Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: IrEhf1Xcz7juqv5ZtwU8URHt1HEF4rv+xQ6pHydF5lg=
Subject key identifier: E0:F8:A9:4E:69:76:93:25:AA:D5:A6:72:6F:EF:B0:20:81:4E:49:01
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019D37F725A63DD27620E849E36F6547E1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0EEB
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: HxU84lbgM+P+cKJkcBXvinSph7U1yfWe7Sd+G/AuFd4=)
2: F8z5IfsSBvS9knWKapS4nrflr7Y.roa (hash: 7dVCoDjibp0AI4i1pFVaK0bVZF+7UY8kUH8u0AOQC2A=)
3: LwxlxO59sLpFilR69YBzUan2hpk.roa (hash: bcgRZwnNRFg24An1uUC0IWHke7tHDxGy7AWTN9GQjAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:a6:3d:d2:76:20:e8:49:e3:6f:65:47:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=e0f8a94e69769325aad5a6726fefb020814e4901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:dc:31:87:37:81:8c:67:68:9e:ec:f6:75:
0d:2a:9c:85:66:a3:ef:23:ef:28:0f:e2:bb:cf:2a:
f4:bd:50:e0:67:af:70:9a:9f:48:bd:59:0c:73:f4:
26:62:cf:05:07:39:d2:01:56:c4:3e:0d:91:7a:25:
f8:e7:24:90:c6:53:cc:8b:09:99:51:e7:0c:28:30:
d0:42:5a:26:c0:2d:bc:14:eb:8b:d1:e5:c5:50:f9:
65:04:93:f4:d4:82:28:11:91:73:8e:5a:99:ac:65:
db:e0:94:d8:73:e0:a7:ab:54:71:eb:76:d0:e4:62:
8a:fa:87:af:56:89:bf:06:46:75:46:32:0d:e1:29:
b4:9c:80:06:fe:cd:e0:2a:d1:65:4c:35:eb:5b:1f:
4c:b5:a7:82:eb:c5:12:e5:34:d0:f0:60:3d:25:3d:
95:54:07:d6:1f:dd:2c:be:d2:b0:e4:56:3b:dd:34:
04:f8:b1:68:35:3a:98:45:45:c9:bd:fd:01:5c:bb:
7c:b5:14:70:34:55:cf:87:0a:4b:25:f1:86:9b:7f:
a4:d1:92:59:ef:f1:98:13:d0:2a:46:78:ee:09:f5:
26:aa:55:67:67:22:c1:01:b8:62:71:45:d5:d6:0e:
80:7f:b8:c2:4b:05:9f:10:30:ef:64:8d:89:7c:31:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:A9:4E:69:76:93:25:AA:D5:A6:72:6F:EF:B0:20:81:4E:49:01
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:18:7b:31:86:43:f6:01:3a:d6:53:b1:a7:bd:a9:6b:63:39:
11:12:bb:c7:7b:0a:a8:37:51:dc:df:4c:96:e2:1e:ab:5c:cb:
61:78:28:11:73:a4:ff:a4:3a:02:92:9b:4c:04:81:36:a7:91:
6e:c4:c5:5d:e7:d0:42:66:f3:b1:38:c1:64:22:ee:e9:cd:32:
2a:00:7e:93:05:5f:2c:3a:bc:f2:2c:d8:dd:5e:15:97:40:1e:
f4:c3:3a:63:bb:a3:1a:59:cf:7f:1d:34:95:da:89:9c:bc:24:
8d:14:b7:b3:ac:bf:cf:38:4a:75:3c:c4:e2:97:a4:01:6a:0c:
13:7f:d8:2c:16:0f:12:a7:59:c4:3d:fb:4e:69:b1:cb:14:9a:
34:ed:f1:22:eb:f5:fe:81:61:29:f0:65:26:aa:12:16:a9:b2:
4e:23:5c:7a:6c:9a:53:bc:ce:6d:b9:85:a7:88:1a:1c:14:97:
7c:06:f2:d5:8c:ac:fc:c8:9e:4e:21:1a:f0:af:d3:79:a0:b6:
53:d5:40:87:ae:c8:f2:44:59:ab:f8:ab:dd:97:fe:fb:4f:d8:
92:f8:70:57:40:e0:06:a2:23:bd:38:46:3c:d6:2c:ff:7b:03:
70:0e:0d:38:16:dd:3d:75:a7:3f:1a:df:6e:fc:a2:45:f7:47:
e7:36:d7:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yWmPdJ2IOhJ429lR+HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2M5M2RkYjFhMTcxNTFjNTZmMjJkY2FmMzFkZDgyMjk0
NjM3NDIwHhcNMjYwMzI5MDUwMDM3WhcNMjYwMzMwMDUwMDM3WjAzMTEwLwYDVQQD
EyhlMGY4YTk0ZTY5NzY5MzI1YWFkNWE2NzI2ZmVmYjAyMDgxNGU0OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO3cMYc3gYxnaJ7s9nUNKpyFZqPv
I+8oD+K7zyr0vVDgZ69wmp9IvVkMc/QmYs8FBznSAVbEPg2ReiX45ySQxlPMiwmZ
UecMKDDQQlomwC28FOuL0eXFUPllBJP01IIoEZFzjlqZrGXb4JTYc+Cnq1Rx63bQ
5GKK+oevVom/BkZ1RjIN4Sm0nIAG/s3gKtFlTDXrWx9MtaeC68US5TTQ8GA9JT2V
VAfWH90svtKw5FY73TQE+LFoNTqYRUXJvf0BXLt8tRRwNFXPhwpLJfGGm3+k0ZJZ
7/GYE9AqRnjuCfUmqlVnZyLBAbhicUXV1g6Af7jCSwWfEDDvZI2JfDHAFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD4qU5pdpMlqtWmcm/vsCCBTkkBMB8GA1UdIwQY
MBaAFPJ8k92xoXFRxW8i3K8x3YIpRjdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5Mjkt
MzZlMGM4YWZlMjZhLzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85NDRmMDktNDA2ZS00OTg1LTk5MjktMzZlMGM4YWZlMjZh
LzEvOG55VDNiR2hjVkhGYnlMY3J6SGRnaWxHTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRh7MYZD
9gE61lOxp72pa2M5ERK7x3sKqDdR3N9MluIeq1zLYXgoEXOk/6Q6ApKbTASBNqeR
bsTFXefQQmbzsTjBZCLu6c0yKgB+kwVfLDq88izY3V4Vl0Ae9MM6Y7ujGlnPfx00
ldqJnLwkjRS3s6y/zzhKdTzE4pekAWoME3/YLBYPEqdZxD37TmmxyxSaNO3xIuv1
/oFhKfBlJqoSFqmyTiNcemyaU7zObbmFp4gaHBSXfAby1Yys/MieTiEa8K/TeaC2
U9VAh67I8kRZq/ir3Zf++0/YkvhwV0DgBqIjvThGPNYs/3sDcA4NOBbdPXWnPxrf
bvyiRfdH5zbXEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:30 2026 by rpki-client