Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: 5D47c5RcdB4tgNue5xtJ1uEJ67bb+zAsKkgh6tAzCBA=
Subject key identifier: 5A:DE:E9:12:F6:71:E7:E0:32:8C:77:B5:C4:AA:34:64:8B:EE:8D:0C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019D37C05E27446E454C0898FA18DC66F808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1310
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: Se6ctXdZbmu30xAhNh0/pO/APEnp6+zFaFOyLiF8D+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5e:27:44:6e:45:4c:08:98:fa:18:dc:66:f8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=5adee912f671e7e0328c77b5c4aa34648bee8d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:52:0f:a6:80:b5:91:31:1a:c4:50:89:3d:
1b:d5:8b:3e:10:20:fb:62:09:ac:01:28:cd:a5:e3:
4e:53:45:86:b2:19:65:1d:1a:43:50:7c:ba:04:1d:
af:a7:04:5c:67:d5:92:7a:e9:14:80:f0:dc:e9:8c:
26:85:ab:d5:02:d0:07:83:df:ac:9f:f8:0f:52:c8:
3e:2d:01:bf:37:d1:3f:22:25:f1:31:84:b5:d1:c6:
74:b5:50:d2:12:3e:6c:58:81:ed:51:8d:b7:ee:cf:
52:86:8b:89:a6:27:a9:6f:f4:ad:ae:a0:8e:c7:f1:
6f:b5:0c:94:1b:04:34:af:af:7c:be:c8:41:04:1d:
08:cc:b1:6f:e4:de:c8:80:e7:89:24:0f:f7:c3:95:
33:06:eb:5a:b1:b1:ac:c5:07:52:0a:75:60:23:a8:
93:16:fd:9c:b3:81:dc:6b:79:8b:15:30:eb:c7:a5:
c4:ba:f1:c4:a4:1a:e0:d8:b3:97:a5:dc:53:fc:63:
99:7e:a9:d5:40:ca:bf:fa:4b:40:4e:2e:80:5a:86:
79:a6:21:b1:63:67:f9:bb:a5:45:50:de:cc:74:51:
2d:72:0a:06:08:27:f9:3d:b6:4a:9e:c4:3d:20:3d:
c9:72:3f:48:54:8e:57:e7:d6:5f:ef:52:4a:ed:30:
fc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:E9:12:F6:71:E7:E0:32:8C:77:B5:C4:AA:34:64:8B:EE:8D:0C
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:aa:9e:da:d1:69:cc:93:89:48:e8:87:0e:6c:74:18:f1:67:
e9:21:0a:34:50:73:74:66:30:53:56:c5:af:10:42:95:0c:66:
a9:68:f9:ee:19:a2:ac:3b:ac:68:d4:e4:0a:b0:6e:fa:d2:40:
5e:68:13:70:c3:0e:47:94:94:79:93:56:2d:0e:44:5d:36:e7:
d3:67:d9:4b:ce:07:6a:78:8b:da:e5:6f:12:53:34:9b:22:e2:
d7:ba:94:21:2f:65:e1:e3:da:9c:c4:02:bc:7c:d4:44:6d:bc:
18:22:7d:1b:3e:d9:3a:41:93:36:7e:52:e9:52:f4:62:d6:0e:
56:4d:85:4f:17:9e:42:d2:23:30:e0:4a:5a:d1:2d:1d:a3:28:
8b:a2:31:e9:ab:2c:b4:bf:8b:17:e6:cd:1d:f5:9b:6b:94:a1:
e0:7c:1d:63:2d:57:88:cf:c4:7b:24:a0:f8:ca:cb:0a:20:c9:
b9:15:f2:b1:1d:d1:86:fc:70:4f:0a:87:5d:50:75:b4:3a:1b:
c2:b2:c5:35:99:6d:2b:8e:55:d6:a3:28:bc:09:c5:3a:f4:a6:
ec:42:83:5f:03:b8:66:50:f0:f4:6b:c5:5e:1c:06:a9:49:c5:
0a:a6:c4:5a:1f:f6:3c:ae:01:29:52:67:ed:bc:a4:61:3a:75:
ce:43:0a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wF4nRG5FTAiY+hjcZvgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYTg1MTY3MDRmNTc0OTI4MzViOTRkMDA3MDI3MzI4YzIy
ZmE0MGUwHhcNMjYwMzI5MDQwMDQ3WhcNMjYwMzMwMDQwMDQ3WjAzMTEwLwYDVQQD
Eyg1YWRlZTkxMmY2NzFlN2UwMzI4Yzc3YjVjNGFhMzQ2NDhiZWU4ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTdSD6aAtZExGsRQiT0b1Ys+ECD7
YgmsASjNpeNOU0WGshllHRpDUHy6BB2vpwRcZ9WSeukUgPDc6YwmhavVAtAHg9+s
n/gPUsg+LQG/N9E/IiXxMYS10cZ0tVDSEj5sWIHtUY237s9ShouJpiepb/StrqCO
x/FvtQyUGwQ0r698vshBBB0IzLFv5N7IgOeJJA/3w5UzButasbGsxQdSCnVgI6iT
Fv2cs4Hca3mLFTDrx6XEuvHEpBrg2LOXpdxT/GOZfqnVQMq/+ktATi6AWoZ5piGx
Y2f5u6VFUN7MdFEtcgoGCCf5PbZKnsQ9ID3Jcj9IVI5X59Zf71JK7TD81QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFre6RL2cefgMox3tcSqNGSL7o0MMB8GA1UdIwQY
MBaAFPKoUWcE9XSSg1uU0AcCcyjCL6QOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODkt
N2Q0ZDk0MWEzN2QxLzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yNDdlYjctNGJiMC00YTFiLTk1ODktN2Q0ZDk0MWEzN2Qx
LzEvOHFoUlp3VDFkSktEVzVUUUJ3SnpLTUl2cEE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKqe2tFp
zJOJSOiHDmx0GPFn6SEKNFBzdGYwU1bFrxBClQxmqWj57hmirDusaNTkCrBu+tJA
XmgTcMMOR5SUeZNWLQ5EXTbn02fZS84HaniL2uVvElM0myLi17qUIS9l4ePanMQC
vHzURG28GCJ9Gz7ZOkGTNn5S6VL0YtYOVk2FTxeeQtIjMOBKWtEtHaMoi6Ix6ass
tL+LF+bNHfWba5Sh4HwdYy1XiM/EeySg+MrLCiDJuRXysR3RhvxwTwqHXVB1tDob
wrLFNZltK45V1qMovAnFOvSm7EKDXwO4ZlDw9GvFXhwGqUnFCqbEWh/2PK4BKVJn
7bykYTp1zkMKcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:41 2026 by rpki-client