e5:a1:11:
7a:4f:ba:83:b5:d2:82:ca:90:40:43:23:e5:63:1d:
f8:42:d8:8f:78:98:ad:a2:fe:0f:1b:c2:ec:ac:ab:
6f:29:6a:e0:a7:fe:0a:75:ff:da:bf:07:a3:71:e3:
8f:ce:95:a7:8a:de:79:aa:b8:ac:5c:5d:f8:9e:39:
f2:82:fb:04:59:e2:80:c2:e1:e7:4d:f0:a3:17:70:
ee:d8:54:6d:29:3d:26:be:4c:dc:85:82:82:ad:ef:
0c:38:8f:8b:1b:74:33:21:63:1b:5c:37:d0:1d:b7:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:A2:E7:A4:82:69:B6:86:31:B8:24:D9:6A:F7:A2:C8:F1:19:0E
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6f:2e:7c:20:f5:72:e8:f7:c1:06:3d:47:f0:e4:69:ab:45:
d5:38:ed:4c:71:a3:e1:0c:82:e4:19:8e:a3:e4:c4:b3:a2:5d:
47:12:a8:23:b3:90:af:f3:ae:f0:7d:47:0a:a6:ee:9b:3b:dc:
4d:83:d6:35:4e:05:b2:e4:00:5c:d6:a6:3c:ea:b7:b0:96:32:
7c:d2:08:2f:12:8c:25:a9:52:b4:85:89:17:85:82:c1:c0:7d:
bc:a1:32:5f:ba:6b:a2:7d:e2:75:b3:e5:49:b0:b9:6b:b1:65:
9f:23:f2:2b:f3:bc:fe:bb:ae:c5:27:38:1a:dd:e7:44:46:b3:
1f:36:34:e0:c9:d3:78:29:c5:00:65:1e:55:05:5c:55:18:67:
99:4e:4f:2e:ca:1a:c2:07:73:2c:18:1e:f5:a3:0c:32:7d:c4:
1e:6a:af:8b:b7:0c:ba:05:97:61:da:23:6e:fa:c5:9a:c5:9b:
97:d4:19:c2:57:ec:8a:00:38:9b:44:37:97:05:17:4b:20:c3:
85:92:64:46:21:56:3e:6a:3d:ff:eb:cb:82:dd:d8:ca:14:29:
bd:ad:cf:c2:1e:24:be:bc:23:79:4b:d1:74:9d:65:88:35:33:
5b:43:5b:f9:32:78:aa:89:e2:06:c3:f1:29:58:d0:91:7f:f7:
09:fd:7c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzReBfoAoW10bTQebCEXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz
MDc2M2YwHhcNMjYwMzI1MjEwMTA4WhcNMjYwMzI2MjEwMTA4WjAzMTEwLwYDVQQD
Eyg2MmNjYTJlN2E0ODI2OWI2ODYzMWI4MjRkOTZhZjdhMmM4ZjExOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5t4DR4HY5Nmq/VZMnlLaQNaI2Pn
944w5IyPnxAY+EeqizUoQTuLPm00d0tMhxs1vuM0irz2vLMT0ItRUWRWL/7xvUXU
Ue5Ob5Cf379O26R7mHDRkyIxUuj7kqLjJH46WXvl9c6nFBXq8HkbuDOSv3kctyNK
A3hIdB3FE4t+ZhVrIYikY8X/xKBjnoK+0xlp/KzloRF6T7qDtdKCypBAQyPlYx34
QtiPeJitov4PG8LsrKtvKWrgp/4Kdf/avwejceOPzpWnit55qrisXF34njnygvsE
WeKAwuHnTfCjF3Du2FRtKT0mvkzchYKCre8MOI+LG3QzIWMbXDfQHbcaPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLMouekgmm2hjG4JNlq96LI8RkOMB8GA1UdIwQY
MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt
OThkOWM0MjU3ZmM2LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2
LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtm8ufCD1
cuj3wQY9R/DkaatF1TjtTHGj4QyC5BmOo+TEs6JdRxKoI7OQr/Ou8H1HCqbumzvc
TYPWNU4FsuQAXNamPOq3sJYyfNIILxKMJalStIWJF4WCwcB9vKEyX7pron3idbPl
SbC5a7FlnyPyK/O8/ruuxSc4Gt3nREazHzY04MnTeCnFAGUeVQVcVRhnmU5PLsoa
wgdzLBge9aMMMn3EHmqvi7cMugWXYdojbvrFmsWbl9QZwlfsigA4m0Q3lwUXSyDD
hZJkRiFWPmo9/+vLgt3YyhQpva3Pwh4kvrwjeUvRdJ1liDUzW0Nb+TJ4qoniBsPx
KVjQkX/3Cf18sw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:08 2026 by rpki-client