Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: KQDxm0lTFB/eitWGwNy2HW83xjLK7kqC3pLJKAzm5nA=
Subject key identifier: 32:E2:7C:E2:29:B0:33:F6:45:9D:F9:CC:89:EB:00:6D:7D:A7:87:43
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 019D27A8E3D36069CE8BABA3F0173B5A0AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 1014
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: e78PBzP0xGTlnIV4Sbq6jP5uwvc2gtL8SfqwvQ+Rmac=)
2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e3:d3:60:69:ce:8b:ab:a3:f0:17:3b:5a:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=32e27ce229b033f6459df9cc89eb006d7da78743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:18:79:a5:5e:61:2a:43:f5:12:b3:ba:d4:
65:6d:38:75:07:7e:67:2f:b1:2d:3f:0e:d9:bf:d6:
b7:9b:73:c3:84:90:a5:58:cb:c5:ca:7e:f8:65:81:
40:12:cd:48:c5:78:a1:1b:fa:4c:b5:f8:b5:a2:1b:
3e:13:76:0d:88:61:55:a9:c0:35:e9:81:e3:ab:65:
fb:93:dc:f3:c6:0c:62:0e:01:43:be:91:c3:34:ca:
9b:1b:3a:75:94:b5:eb:d9:f0:03:43:04:04:41:9c:
35:8a:c0:29:28:1e:75:fe:ce:dc:9f:37:6a:ae:d7:
e3:eb:00:9e:d1:6f:92:35:6d:02:1d:b8:19:f0:0c:
29:82:c1:2a:15:e4:f5:4e:42:46:95:cf:e2:46:2c:
71:91:d0:a4:88:53:5b:bc:1a:5d:8d:9d:b6:8b:77:
d2:2d:81:36:f3:0c:4f:5f:59:4d:38:ac:93:a9:b1:
d8:c6:05:f9:25:55:d1:d5:ad:61:1a:c7:17:ea:3c:
c8:c8:f1:3c:00:0e:0d:68:bc:b8:43:b6:4a:50:36:
b4:eb:12:d6:f6:f4:d1:fb:fc:11:f0:ef:4c:4b:0b:
a7:a4:4a:ab:6d:26:a9:37:03:73:11:09:7f:cb:72:
d2:df:fb:46:46:d9:46:f8:27:41:42:c7:10:25:a1:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E2:7C:E2:29:B0:33:F6:45:9D:F9:CC:89:EB:00:6D:7D:A7:87:43
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:42:35:ad:8e:8c:21:24:8c:9e:79:f5:4b:96:95:01:6f:
1d:b5:d2:0e:b4:fe:51:cd:e1:0b:ee:06:86:84:87:58:13:28:
83:c9:3d:3a:31:34:51:ee:b5:72:de:5d:4d:d1:e5:e5:06:de:
95:c1:ee:6d:93:f5:f2:2f:a5:51:bd:71:67:db:7d:84:34:6f:
62:f8:15:03:39:87:cb:4e:65:ed:1c:50:1a:2d:85:e8:3e:0c:
54:d2:c9:55:18:57:61:1f:67:91:9b:d6:3c:fb:30:79:d3:23:
0d:15:00:f7:18:95:fc:f5:7d:d9:c3:21:b0:fa:51:dc:a1:f2:
c4:cd:18:8d:e3:b3:ce:7b:b1:6d:e2:7d:fe:7c:25:98:db:7f:
6d:b2:b4:cc:16:f2:b9:3a:1e:a5:ac:20:f6:04:99:59:7f:6c:
6a:b8:93:2d:c6:35:97:6c:5d:5a:10:0d:4e:59:cd:10:ff:3c:
67:d8:ee:9a:ea:01:68:84:66:f8:00:7b:5f:1b:d9:f5:05:b7:
98:dc:9d:c8:19:98:22:c5:bc:c8:cf:dd:88:f6:ef:8d:b3:5a:
c6:2f:5d:40:4d:3c:64:32:97:c2:0b:09:e8:9b:0f:11:d3:23:
4b:e1:40:a9:49:29:b1:ce:73:98:e3:3e:16:29:e1:3e:ee:0b:
d1:ed:b1:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOPTYGnOi6uj8Bc7WgrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
EygzMmUyN2NlMjI5YjAzM2Y2NDU5ZGY5Y2M4OWViMDA2ZDdkYTc4NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12wYeaVeYSpD9RKzutRlbTh1B35n
L7EtPw7Zv9a3m3PDhJClWMvFyn74ZYFAEs1IxXihG/pMtfi1ohs+E3YNiGFVqcA1
6YHjq2X7k9zzxgxiDgFDvpHDNMqbGzp1lLXr2fADQwQEQZw1isApKB51/s7cnzdq
rtfj6wCe0W+SNW0CHbgZ8AwpgsEqFeT1TkJGlc/iRixxkdCkiFNbvBpdjZ22i3fS
LYE28wxPX1lNOKyTqbHYxgX5JVXR1a1hGscX6jzIyPE8AA4NaLy4Q7ZKUDa06xLW
9vTR+/wR8O9MSwunpEqrbSapNwNzEQl/y3LS3/tGRtlG+CdBQscQJaH4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLifOIpsDP2RZ35zInrAG19p4dDMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQS9CNa2O
jCEkjJ559UuWlQFvHbXSDrT+Uc3hC+4GhoSHWBMog8k9OjE0Ue61ct5dTdHl5Qbe
lcHubZP18i+lUb1xZ9t9hDRvYvgVAzmHy05l7RxQGi2F6D4MVNLJVRhXYR9nkZvW
PPswedMjDRUA9xiV/PV92cMhsPpR3KHyxM0YjeOzznuxbeJ9/nwlmNt/bbK0zBby
uToepawg9gSZWX9sariTLcY1l2xdWhANTlnNEP88Z9jumuoBaIRm+AB7XxvZ9QW3
mNydyBmYIsW8yM/diPbvjbNaxi9dQE08ZDKXwgsJ6JsPEdMjS+FAqUkpsc5zmOM+
FinhPu4L0e2xxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:11:06 2026 by rpki-client