Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
File: 8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json)
Hash identifier: gE0YTXY8Vhs2wrenTXYrYGhxlL/Cr6lpcQ093th7HXM=
Subject key identifier: 3E:03:64:53:CF:B7:3D:B6:12:E3:C3:DD:A8:D5:84:AE:DF:57:8F:3C
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial: 019D390A5E4372D080EDC928D84C573E16D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
Manifest number: 01F3
Signing time: Sun 29 Mar 2026 10:01:13 +0000
Manifest this update: Sun 29 Mar 2026 10:01:13 +0000
Manifest next update: Mon 30 Mar 2026 10:01:13 +0000
Files and hashes: 1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: eZzVTdDNAaq3+OfuzkcsOcXO3Lm5dLr6tsf9KyMaHZc=)
2: bk4lZusY2_Koxe78KPF98kBhHJ4.roa (hash: 1Foi9h5PHolKa1KqV3ZXYBv+pGOywWlibfdBplpePww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5e:43:72:d0:80:ed:c9:28:d8:4c:57:3e:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Validity
Not Before: Mar 29 10:01:13 2026 GMT
Not After : Mar 30 10:01:13 2026 GMT
Subject: CN=3e036453cfb73db612e3c3dda8d584aedf578f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:69:cb:51:15:d1:23:70:52:38:0f:2d:f0:
d1:a2:6a:19:37:6e:94:66:6a:59:54:45:74:1d:e0:
ef:d2:ff:66:88:56:9f:c3:f5:5d:7b:9d:7f:d6:bd:
a5:ac:ea:04:a3:25:db:e1:02:5f:69:e5:a9:6e:7b:
ec:f5:8e:88:fb:71:7f:4a:37:ec:9a:38:63:dd:63:
b7:ea:33:87:e2:dd:0b:38:b8:d0:d2:cb:ed:b6:80:
53:c1:c2:26:22:e7:9f:31:f5:f8:04:18:cc:9e:8a:
36:d2:8b:41:8e:09:d5:78:e2:e2:84:b8:7c:e1:b2:
ac:9b:cd:b0:2a:33:e9:47:1c:2a:a8:01:39:6e:19:
fd:f2:63:e6:79:18:b5:3a:08:b8:02:cf:75:e3:f7:
92:bd:01:a3:ac:8f:95:2c:9f:18:2f:36:50:cb:b1:
24:39:43:27:ee:34:ce:1b:7c:91:bf:e3:a3:30:27:
08:21:bf:03:ba:e9:fe:f1:22:97:e7:9b:12:b1:de:
16:e5:20:1c:0e:cb:e8:ac:9a:a8:94:cd:c9:65:c0:
87:50:09:be:41:60:a0:bd:a8:e7:43:29:e4:3a:b8:
a1:99:43:6b:c5:04:5b:ef:91:b3:fd:02:57:eb:e1:
cb:bb:12:89:30:b7:ee:fb:20:d6:f9:81:00:2b:56:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:03:64:53:CF:B7:3D:B6:12:E3:C3:DD:A8:D5:84:AE:DF:57:8F:3C
X509v3 Authority Key Identifier:
keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2e:e8:29:27:ae:a8:03:d7:db:d9:f0:6c:fe:8e:d5:e7:f4:
44:37:20:c5:6f:5a:df:fa:8d:37:4d:52:12:87:b9:23:a5:fe:
8f:a9:ba:1c:62:cc:32:14:0a:5e:4a:17:24:9f:55:96:16:c7:
be:08:05:1d:5f:47:f3:29:b7:b3:5f:fa:9e:15:e3:94:d5:57:
f4:2f:05:36:cb:a3:bb:dc:1d:a7:cb:33:4c:c2:e5:3d:73:d4:
e8:7c:aa:55:4d:e0:68:79:20:ef:88:3e:fa:fd:65:6e:72:36:
47:37:5f:fa:3f:71:d4:94:a9:44:93:a2:2f:8b:bf:79:0a:7b:
3b:fd:ae:e4:af:41:7b:12:0d:71:3a:e5:08:16:82:2d:31:1d:
fd:ed:90:0d:3a:7c:3c:f8:6e:c4:bb:7f:5a:9d:c9:4b:85:df:
49:bb:49:7d:94:30:21:a6:11:6f:5e:2b:9a:4b:d7:40:f6:50:
a7:d2:a7:2c:df:8e:95:7d:58:26:e1:14:9f:bc:e2:82:8a:22:
9b:0a:b7:7e:d9:b3:d4:b2:0c:28:29:70:70:5c:24:be:ea:e3:
7d:0a:29:25:26:57:df:3d:ab:b1:4c:99:9a:bd:f6:5d:2d:ba:
99:dc:f6:eb:d8:cf:6c:68:7b:75:7f:28:fb:3f:8a:08:00:64:
d0:a1:5f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cl5DctCA7cko2ExXPhbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTg2MWRjYjYzNDE4OTNhYzRlNjMyNmVmNmRlNDM0NDFl
NjY5NDMwHhcNMjYwMzI5MTAwMTEzWhcNMjYwMzMwMTAwMTEzWjAzMTEwLwYDVQQD
EygzZTAzNjQ1M2NmYjczZGI2MTJlM2MzZGRhOGQ1ODRhZWRmNTc4ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0tpy1EV0SNwUjgPLfDRomoZN26U
ZmpZVEV0HeDv0v9miFafw/Vde51/1r2lrOoEoyXb4QJfaeWpbnvs9Y6I+3F/Sjfs
mjhj3WO36jOH4t0LOLjQ0svttoBTwcImIuefMfX4BBjMnoo20otBjgnVeOLihLh8
4bKsm82wKjPpRxwqqAE5bhn98mPmeRi1Ogi4As914/eSvQGjrI+VLJ8YLzZQy7Ek
OUMn7jTOG3yRv+OjMCcIIb8Duun+8SKX55sSsd4W5SAcDsvorJqolM3JZcCHUAm+
QWCgvajnQynkOrihmUNrxQRb75Gz/QJX6+HLuxKJMLfu+yDW+YEAK1ZeuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4DZFPPtz22EuPD3ajVhK7fV488MB8GA1UdIwQY
MBaAFPPoYdy2NBiTrE5jJu9t5DRB5mlDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1Mjkt
MzRlYTAyMWQ5NzMzLzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1MjktMzRlYTAyMWQ5NzMz
LzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS7oKSeu
qAPX29nwbP6O1ef0RDcgxW9a3/qNN01SEoe5I6X+j6m6HGLMMhQKXkoXJJ9VlhbH
vggFHV9H8ym3s1/6nhXjlNVX9C8FNsuju9wdp8szTMLlPXPU6HyqVU3gaHkg74g+
+v1lbnI2Rzdf+j9x1JSpRJOiL4u/eQp7O/2u5K9BexINcTrlCBaCLTEd/e2QDTp8
PPhuxLt/Wp3JS4XfSbtJfZQwIaYRb14rmkvXQPZQp9KnLN+OlX1YJuEUn7zigooi
mwq3ftmz1LIMKClwcFwkvurjfQopJSZX3z2rsUyZmr32XS26mdz269jPbGh7dX8o
+z+KCABk0KFfUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:04 2026 by rpki-client