Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: 3np3UCHd8tyXvkMra7kk53xwcXGCC8JB8hwa+firdl8=
Subject key identifier: D2:42:9E:33:1D:14:97:D0:55:3E:44:45:38:1B:79:CE:CF:FD:51:A4
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 019D262897168EB5519C2ADA0F9F45A76EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 178B
Signing time: Wed 25 Mar 2026 18:01:27 +0000
Manifest this update: Wed 25 Mar 2026 18:01:27 +0000
Manifest next update: Thu 26 Mar 2026 18:01:27 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: a0DpRzKE7PUgUl9CWQD6sIkp9ZquC1EpereAVDIOMIU=)
2: dyj7Xcwg4fvIbgPvLBUgjAO8LDU.roa (hash: y2HtW5TPaDlHi0yiYdSPvHi8+3pJRBtpk7Wjb7tENAo=)
3: ocZPY67okT9wcZzWFKWfg9AUJ1M.roa (hash: iDAiG1YKPh6kU5IMftBrjc5iYiPA+UXefNbDPt+Am8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:97:16:8e:b5:51:9c:2a:da:0f:9f:45:a7:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Mar 25 18:01:27 2026 GMT
Not After : Mar 26 18:01:27 2026 GMT
Subject: CN=d2429e331d1497d0553e4445381b79cecffd51a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:69:0f:83:31:7d:69:fc:09:6b:59:42:f0:
5b:90:d9:1a:c1:79:68:e6:f9:96:0f:35:58:25:6e:
a0:88:8a:94:89:40:14:ab:d5:17:c3:1d:c5:be:8c:
b4:c5:00:55:15:60:b5:ef:3e:b8:76:43:93:ff:4b:
c1:c5:36:46:c2:25:cc:f6:34:bc:29:9e:d4:77:72:
31:67:d2:08:f8:2d:a0:47:70:f7:49:b7:26:29:09:
c6:4a:68:e7:ff:8d:f2:fd:6c:d4:41:96:71:78:ec:
81:04:2a:6d:70:3a:40:65:ea:9c:6f:cf:2c:32:d3:
66:6c:e5:a7:fa:b8:cf:70:b0:f7:d5:d3:c0:fd:1b:
3c:b6:99:53:41:f1:30:ce:45:7b:c8:e7:fb:ef:4b:
cc:52:5e:87:ef:e7:86:22:f0:3a:98:9d:11:9f:64:
1a:e8:07:91:8f:79:20:d1:c7:cf:0a:4a:28:bc:e2:
42:21:ba:70:c4:55:16:7b:53:94:f0:ff:87:ca:50:
a4:a2:56:1d:7c:76:e7:09:40:78:61:cd:87:ba:99:
cf:88:0b:0e:50:1a:6e:9a:5c:b8:3d:eb:56:bc:c1:
2c:2e:a2:3b:48:db:c7:13:ae:59:14:20:0f:01:a5:
f7:9c:3c:f0:ab:1e:e4:e7:b4:99:c0:a5:65:41:fd:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:9E:33:1D:14:97:D0:55:3E:44:45:38:1B:79:CE:CF:FD:51:A4
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:53:0e:0f:7e:7a:5c:17:bd:0d:a4:75:69:50:96:3e:b7:d1:
dc:0f:a0:ad:17:91:e4:b0:e7:14:f4:37:63:40:ce:0d:8c:b8:
f1:b7:33:25:b1:69:03:8c:4c:08:03:8e:44:67:3d:10:58:f3:
bc:a0:f3:fe:b5:50:10:72:df:47:7b:64:e5:c6:01:ed:2b:ec:
bb:72:86:b7:a4:5d:35:1d:ed:b1:5c:35:97:e7:c5:ec:77:c8:
a3:45:87:2f:b3:01:e6:08:80:1d:67:0f:af:07:b5:ed:c3:66:
6d:c2:99:35:83:2b:9b:bc:e8:c1:01:49:2c:67:e2:93:a7:fd:
a2:41:0d:81:84:f4:6f:65:8d:74:98:85:7a:48:76:c7:8a:cc:
98:bb:26:ca:27:52:a9:2b:19:b3:a6:a6:6f:b2:b7:c3:ab:27:
59:a0:31:80:78:56:3d:8e:94:85:71:d8:a5:94:76:07:54:c3:
72:14:79:39:44:eb:8b:73:a3:cc:16:8b:4a:4b:ca:d2:fe:48:
72:46:8c:a4:bd:fb:19:47:cd:4e:6d:33:af:ff:42:77:2e:de:
61:7c:a4:bb:df:6a:80:3e:3f:6f:f7:b2:b6:de:8f:4d:0c:23:
8b:6f:e0:2c:1f:99:2c:43:85:ab:8c:7a:33:ea:b1:71:41:35:
e7:dc:5c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJcWjrVRnCraD59Fp26gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5
YTM3MmEwHhcNMjYwMzI1MTgwMTI3WhcNMjYwMzI2MTgwMTI3WjAzMTEwLwYDVQQD
EyhkMjQyOWUzMzFkMTQ5N2QwNTUzZTQ0NDUzODFiNzljZWNmZmQ1MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT5pD4MxfWn8CWtZQvBbkNkawXlo
5vmWDzVYJW6giIqUiUAUq9UXwx3Fvoy0xQBVFWC17z64dkOT/0vBxTZGwiXM9jS8
KZ7Ud3IxZ9II+C2gR3D3SbcmKQnGSmjn/43y/WzUQZZxeOyBBCptcDpAZeqcb88s
MtNmbOWn+rjPcLD31dPA/Rs8tplTQfEwzkV7yOf770vMUl6H7+eGIvA6mJ0Rn2Qa
6AeRj3kg0cfPCkoovOJCIbpwxFUWe1OU8P+HylCkolYdfHbnCUB4Yc2HupnPiAsO
UBpumly4PetWvMEsLqI7SNvHE65ZFCAPAaX3nDzwqx7k57SZwKVlQf2wkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJCnjMdFJfQVT5ERTgbec7P/VGkMB8GA1UdIwQY
MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt
NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh
LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilMOD356
XBe9DaR1aVCWPrfR3A+grReR5LDnFPQ3Y0DODYy48bczJbFpA4xMCAOORGc9EFjz
vKDz/rVQEHLfR3tk5cYB7Svsu3KGt6RdNR3tsVw1l+fF7HfIo0WHL7MB5giAHWcP
rwe17cNmbcKZNYMrm7zowQFJLGfik6f9okENgYT0b2WNdJiFekh2x4rMmLsmyidS
qSsZs6amb7K3w6snWaAxgHhWPY6UhXHYpZR2B1TDchR5OUTri3OjzBaLSkvK0v5I
ckaMpL37GUfNTm0zr/9Cdy7eYXyku99qgD4/b/eytt6PTQwji2/gLB+ZLEOFq4x6
M+qxcUE159xcwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:28 2026 by rpki-client