Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: VFx870CGmgXWGfJqOKwIXWFmV/Og59R5ILotRtizTas=
Subject key identifier: F4:CF:5A:1C:56:64:91:D7:8F:9D:F8:CE:1E:9E:1D:77:77:61:02:BB
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 019D378910F6917D63B6C1F09ED0DD15338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: YrH4kyphoxFDbqDClS/0tAFr/QXDW4bxCK+BWepsHdA=)
2: RlwzmymQw4BKJ8E0igozFpwiNNo.roa (hash: UVpzzvY69LGOYgMZuAZgP3abVssHII4njzML7dW06y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:10:f6:91:7d:63:b6:c1:f0:9e:d0:dd:15:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=f4cf5a1c566491d78f9df8ce1e9e1d77776102bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:17:c9:72:c5:55:45:c8:3f:5c:ed:87:67:
af:7e:9a:e5:94:bd:af:18:26:5c:d8:b8:4e:e5:d7:
64:75:bd:25:d5:1b:91:b5:1f:39:24:80:d7:e3:ef:
24:db:fc:a3:0d:ec:74:ad:d0:31:28:14:42:c4:12:
36:6a:8d:36:90:d5:e2:37:54:c4:16:c3:3b:72:6a:
cf:d9:a7:d7:2a:22:99:a2:b6:92:62:ef:b1:e5:8d:
68:c0:0b:a5:64:c2:83:b0:29:bd:49:94:04:ca:a9:
8d:75:d7:7a:b3:f2:68:e4:56:3d:7e:f1:d5:98:61:
46:94:d4:8f:cd:29:b1:e0:50:30:8e:c5:52:63:f8:
51:a6:f9:3b:74:6b:2b:c0:8b:72:10:ad:1b:9b:4a:
de:15:03:87:93:ad:8c:25:5e:e3:dd:99:bf:53:a3:
97:e4:af:34:d6:a8:2b:d3:1f:ab:72:7e:ff:e6:cb:
ac:55:bb:8e:bf:5d:44:38:ac:db:3f:71:fe:42:39:
01:89:0f:6f:3a:d4:a6:ab:47:bf:51:34:ec:0e:6b:
00:53:50:1e:1d:d6:8e:bd:b4:c6:7d:be:53:94:a6:
e2:2b:c8:9f:1d:5f:05:fc:64:75:12:87:5e:3d:49:
36:1c:22:52:2d:c1:c3:69:40:1b:a5:8f:24:45:61:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:5A:1C:56:64:91:D7:8F:9D:F8:CE:1E:9E:1D:77:77:61:02:BB
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:01:f7:96:84:85:9e:6a:d2:6b:18:f8:48:c2:30:86:ba:
cd:ce:92:e9:3b:59:06:35:11:ce:4b:5f:5e:46:94:1b:2a:6f:
76:59:66:6d:d3:a7:04:57:37:b4:1e:6e:68:ea:07:46:ed:5c:
18:74:1e:8f:06:c1:e8:4f:a8:40:80:4c:2e:23:65:32:5e:53:
43:f3:3c:9a:4f:fb:3b:9b:b7:bd:44:46:98:47:10:09:ee:cf:
d9:f7:30:45:ea:7d:43:7e:c6:df:57:12:f4:ac:7c:e2:c9:06:
bd:f9:f5:1e:5c:d4:2c:2d:36:7e:8f:1b:0e:21:2f:9d:40:3a:
29:27:f9:57:97:4f:2e:48:3c:6c:df:3a:e6:d8:e9:08:22:7c:
98:43:f7:9f:04:34:16:61:c9:8c:87:67:ed:e6:b6:f6:37:b5:
6b:2c:16:2c:dd:f3:c7:4c:f4:88:e6:1c:ab:2e:ae:d1:e4:29:
62:20:d1:bf:d0:d3:98:f0:50:8f:2f:70:9f:75:9a:5b:05:2c:
0d:7e:0b:fd:c4:6a:41:4c:54:8b:cc:18:74:72:e0:a0:0b:d6:
98:8e:66:b8:72:27:99:50:d5:1c:c2:84:fd:83:97:4b:1a:64:
c7:3b:5d:2f:c9:ef:84:83:14:da:f5:fe:c8:4d:18:be:ab:88:
08:c2:18:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iRD2kX1jtsHwntDdFTOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYWVlYmU0MWQwNTE4Mjg0YWJhM2E0ZjVlNWRhMDVjZmFi
ZDZmNzYwHhcNMjYwMzI5MDMwMDIyWhcNMjYwMzMwMDMwMDIyWjAzMTEwLwYDVQQD
EyhmNGNmNWExYzU2NjQ5MWQ3OGY5ZGY4Y2UxZTllMWQ3Nzc3NjEwMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G4XyXLFVUXIP1zth2evfprllL2v
GCZc2LhO5ddkdb0l1RuRtR85JIDX4+8k2/yjDex0rdAxKBRCxBI2ao02kNXiN1TE
FsM7cmrP2afXKiKZoraSYu+x5Y1owAulZMKDsCm9SZQEyqmNddd6s/Jo5FY9fvHV
mGFGlNSPzSmx4FAwjsVSY/hRpvk7dGsrwItyEK0bm0reFQOHk62MJV7j3Zm/U6OX
5K801qgr0x+rcn7/5susVbuOv11EOKzbP3H+QjkBiQ9vOtSmq0e/UTTsDmsAU1Ae
HdaOvbTGfb5TlKbiK8ifHV8F/GR1EodePUk2HCJSLcHDaUAbpY8kRWGhUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTPWhxWZJHXj534zh6eHXd3YQK7MB8GA1UdIwQY
MBaAFPKu6+QdBRgoSro6T15doFz6vW92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMt
YzBhZDc0Y2E1ZDliLzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jZmMxYmEtOWM3OC00YzNkLThlYzMtYzBhZDc0Y2E1ZDli
LzEvOHE3cjVCMEZHQ2hLdWpwUFhsMmdYUHE5YjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKekB95aE
hZ5q0msY+EjCMIa6zc6S6TtZBjURzktfXkaUGypvdllmbdOnBFc3tB5uaOoHRu1c
GHQejwbB6E+oQIBMLiNlMl5TQ/M8mk/7O5u3vURGmEcQCe7P2fcwRep9Q37G31cS
9Kx84skGvfn1HlzULC02fo8bDiEvnUA6KSf5V5dPLkg8bN865tjpCCJ8mEP3nwQ0
FmHJjIdn7ea29je1aywWLN3zx0z0iOYcqy6u0eQpYiDRv9DTmPBQjy9wn3WaWwUs
DX4L/cRqQUxUi8wYdHLgoAvWmI5muHInmVDVHMKE/YOXSxpkxztdL8nvhIMU2vX+
yE0YvquICMIYYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:03 2026 by rpki-client