Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: tonzs2ZEXgAs/CRFGDnfEp/O5NcxoQDIgjQt4H/vQT0=
Subject key identifier: 40:D5:57:D9:71:60:6E:39:70:FA:D4:95:7A:47:8B:75:0A:15:E4:99
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 019D39E558714E1126A15C60FE7B19FE4CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0A0F
Signing time: Sun 29 Mar 2026 14:00:24 +0000
Manifest this update: Sun 29 Mar 2026 14:00:24 +0000
Manifest next update: Mon 30 Mar 2026 14:00:24 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: ZuG15alr9Wtw42zQBDw5e+blxn1DpnQnX66YlI8//tU=)
2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:58:71:4e:11:26:a1:5c:60:fe:7b:19:fe:4c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Mar 29 14:00:24 2026 GMT
Not After : Mar 30 14:00:24 2026 GMT
Subject: CN=40d557d971606e3970fad4957a478b750a15e499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:30:57:f7:41:d4:5c:4c:bd:1e:a9:6a:bf:
fe:8b:af:7f:af:1b:13:db:f6:4b:ba:f3:11:4a:76:
af:fd:f6:3e:f8:16:5f:f2:3a:62:a4:3e:6a:29:98:
db:3d:8a:6b:65:c7:df:68:c6:b4:94:00:da:a2:ad:
59:69:29:47:88:3d:fb:77:6e:2f:31:a4:c6:c6:dc:
73:f6:18:f7:d8:71:b2:fd:47:68:7c:3c:f4:d9:7f:
5b:8e:98:9e:4b:cf:c1:59:de:f3:0a:f6:e4:3f:ad:
bc:fb:d8:ca:b3:4a:66:50:15:8e:b9:21:8e:ca:b6:
5b:59:9f:45:fb:27:85:95:45:68:f0:40:9a:12:1f:
bc:18:4c:cc:24:20:3a:35:1e:af:04:cb:f8:cc:e5:
07:ea:69:67:8a:9f:ec:12:ff:1d:42:e3:13:df:ce:
b4:d3:e2:98:c4:be:0d:31:cb:a6:2f:f4:01:1f:cd:
c5:6f:6e:d4:df:36:41:5a:dd:32:fd:86:3e:c2:13:
2c:0d:68:44:3c:81:4c:f5:96:ea:69:fb:f2:a8:56:
ee:01:6e:b9:7a:a1:fb:87:71:02:88:01:c3:60:cd:
ab:e9:a1:12:9a:db:8c:cf:f3:de:d4:37:14:26:ad:
de:2e:45:e6:54:3b:7c:20:cd:ac:b6:35:5d:23:8b:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:57:D9:71:60:6E:39:70:FA:D4:95:7A:47:8B:75:0A:15:E4:99
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:49:9e:33:0b:ab:bc:6d:53:7a:f2:31:c0:82:b7:7a:f2:
0c:a8:d2:2d:6a:7e:c7:83:95:bc:30:ed:a8:41:7b:0a:e4:09:
7f:02:a0:16:df:47:36:16:ee:d0:f4:85:7b:43:05:e7:44:a0:
c0:d4:9e:14:88:7a:eb:a7:a9:80:35:de:3d:4f:12:90:e1:ea:
66:58:29:85:d7:35:99:a7:b2:d7:6b:56:f7:db:d5:2e:e9:c6:
d0:50:9d:8d:39:8f:e6:9c:0d:fb:87:fd:80:5b:bb:04:f1:9c:
33:ff:95:f3:30:c5:dd:55:42:b2:dc:fd:e1:bc:9c:0d:3a:dc:
4a:2e:c2:91:13:27:7d:c7:8d:de:f6:10:e8:97:72:5c:c5:5f:
d2:ef:8b:c1:73:5c:6f:2e:28:10:85:38:79:00:f7:c6:65:e3:
cf:d0:71:8b:c9:0c:ec:d5:26:a1:e9:2c:68:d2:2f:bb:cf:fe:
9f:a9:45:4d:05:dd:71:8f:d6:a5:cd:a6:c4:e2:b1:ce:c6:a9:
9d:fb:f8:ee:d3:83:33:51:84:03:4b:1e:68:f8:1e:48:3a:00:
a2:a6:1b:5d:af:56:22:32:46:73:cd:ae:5b:d7:5c:3c:b6:33:
6a:c1:49:37:63:91:5a:48:6a:34:dd:0e:76:ac:cc:b4:0f:5c:
d9:d5:70:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VhxThEmoVxg/nsZ/kz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy
NTQ0MjkwHhcNMjYwMzI5MTQwMDI0WhcNMjYwMzMwMTQwMDI0WjAzMTEwLwYDVQQD
Eyg0MGQ1NTdkOTcxNjA2ZTM5NzBmYWQ0OTU3YTQ3OGI3NTBhMTVlNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr34wV/dB1FxMvR6par/+i69/rxsT
2/ZLuvMRSnav/fY++BZf8jpipD5qKZjbPYprZcffaMa0lADaoq1ZaSlHiD37d24v
MaTGxtxz9hj32HGy/UdofDz02X9bjpieS8/BWd7zCvbkP628+9jKs0pmUBWOuSGO
yrZbWZ9F+yeFlUVo8ECaEh+8GEzMJCA6NR6vBMv4zOUH6mlnip/sEv8dQuMT3860
0+KYxL4NMcumL/QBH83Fb27U3zZBWt0y/YY+whMsDWhEPIFM9ZbqafvyqFbuAW65
eqH7h3ECiAHDYM2r6aESmtuMz/Pe1DcUJq3eLkXmVDt8IM2stjVdI4uPQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDVV9lxYG45cPrUlXpHi3UKFeSZMB8GA1UdIwQY
MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt
NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw
LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJFJnjML
q7xtU3ryMcCCt3ryDKjSLWp+x4OVvDDtqEF7CuQJfwKgFt9HNhbu0PSFe0MF50Sg
wNSeFIh666epgDXePU8SkOHqZlgphdc1maey12tW99vVLunG0FCdjTmP5pwN+4f9
gFu7BPGcM/+V8zDF3VVCstz94bycDTrcSi7CkRMnfceN3vYQ6JdyXMVf0u+LwXNc
by4oEIU4eQD3xmXjz9Bxi8kM7NUmoeksaNIvu8/+n6lFTQXdcY/Wpc2mxOKxzsap
nfv47tODM1GEA0seaPgeSDoAoqYbXa9WIjJGc82uW9dcPLYzasFJN2ORWkhqNN0O
dqzMtA9c2dVwxA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:46:19 2026 by rpki-client