Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 7Mrr4QJbdI6NmYSHynoLNJSPVfUWKvobRC+g9vHyYNA=
Subject key identifier: 75:82:0F:52:1E:B1:0D:45:AC:95:48:43:41:A0:84:69:CC:3A:94:0A
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019CE5C880ECF615B8C6BB266B4955AC7416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0DAF
Signing time: Fri 13 Mar 2026 06:00:48 +0000
Manifest this update: Fri 13 Mar 2026 06:00:48 +0000
Manifest next update: Sat 14 Mar 2026 06:00:48 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: ITFRT3RWMXU/oE4IWVwj9oD3VrShX5AiUchyH3xYJM0=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:80:ec:f6:15:b8:c6:bb:26:6b:49:55:ac:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Mar 13 06:00:48 2026 GMT
Not After : Mar 14 06:00:48 2026 GMT
Subject: CN=75820f521eb10d45ac95484341a08469cc3a940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:50:1b:9c:92:8a:95:e4:c4:77:36:b6:54:
c2:52:57:ae:47:af:c8:76:04:02:99:0c:d5:fc:b0:
a7:b3:c2:32:30:61:62:20:b6:e0:b5:b8:dc:18:e6:
c3:e1:42:d2:34:0a:5b:44:08:ea:3f:91:42:2c:3a:
3b:30:4d:83:29:17:c7:0b:08:0e:2e:2b:d8:9d:3b:
6f:d7:60:a0:2c:29:5b:71:ff:7f:db:af:a3:df:06:
43:40:80:ba:8f:09:3a:03:89:96:5c:a3:c9:30:61:
6c:93:8e:7c:00:cf:e2:c2:6e:14:6f:a8:d2:b1:d6:
da:bf:b7:54:fd:46:2a:95:86:a9:26:17:ee:6e:10:
40:a5:b4:5f:17:e0:da:e2:0f:fe:ce:8e:71:26:2e:
55:92:67:e5:47:dd:58:78:b7:d6:fe:1e:cc:3b:0a:
f1:9c:9f:62:57:b9:45:b3:01:90:b3:57:dc:94:07:
cd:2a:0e:ad:6b:c2:bc:f7:ae:3b:6c:f9:32:fb:57:
ac:9e:f3:1b:2d:51:5b:a6:34:0a:98:fd:a6:d3:36:
67:d7:6c:49:14:9d:4a:37:fa:8f:fd:a3:9c:bb:b1:
13:f3:7d:9a:5c:a8:d5:48:ef:b9:46:35:f5:9a:a1:
d8:c1:50:63:97:5d:9d:e0:9d:fb:38:15:85:43:9a:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:0F:52:1E:B1:0D:45:AC:95:48:43:41:A0:84:69:CC:3A:94:0A
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:41:f2:5c:22:5d:33:3e:99:95:a7:b4:1c:f3:06:29:4a:2c:
ab:b8:b7:63:fe:6c:25:28:b4:e3:39:bd:97:2b:f8:5b:32:51:
23:dc:57:88:ef:fd:92:64:cd:7e:e2:c1:f8:c6:ca:b2:1f:ed:
ce:0e:e8:ee:ac:84:04:a6:9c:a2:74:d5:ca:b9:58:d5:1e:ab:
0f:cc:5b:38:ab:8d:1b:7d:8e:d2:69:56:f9:05:70:60:62:a7:
9f:f4:8c:3f:c2:91:f3:d7:f4:5b:1a:2e:17:7b:4d:1c:5e:fc:
54:46:5c:6f:c0:82:6a:4f:c1:54:ed:75:0a:da:16:fe:a4:8e:
cc:be:53:cb:f0:f0:b9:fb:c0:b2:7c:16:37:fa:b9:9e:6a:63:
2f:6b:a5:d6:81:61:fb:24:2a:da:cf:7f:e0:dd:df:1b:f6:6c:
aa:d9:11:f0:19:74:d6:39:a5:e3:b3:e3:88:f3:e8:54:b1:88:
68:b8:60:cc:79:e7:aa:4e:57:d9:bd:33:6f:3a:a3:d5:47:45:
5f:9d:97:72:9d:37:76:88:f6:8c:1e:bf:a1:3a:45:9a:99:40:
8e:71:fe:47:9a:6f:68:70:67:8b:1d:0d:6a:27:d2:42:06:a8:
ba:3c:ea:17:51:5f:a5:5d:3f:49:b4:cc:94:b4:a2:6d:b0:40:
b1:1e:07:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyIDs9hW4xrsma0lVrHQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm
MDk1MTYwHhcNMjYwMzEzMDYwMDQ4WhcNMjYwMzE0MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg3NTgyMGY1MjFlYjEwZDQ1YWM5NTQ4NDM0MWEwODQ2OWNjM2E5NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G5QG5ySipXkxHc2tlTCUleuR6/I
dgQCmQzV/LCns8IyMGFiILbgtbjcGObD4ULSNApbRAjqP5FCLDo7ME2DKRfHCwgO
LivYnTtv12CgLClbcf9/26+j3wZDQIC6jwk6A4mWXKPJMGFsk458AM/iwm4Ub6jS
sdbav7dU/UYqlYapJhfubhBApbRfF+Da4g/+zo5xJi5VkmflR91YeLfW/h7MOwrx
nJ9iV7lFswGQs1fclAfNKg6ta8K89647bPky+1esnvMbLVFbpjQKmP2m0zZn12xJ
FJ1KN/qP/aOcu7ET832aXKjVSO+5RjX1mqHYwVBjl12d4J37OBWFQ5ocqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWCD1IesQ1FrJVIQ0GghGnMOpQKMB8GA1UdIwQY
MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt
NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3
LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUHyXCJd
Mz6Zlae0HPMGKUosq7i3Y/5sJSi04zm9lyv4WzJRI9xXiO/9kmTNfuLB+MbKsh/t
zg7o7qyEBKaconTVyrlY1R6rD8xbOKuNG32O0mlW+QVwYGKnn/SMP8KR89f0Wxou
F3tNHF78VEZcb8CCak/BVO11CtoW/qSOzL5Ty/DwufvAsnwWN/q5nmpjL2ul1oFh
+yQq2s9/4N3fG/ZsqtkR8Bl01jml47PjiPPoVLGIaLhgzHnnqk5X2b0zbzqj1UdF
X52Xcp03doj2jB6/oTpFmplAjnH+R5pvaHBnix0NaifSQgaoujzqF1FfpV0/SbTM
lLSibbBAsR4H/Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:54:23 2026 by rpki-client