Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
File: _8P1ykeS2U0ao2616jqhtAQ80BQ.mft (raw, json)
Hash identifier: IYtS3mFpknW21f+s2WZcpnkcPcxjpZ1mQi3ne7D29TE=
Subject key identifier: 7F:9B:83:36:29:DA:4E:A3:E7:CC:ED:0D:B6:4C:38:7A:4E:8F:87:ED
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019CF496CED7974CD6963233D01A9E4126FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
Manifest number: 0105
Signing time: Mon 16 Mar 2026 03:00:49 +0000
Manifest this update: Mon 16 Mar 2026 03:00:49 +0000
Manifest next update: Tue 17 Mar 2026 03:00:49 +0000
Files and hashes: 1: EEdFeU3OD4oK76Yk28EPB4ZyAUo.roa (hash: VPVnKiIWehqGx9/jXmfxd9B/SMafslCiM6Ch4IlHBpY=)
2: _8P1ykeS2U0ao2616jqhtAQ80BQ.crl (hash: wW2EAYUNGSFi3v6uXGY4XdsKf9T1G0os6uPrhZDULWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:96:ce:d7:97:4c:d6:96:32:33:d0:1a:9e:41:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Mar 16 03:00:49 2026 GMT
Not After : Mar 17 03:00:49 2026 GMT
Subject: CN=7f9b833629da4ea3e7cced0db64c387a4e8f87ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:64:85:6f:78:a4:58:7f:25:b1:ac:a5:3e:
79:9b:35:e5:19:1b:c7:0c:47:ce:a6:c5:b7:c9:6c:
f8:9d:76:35:fa:25:e0:e8:7e:60:21:ed:e5:09:77:
02:a6:12:66:32:0e:e9:c0:d7:68:9c:02:de:74:dc:
f6:d7:c8:58:75:67:46:29:e2:e0:49:24:b7:6b:dd:
d4:b8:02:46:50:aa:cb:52:48:99:fc:40:e1:46:09:
94:a0:0a:1e:97:96:86:d1:02:19:fd:40:7b:4c:83:
97:be:1d:a6:41:fe:4c:01:cc:7e:14:1d:e2:65:92:
40:0f:2d:06:f6:2e:cd:88:cc:66:2f:d6:a6:c5:26:
0e:98:d8:fa:ad:fc:19:79:54:43:6d:dd:c2:8a:ba:
57:98:7c:ab:92:ec:81:be:fa:c7:c7:96:cb:a2:cb:
bd:8d:74:23:0f:68:6c:84:d9:e4:8f:e5:d0:51:a9:
77:6c:ea:b8:87:e8:5e:09:18:0d:c1:85:c2:73:6a:
b0:65:68:76:35:e1:30:01:ea:58:94:4f:d2:5f:99:
f4:07:32:97:fe:46:ff:72:61:95:4e:fc:ff:26:fe:
49:c9:bb:40:da:de:13:de:b3:ee:17:97:dd:0c:66:
85:52:d0:8d:fb:8d:13:70:b4:b4:50:80:d3:f1:13:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9B:83:36:29:DA:4E:A3:E7:CC:ED:0D:B6:4C:38:7A:4E:8F:87:ED
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:37:da:10:29:1a:8e:04:95:b0:59:d3:0c:cc:74:5a:7b:c2:
4d:cc:87:3b:c0:59:b8:cf:5b:68:5e:1f:c1:70:34:50:79:0a:
b9:da:53:33:86:dc:11:a9:a0:66:f3:a0:50:d7:d8:71:b2:51:
32:99:44:4a:08:c2:e9:df:90:79:72:eb:80:18:20:60:a4:8c:
76:19:8c:ec:e3:d9:a7:da:eb:bf:41:ec:f2:18:8b:f2:ef:dd:
78:36:88:44:b3:d1:49:39:eb:0b:7f:97:bb:9f:70:ce:10:30:
7b:3e:6a:df:b6:ae:e1:35:9b:4d:fe:e7:85:d3:5b:99:18:19:
3d:8b:e8:10:89:8a:c3:d3:ba:6a:3d:7c:be:9b:6e:1f:b3:72:
a6:40:69:3c:18:03:05:66:22:bc:7a:d0:93:fd:0f:a6:49:d8:
c0:f0:c8:2f:66:30:2d:e7:bd:8c:51:58:24:da:4e:96:f9:af:
00:a3:73:33:5c:36:54:df:86:db:9a:5b:82:ca:79:b8:79:c0:
9b:e8:e8:0a:30:7a:a8:c1:1c:ae:3d:df:1d:5b:6f:bc:ea:77:
81:01:53:7e:39:69:f6:b5:95:4c:f3:90:40:99:12:e6:ed:c0:
18:ce:d7:27:4d:13:f3:8e:dd:13:c9:ca:ee:9a:be:65:8b:af:
2b:e4:07:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz0ls7Xl0zWljIz0BqeQSb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYzNmNWNhNDc5MmQ5NGQxYWEzNmViNWVhM2FhMWI0MDQz
Y2QwMTQwHhcNMjYwMzE2MDMwMDQ5WhcNMjYwMzE3MDMwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZjliODMzNjI5ZGE0ZWEzZTdjY2VkMGRiNjRjMzg3YTRlOGY4N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7FkhW94pFh/JbGspT55mzXlGRvH
DEfOpsW3yWz4nXY1+iXg6H5gIe3lCXcCphJmMg7pwNdonALedNz218hYdWdGKeLg
SSS3a93UuAJGUKrLUkiZ/EDhRgmUoAoel5aG0QIZ/UB7TIOXvh2mQf5MAcx+FB3i
ZZJADy0G9i7NiMxmL9amxSYOmNj6rfwZeVRDbd3CirpXmHyrkuyBvvrHx5bLosu9
jXQjD2hshNnkj+XQUal3bOq4h+heCRgNwYXCc2qwZWh2NeEwAepYlE/SX5n0BzKX
/kb/cmGVTvz/Jv5JybtA2t4T3rPuF5fdDGaFUtCN+40TcLS0UIDT8RNq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+bgzYp2k6j58ztDbZMOHpOj4ftMB8GA1UdIwQY
MBaAFP/D9cpHktlNGqNuteo6obQEPNAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEt
MjhlZDBmOTI4MTMzLzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZDY5NjMtZDI1Yy00MDJmLTllYTEtMjhlZDBmOTI4MTMz
LzEvXzhQMXlrZVMyVTBhbzI2MTZqcWh0QVE4MEJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzfaECka
jgSVsFnTDMx0WnvCTcyHO8BZuM9baF4fwXA0UHkKudpTM4bcEamgZvOgUNfYcbJR
MplESgjC6d+QeXLrgBggYKSMdhmM7OPZp9rrv0Hs8hiL8u/deDaIRLPRSTnrC3+X
u59wzhAwez5q37au4TWbTf7nhdNbmRgZPYvoEImKw9O6aj18vptuH7NypkBpPBgD
BWYivHrQk/0PpknYwPDIL2YwLee9jFFYJNpOlvmvAKNzM1w2VN+G25pbgsp5uHnA
m+joCjB6qMEcrj3fHVtvvOp3gQFTfjlp9rWVTPOQQJkS5u3AGM7XJ00T847dE8nK
7pq+ZYuvK+QHpg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 09:34:55 2026 by rpki-client