Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: fMmS/KDZ6DJo3ajuxl5+z+FL8B5h1JbSq+qfMEoNZSw=
Subject key identifier: 25:63:DB:74:A8:E4:27:02:1B:6F:77:26:22:BC:37:AD:F9:AB:35:82
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019D38D39FFAFD966006073BD911E48850BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: ScfnQU/Qk37PfV2c/KdcyRYgAmRWlzRW3SCCpqROsIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:fa:fd:96:60:06:07:3b:d9:11:e4:88:50:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=2563db74a8e427021b6f772622bc37adf9ab3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:c9:b6:78:dc:d4:9f:2f:b2:e1:92:21:38:
5b:ea:12:bd:40:01:f8:58:c4:ac:55:57:bf:56:18:
96:df:09:0d:7d:26:a3:ea:9e:cc:bb:fb:3f:c0:bc:
8b:bf:6a:5c:22:2c:37:c8:a9:70:1b:18:8b:54:d0:
96:c5:7f:6b:a3:eb:dc:72:b6:bd:03:fa:d6:a7:8f:
93:69:51:00:6d:c4:c3:4e:46:0b:bf:00:bc:b4:11:
0a:69:11:5d:ea:a8:78:d1:11:06:b8:94:b6:59:f7:
eb:4f:b5:a9:9e:58:67:45:25:f9:d9:3e:3e:45:c2:
78:3b:26:f0:89:38:a8:35:a9:c6:ee:f6:13:f8:10:
55:7e:26:e2:d7:e9:7d:32:34:7f:2d:be:30:20:b7:
21:24:d5:69:e8:10:10:2a:f2:a8:4a:da:84:a9:04:
7c:d8:7f:e9:15:08:50:6c:a8:d7:01:b5:dd:08:65:
cf:e1:65:9d:ee:31:dd:ce:80:83:2c:3b:b2:85:7b:
c4:c5:f8:1e:fe:4c:c5:e7:f0:9d:b5:64:ce:f2:9e:
aa:1e:5f:63:ed:20:58:a6:55:3b:78:c7:3b:28:79:
5c:fd:86:99:d9:28:17:98:93:b3:9b:08:74:07:e2:
e5:85:4a:12:0d:67:47:2e:e0:58:4f:c2:4b:b9:98:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:DB:74:A8:E4:27:02:1B:6F:77:26:22:BC:37:AD:F9:AB:35:82
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:41:2b:8c:91:c1:2b:9c:a4:a2:35:4e:91:73:76:6b:75:
06:a0:78:2e:98:59:85:8b:13:53:91:20:08:cd:1d:92:8c:83:
58:41:2e:43:e2:44:8f:d5:29:6d:e2:21:a9:25:a8:7c:40:e8:
0c:f2:17:7f:ca:8d:15:77:e9:8a:ef:7a:d4:49:c5:9c:95:b8:
4d:4a:9d:6d:d8:13:c0:3f:d1:ce:2f:87:01:d7:d3:d9:c6:fc:
9a:cf:2e:62:8a:e8:23:d3:fc:72:d1:9a:6f:76:a1:2c:0f:b7:
27:6a:76:b8:65:e3:2a:2d:f3:12:35:97:9a:f7:7d:b2:4d:42:
dd:00:69:60:91:37:ea:46:c7:06:8e:6d:3e:e3:4f:b3:aa:43:
d9:77:a6:40:0e:d7:89:d3:45:97:59:5b:56:ba:9b:7d:aa:db:
4e:06:09:ba:84:89:4e:1e:e9:4d:5a:13:98:18:54:2c:a5:2a:
09:75:e6:eb:76:6b:3c:65:01:de:4d:18:d5:be:ae:9c:c4:aa:
86:8a:51:d3:02:0c:d2:a4:33:71:c2:bc:2c:2f:02:4a:63:da:
ab:10:9f:b9:b8:ac:63:a0:b6:8d:56:ad:ca:bd:69:28:2f:64:
69:43:46:32:96:38:01:b3:9c:ac:55:07:36:5d:fc:09:29:36:
47:e5:9a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0405/6/ZZgBgc72RHkiFC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1
NjVlZGIwHhcNMjYwMzI5MDkwMTI2WhcNMjYwMzMwMDkwMTI2WjAzMTEwLwYDVQQD
EygyNTYzZGI3NGE4ZTQyNzAyMWI2Zjc3MjYyMmJjMzdhZGY5YWIzNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWPJtnjc1J8vsuGSIThb6hK9QAH4
WMSsVVe/VhiW3wkNfSaj6p7Mu/s/wLyLv2pcIiw3yKlwGxiLVNCWxX9ro+vccra9
A/rWp4+TaVEAbcTDTkYLvwC8tBEKaRFd6qh40REGuJS2WffrT7WpnlhnRSX52T4+
RcJ4OybwiTioNanG7vYT+BBVfibi1+l9MjR/Lb4wILchJNVp6BAQKvKoStqEqQR8
2H/pFQhQbKjXAbXdCGXP4WWd7jHdzoCDLDuyhXvExfge/kzF5/CdtWTO8p6qHl9j
7SBYplU7eMc7KHlc/YaZ2SgXmJOzmwh0B+LlhUoSDWdHLuBYT8JLuZizvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVj23So5CcCG293JiK8N635qzWCMB8GA1UdIwQY
MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct
ZWY2MWE2MTQxNDJkLzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk
LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoJBK4yR
wSucpKI1TpFzdmt1BqB4LphZhYsTU5EgCM0dkoyDWEEuQ+JEj9UpbeIhqSWofEDo
DPIXf8qNFXfpiu961EnFnJW4TUqdbdgTwD/Rzi+HAdfT2cb8ms8uYoroI9P8ctGa
b3ahLA+3J2p2uGXjKi3zEjWXmvd9sk1C3QBpYJE36kbHBo5tPuNPs6pD2XemQA7X
idNFl1lbVrqbfarbTgYJuoSJTh7pTVoTmBhULKUqCXXm63ZrPGUB3k0Y1b6unMSq
hopR0wIM0qQzccK8LC8CSmPaqxCfubisY6C2jVatyr1pKC9kaUNGMpY4AbOcrFUH
Nl38CSk2R+WaVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:54 2026 by rpki-client