Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: j2q6Uep+ijAZkal40/ilM0JzC5uAir/6hB2w33hYWQ8=
Subject key identifier: F0:9D:4B:6A:18:B6:50:0C:57:CC:E3:B4:6D:58:CE:06:EF:D5:15:40
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 019D38662D64DCF5934F0C05B3C0CA87DABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: UnZ5eIgdgvI0idmhRTIioJBz0JlUsYKZMeuz1K1I1ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2d:64:dc:f5:93:4f:0c:05:b3:c0:ca:87:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=f09d4b6a18b6500c57cce3b46d58ce06efd51540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:60:42:10:f5:d7:67:3a:ae:b1:03:4c:d6:
4d:ab:2a:c5:2f:22:fe:d5:1f:ec:ca:af:c5:02:db:
0e:65:97:19:a2:68:d0:9e:0f:5f:50:1e:4e:1e:fd:
db:3a:7f:68:6d:d1:d3:d5:2a:53:3d:38:02:a9:e4:
ba:28:d6:89:3f:3f:69:8a:54:38:89:44:95:92:61:
03:6d:51:d6:60:ff:23:42:66:40:02:b8:39:ac:3d:
e1:ba:d1:27:6b:4c:38:b4:91:b5:17:ac:3b:97:fa:
71:08:b6:aa:c8:4f:df:44:a1:66:74:7f:98:8f:c9:
22:dd:38:20:55:6e:1e:71:6c:c9:5b:ec:5b:39:ee:
4b:2a:69:da:03:fb:c9:8a:1a:0c:b5:83:f7:1f:5c:
e7:64:41:a5:7e:f5:f7:06:be:94:12:e2:35:fc:0a:
c1:ed:9c:d9:19:23:49:70:39:f1:6e:19:9a:95:c7:
1e:14:41:cb:3b:19:26:7d:20:05:73:6e:82:5e:44:
13:45:2d:db:fa:4c:42:8b:6c:97:d9:4c:43:60:e5:
a3:9e:1e:83:46:71:9f:a1:98:56:5e:ec:71:1e:c9:
33:d9:2f:ad:36:df:49:ab:f5:f0:8c:d3:f0:4f:f3:
11:71:42:0a:0a:30:f3:0a:4f:51:ea:8a:0f:b0:4b:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:4B:6A:18:B6:50:0C:57:CC:E3:B4:6D:58:CE:06:EF:D5:15:40
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:81:5a:b3:e7:f3:e6:19:ff:e5:e2:bd:a2:df:68:a0:69:b4:
92:c9:0f:6b:25:02:79:3f:71:7b:59:2b:fc:ec:dd:57:59:f7:
9f:7f:3f:e7:af:18:66:d9:6d:98:41:29:dd:ee:14:27:c1:19:
6c:84:b0:af:60:fa:da:7d:bf:d5:b3:d1:a0:f9:be:c7:79:a3:
a2:74:b6:f9:f5:19:5e:28:70:67:2e:e0:e7:bd:55:7c:45:a6:
4c:21:2e:3a:cc:d0:e1:e9:8e:79:f1:12:a5:bb:68:fd:0c:0b:
24:d9:e3:b4:2d:88:e5:e7:9d:f5:1d:dd:56:d7:f6:f0:29:f0:
ef:94:ce:50:6a:84:32:4a:16:d9:e1:f1:bd:c5:5c:74:24:b0:
14:24:67:5f:f2:40:e3:34:69:af:0a:a9:fb:e0:a4:14:cd:71:
83:75:f7:a3:71:37:33:31:fc:16:38:50:aa:ec:b1:90:75:6f:
75:49:43:b8:9a:b8:c5:23:56:90:0d:de:ee:5a:72:dd:ac:ea:
b1:0f:08:01:9c:a3:32:e4:4a:35:9f:7e:f3:6a:ff:58:28:56:
f5:67:8b:b9:3d:48:2d:91:3f:0e:3f:c4:7f:d8:41:f7:03:31:
fe:0b:a6:3b:db:81:c0:77:eb:82:4d:e5:36:ba:4b:d2:9f:b0:
47:bf:b6:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zi1k3PWTTwwFs8DKh9q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGUzYzMyMmRiMTFjMTA0OTFlNWU4MzVmYzY2ZWZkNDJl
NTkwMTUwHhcNMjYwMzI5MDcwMTUzWhcNMjYwMzMwMDcwMTUzWjAzMTEwLwYDVQQD
EyhmMDlkNGI2YTE4YjY1MDBjNTdjY2UzYjQ2ZDU4Y2UwNmVmZDUxNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5idgQhD112c6rrEDTNZNqyrFLyL+
1R/syq/FAtsOZZcZomjQng9fUB5OHv3bOn9obdHT1SpTPTgCqeS6KNaJPz9pilQ4
iUSVkmEDbVHWYP8jQmZAArg5rD3hutEna0w4tJG1F6w7l/pxCLaqyE/fRKFmdH+Y
j8ki3TggVW4ecWzJW+xbOe5LKmnaA/vJihoMtYP3H1znZEGlfvX3Br6UEuI1/ArB
7ZzZGSNJcDnxbhmalcceFEHLOxkmfSAFc26CXkQTRS3b+kxCi2yX2UxDYOWjnh6D
RnGfoZhWXuxxHskz2S+tNt9Jq/XwjNPwT/MRcUIKCjDzCk9R6ooPsEuEdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCdS2oYtlAMV8zjtG1Yzgbv1RVAMB8GA1UdIwQY
MBaAFPBOPDItsRwQSR5eg1/Gbv1C5ZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzct
ZTY3MGUzZGQ1YzIxLzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzctZTY3MGUzZGQ1YzIx
LzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoFas+fz
5hn/5eK9ot9ooGm0kskPayUCeT9xe1kr/OzdV1n3n38/568YZtltmEEp3e4UJ8EZ
bISwr2D62n2/1bPRoPm+x3mjonS2+fUZXihwZy7g571VfEWmTCEuOszQ4emOefES
pbto/QwLJNnjtC2I5eed9R3dVtf28Cnw75TOUGqEMkoW2eHxvcVcdCSwFCRnX/JA
4zRprwqp++CkFM1xg3X3o3E3MzH8FjhQquyxkHVvdUlDuJq4xSNWkA3e7lpy3azq
sQ8IAZyjMuRKNZ9+82r/WChW9WeLuT1ILZE/Dj/Ef9hB9wMx/gumO9uBwHfrgk3l
NrpL0p+wR7+2Mg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:51 2026 by rpki-client