Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: 2dhY6hn4xQTItVQlBNEX6WpqEvqv/EbG4zJU/+TcxX0=
Subject key identifier: FB:78:A7:24:39:CB:C3:2E:47:BB:1D:B8:4C:48:F2:D9:65:F3:51:DF
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 019CDCC4CCC164D2DB9E98359B6014B8F1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 06B7
Signing time: Wed 11 Mar 2026 12:00:10 +0000
Manifest this update: Wed 11 Mar 2026 12:00:10 +0000
Manifest next update: Thu 12 Mar 2026 12:00:10 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: cQfWvs/RNjJSNhPubkHcpHzsu2lc6tk9EPDC2IGG98g=)
2: C9oMe1YGJS29C9D0RZNPa4l9ZGs.asa (hash: m/CMHyBpsoSrORDL0dlkFqewhiO241S8p6mdES9DKBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:c4:cc:c1:64:d2:db:9e:98:35:9b:60:14:b8:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Mar 11 12:00:10 2026 GMT
Not After : Mar 12 12:00:10 2026 GMT
Subject: CN=fb78a72439cbc32e47bb1db84c48f2d965f351df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:be:5b:2a:c4:e5:37:c6:00:02:7b:fc:74:
18:b4:f7:13:cc:5e:5d:cf:25:4a:d1:45:51:f0:b7:
3c:65:fc:dc:9a:37:bd:e1:5b:cb:6a:c7:9f:54:08:
4a:7b:fe:05:ff:cf:d5:f5:73:14:3e:50:ad:11:11:
66:de:a9:0d:7f:a6:a2:65:c1:6c:8b:04:19:b6:ee:
72:c9:4b:99:ee:22:4c:8a:dd:e5:5c:57:c4:c4:5d:
08:cd:f6:8f:8d:c5:26:ca:82:40:11:30:d3:94:46:
e9:c3:61:0c:0f:c8:e8:e7:af:fb:75:64:8c:6f:86:
70:66:b5:be:de:0b:68:17:95:d3:83:1c:5b:5f:c5:
c2:58:11:c3:b9:1e:3e:cd:5c:39:d7:2a:2d:86:3a:
28:b7:de:00:9a:ce:ea:db:ab:ee:6c:14:12:c5:49:
22:0a:d0:b1:dd:6c:ec:76:8c:54:d9:e4:95:af:83:
61:56:46:d7:8f:dd:e6:6b:f1:2b:ba:ba:ac:11:1b:
01:ec:83:b8:d7:6d:ee:92:01:a6:c4:4d:4a:b7:3e:
69:1e:e1:30:84:f5:e5:02:02:eb:f8:07:91:0f:a4:
7a:04:64:9d:8e:39:99:54:83:eb:14:6b:06:9e:4b:
c7:bb:38:ed:34:6a:9d:de:4b:82:df:9d:3a:b5:ed:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:78:A7:24:39:CB:C3:2E:47:BB:1D:B8:4C:48:F2:D9:65:F3:51:DF
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:22:7b:63:a7:58:06:78:6f:c5:2c:55:d0:15:e0:2e:98:1f:
39:b0:f1:fc:1e:ce:c2:ab:3b:b5:2b:19:48:3c:fb:37:45:99:
6e:f0:b3:aa:84:98:8b:52:f5:e8:aa:03:1c:47:46:d8:5b:9d:
e0:c4:63:2b:09:62:87:f5:72:62:72:ac:8e:71:93:35:b5:df:
01:a1:a7:b2:de:50:6b:44:f9:84:71:30:82:13:8b:c7:a9:b3:
3b:b3:07:cf:35:d5:c2:79:48:9b:29:12:74:4c:c1:e6:6a:e6:
b0:01:5f:70:1d:ad:b0:cb:de:3a:5e:44:7f:7f:8b:2d:8b:82:
c1:5a:a3:df:60:a0:d7:33:e3:65:3b:df:16:e5:9c:21:38:68:
cf:51:81:17:fd:d7:cb:62:b8:5e:dc:51:b9:10:ce:4f:24:42:
58:c1:cb:28:94:45:61:d4:95:8d:2d:b9:e1:9a:61:12:85:4e:
6b:dd:09:a9:cd:c0:1e:28:10:a8:33:81:28:ed:bd:61:f4:f7:
77:c6:e0:56:83:d5:bd:56:d8:8a:d5:9c:cf:f7:d5:61:43:83:
4b:d2:c4:02:a4:d6:d5:cc:88:3c:ee:c9:87:81:1d:db:b1:41:
f7:02:aa:0d:2c:19:fb:07:e9:bd:7f:0f:50:61:28:2f:8e:03:
33:a8:3e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzcxMzBZNLbnpg1m2AUuPG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTE1MzAxMWRlNDU4NmFkOGE4MDM4ODdlZTdkMmIwMGFl
ZmQ2MWIwHhcNMjYwMzExMTIwMDEwWhcNMjYwMzEyMTIwMDEwWjAzMTEwLwYDVQQD
EyhmYjc4YTcyNDM5Y2JjMzJlNDdiYjFkYjg0YzQ4ZjJkOTY1ZjM1MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qi+WyrE5TfGAAJ7/HQYtPcTzF5d
zyVK0UVR8Lc8Zfzcmje94VvLasefVAhKe/4F/8/V9XMUPlCtERFm3qkNf6aiZcFs
iwQZtu5yyUuZ7iJMit3lXFfExF0IzfaPjcUmyoJAETDTlEbpw2EMD8jo56/7dWSM
b4ZwZrW+3gtoF5XTgxxbX8XCWBHDuR4+zVw51yothjoot94Ams7q26vubBQSxUki
CtCx3WzsdoxU2eSVr4NhVkbXj93ma/ErurqsERsB7IO4123ukgGmxE1Ktz5pHuEw
hPXlAgLr+AeRD6R6BGSdjjmZVIPrFGsGnkvHuzjtNGqd3kuC3506te2ypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt4pyQ5y8MuR7sduExI8tll81HfMB8GA1UdIwQY
MBaAFPIRUwEd5Fhq2KgDiH7n0rAK79YbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzct
MjgyNTM3MGM5NWZlLzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85ODgxODEtMWQxOS00MmUyLThkYzctMjgyNTM3MGM5NWZl
LzEvOGhGVEFSM2tXR3JZcUFPSWZ1ZlNzQXJ2MWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViJ7Y6dY
BnhvxSxV0BXgLpgfObDx/B7Owqs7tSsZSDz7N0WZbvCzqoSYi1L16KoDHEdG2Fud
4MRjKwlih/VyYnKsjnGTNbXfAaGnst5Qa0T5hHEwghOLx6mzO7MHzzXVwnlImykS
dEzB5mrmsAFfcB2tsMveOl5Ef3+LLYuCwVqj32Cg1zPjZTvfFuWcIThoz1GBF/3X
y2K4XtxRuRDOTyRCWMHLKJRFYdSVjS254ZphEoVOa90Jqc3AHigQqDOBKO29YfT3
d8bgVoPVvVbYitWcz/fVYUODS9LEAqTW1cyIPO7Jh4Ed27FB9wKqDSwZ+wfpvX8P
UGEoL44DM6g+MA==
-----END CERTIFICATE-----
Generated at Wed Mar 11 17:26:08 2026 by rpki-client