Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: v/TiafeYd+mzuBrjWzx+k1DGZjkFG3QG5gl8cbPQqrU=
Subject key identifier: 8A:A6:E3:B3:8B:9F:1E:75:05:C5:30:8D:0C:D6:FA:5D:77:17:A3:11
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019C97AD12D33AA8563F95B251D7A262FCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 183A
Signing time: Thu 26 Feb 2026 02:00:27 +0000
Manifest this update: Thu 26 Feb 2026 02:00:27 +0000
Manifest next update: Fri 27 Feb 2026 02:00:27 +0000
Files and hashes: 1: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: XIkVuS3V63Vc/80JJIBuM3KUhi5/ZHOMeE9l8EI7uB0=)
2: jCsyE7PeO8MwI0WSmbdCicVhzBc.roa (hash: tv7EyDQ+IoB8bLb4GNx3/nwZP+BAJaSjfG7GlSBQTM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:97:ad:12:d3:3a:a8:56:3f:95:b2:51:d7:a2:62:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Feb 26 02:00:27 2026 GMT
Not After : Feb 27 02:00:27 2026 GMT
Subject: CN=8aa6e3b38b9f1e7505c5308d0cd6fa5d7717a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:3c:cd:be:4f:62:2f:ca:48:cc:ee:50:01:
d8:b1:95:bd:89:35:80:b9:56:2f:b8:20:22:d7:5b:
a2:a0:3f:f1:13:8e:2c:f4:56:30:fa:4c:7a:0e:62:
ed:d1:a6:67:8c:2f:00:eb:43:3e:13:54:ff:a6:f5:
d4:83:5d:92:96:09:73:14:a6:74:2c:85:1e:0a:26:
3d:30:e7:15:91:88:ff:76:31:52:c8:91:9f:3f:72:
64:30:1c:d6:7f:1e:bb:5f:c4:1c:89:f6:7b:26:47:
5e:9a:de:cd:8a:98:ab:38:87:9d:2b:5a:1e:5d:a4:
bc:e8:60:f0:df:b2:f5:cf:87:2f:6a:23:74:b9:7f:
85:44:b3:c6:86:47:a0:6b:b7:af:de:b0:0e:91:5b:
8f:bc:3f:46:37:26:f0:ea:dd:f9:3d:53:ee:22:a7:
1d:7f:89:03:47:4e:27:b5:4b:1f:b1:ac:d2:20:bc:
7a:29:a1:64:b8:ea:a8:b3:27:a3:ad:f8:2d:9a:4f:
ee:b2:72:c8:d7:bd:58:c3:62:18:c1:d4:36:ce:1d:
7c:af:b0:bd:bf:54:d7:61:c6:7c:fe:c2:93:2f:3b:
30:09:24:af:50:8e:b2:f8:4e:fe:c4:cd:17:70:c9:
92:da:5f:a1:72:28:83:4b:be:97:0a:d4:df:6a:3d:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:E3:B3:8B:9F:1E:75:05:C5:30:8D:0C:D6:FA:5D:77:17:A3:11
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7a:10:c7:1f:14:c7:b1:fa:e5:f6:78:64:bd:b3:9e:5b:b9:
e5:fb:4b:d6:32:79:4c:81:a2:69:b9:f8:b7:00:4b:54:44:b4:
f5:09:0d:c8:9f:88:13:10:a9:28:a8:31:03:d8:d1:ba:12:f2:
aa:f7:1d:05:64:0d:47:5b:4b:8f:fb:bd:b9:7b:81:97:70:95:
24:13:49:e4:57:43:68:cf:33:40:8d:e8:ad:d6:25:7d:30:0b:
77:d5:e2:01:be:4f:c0:5a:38:8e:24:57:30:d8:74:d6:6e:ef:
1f:f2:f0:af:7e:59:20:6f:b4:07:0e:a2:49:36:bf:2b:dd:21:
e0:68:ea:ee:23:a8:2d:ec:9a:e5:70:af:52:b9:b1:0e:fd:a4:
58:19:76:42:32:0c:fc:ee:23:1b:ef:47:97:06:39:d9:ba:8b:
b9:d9:03:9b:ab:5d:2d:a2:b6:ee:b0:30:54:e9:fe:4e:32:ef:
30:d0:ef:6a:f1:73:ac:d9:a7:17:b1:c4:1e:dd:85:d5:e4:df:
41:22:1d:e8:9b:64:11:ee:27:91:24:b9:51:19:f3:b7:4e:82:
f3:4d:1a:f0:fb:e3:f4:e7:95:3c:06:6f:86:1e:97:8d:61:80:
30:5b:4d:b9:e9:fb:80:d1:9e:6a:09:71:a9:fb:00:bc:0c:19:
a7:35:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 04:59:17 2026 by rpki-client