Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: 0W8Ed06CJ3KnGbpaG7gSIyPh5Vjh6TjMNVEaxNSMnhU=
Subject key identifier: A9:C8:61:8B:A5:BB:EF:12:17:42:31:9A:23:3E:67:8D:F3:D0:AA:C0
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 019D371B76264892B39DAE844A66F060D0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0778
Signing time: Sun 29 Mar 2026 01:00:39 +0000
Manifest this update: Sun 29 Mar 2026 01:00:39 +0000
Manifest next update: Mon 30 Mar 2026 01:00:39 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: bZJj9RnWzvgS3bwn/4dOxIbndt+knTr4ixbGElbFOi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:76:26:48:92:b3:9d:ae:84:4a:66:f0:60:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Mar 29 01:00:39 2026 GMT
Not After : Mar 30 01:00:39 2026 GMT
Subject: CN=a9c8618ba5bbef121742319a233e678df3d0aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:f1:24:82:88:2d:f2:72:af:76:65:8b:15:
b5:0f:00:af:9d:cb:97:43:e0:06:4f:0c:f4:9a:b6:
55:9f:c2:11:01:3f:d6:32:34:c3:52:ba:31:7d:5d:
14:5f:23:2b:a3:dd:06:ea:87:5e:dc:1c:a7:75:54:
8d:e4:49:6e:72:b7:d0:cd:e6:da:75:a4:b2:f5:ed:
f3:53:55:56:9a:d6:af:33:a1:c3:bc:9f:f5:08:82:
98:2d:9f:c3:b5:84:17:e5:b2:78:15:5f:f1:a1:5e:
82:a2:39:1b:9f:41:95:73:77:b1:85:9f:9f:de:3b:
fb:00:8f:74:25:b6:49:22:f1:a5:70:86:5c:0d:6f:
8d:97:32:f2:a6:89:2b:4a:28:77:55:8a:75:83:9d:
41:6b:db:3d:52:64:08:38:a7:e9:3c:a6:81:c9:43:
2f:64:20:03:fc:a4:e2:75:92:aa:00:b2:9f:e1:39:
3c:4f:0e:de:ee:4d:48:7f:ce:20:00:85:f6:8d:86:
fa:72:f2:37:3d:bc:22:e0:ed:88:e3:87:f3:ff:8e:
44:b7:45:5e:bc:56:99:9e:54:a7:71:43:d5:21:70:
f2:66:fa:04:88:26:1b:51:41:31:ab:15:0a:25:14:
25:e8:db:ea:ec:83:71:f9:12:d9:5c:85:90:c7:00:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C8:61:8B:A5:BB:EF:12:17:42:31:9A:23:3E:67:8D:F3:D0:AA:C0
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:9d:24:a1:56:d0:7d:ac:45:10:57:95:e1:29:94:44:e9:
2e:e6:e6:6f:dd:e1:49:54:fa:17:74:9f:19:05:4c:7d:0c:33:
b8:08:4c:c8:a8:09:93:81:43:b6:43:ba:1d:55:f7:08:de:da:
7b:59:9b:57:75:56:da:05:64:fc:26:5b:86:10:5b:66:ab:74:
3a:fc:df:e3:4e:ed:f3:ae:0e:cf:aa:28:ac:76:5b:58:c7:3e:
90:db:10:d3:28:9d:ed:62:df:ee:b8:dd:48:28:07:9f:a0:2c:
18:d1:ee:3a:3f:f1:de:75:2d:d6:39:63:63:d6:f2:1f:35:11:
0a:dc:96:64:a1:d9:f5:01:12:62:6d:36:57:cf:53:df:04:fa:
96:74:05:a3:fb:e9:8e:5a:e7:b7:a8:e0:e2:05:a3:c7:bf:0e:
26:eb:f4:bf:60:61:67:29:08:ce:97:55:91:d7:ef:50:69:e2:
1d:0c:f7:a7:ec:2e:be:a2:0f:45:4c:68:c0:9c:03:28:0a:04:
1f:09:43:9e:5f:6e:4e:ff:3f:cc:ed:33:89:4d:f1:b5:be:ac:
3e:3d:d9:e9:3f:8b:8b:8e:59:05:4d:bd:48:9b:e3:5b:a4:15:
35:fb:67:d5:0e:cf:f3:44:ca:60:33:64:a8:09:d5:da:fa:0d:
ed:8d:a6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G3YmSJKzna6ESmbwYNDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2YxZjMzNWM3ZDA0YjM2MDhmZDE5MTRhOWMwNTNiMDRh
N2ZjYjkwHhcNMjYwMzI5MDEwMDM5WhcNMjYwMzMwMDEwMDM5WjAzMTEwLwYDVQQD
EyhhOWM4NjE4YmE1YmJlZjEyMTc0MjMxOWEyMzNlNjc4ZGYzZDBhYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB3xJIKILfJyr3ZlixW1DwCvncuX
Q+AGTwz0mrZVn8IRAT/WMjTDUroxfV0UXyMro90G6ode3ByndVSN5ElucrfQzeba
daSy9e3zU1VWmtavM6HDvJ/1CIKYLZ/DtYQX5bJ4FV/xoV6Cojkbn0GVc3exhZ+f
3jv7AI90JbZJIvGlcIZcDW+NlzLypokrSih3VYp1g51Ba9s9UmQIOKfpPKaByUMv
ZCAD/KTidZKqALKf4Tk8Tw7e7k1If84gAIX2jYb6cvI3Pbwi4O2I44fz/45Et0Ve
vFaZnlSncUPVIXDyZvoEiCYbUUExqxUKJRQl6Nvq7INx+RLZXIWQxwCSdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnIYYulu+8SF0IxmiM+Z43z0KrAMB8GA1UdIwQY
MBaAFPA/HzNcfQSzYI/RkUqcBTsEp/y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYt
MzM4YTA3ZThlYmQ2LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTdjZjctYjM4Ni00Yzg3LTg0MWYtMzM4YTA3ZThlYmQ2
LzEvOEQ4Zk0xeDlCTE5najlHUlNwd0ZPd1NuX0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML6dJKFW
0H2sRRBXleEplETpLubmb93hSVT6F3SfGQVMfQwzuAhMyKgJk4FDtkO6HVX3CN7a
e1mbV3VW2gVk/CZbhhBbZqt0Ovzf407t864Oz6oorHZbWMc+kNsQ0yid7WLf7rjd
SCgHn6AsGNHuOj/x3nUt1jljY9byHzURCtyWZKHZ9QESYm02V89T3wT6lnQFo/vp
jlrnt6jg4gWjx78OJuv0v2BhZykIzpdVkdfvUGniHQz3p+wuvqIPRUxowJwDKAoE
HwlDnl9uTv8/zO0ziU3xtb6sPj3Z6T+Li45ZBU29SJvjW6QVNftn1Q7P80TKYDNk
qAnV2voN7Y2mrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:28 2026 by rpki-client