Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: Hb3CcMw2OJ0mCktKTP2s8WZu8iSASXZ1Kt/JJZYmyEQ=
Subject key identifier: 08:FD:C0:A4:CB:45:36:FB:A2:B3:C6:0A:2D:ED:84:5E:A0:22:33:92
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 019D386571BC743584277AB5566909B40BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 07C6
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: nnBvc6rQVBczPh+bsXi8ZrMHi9JNk4pALMZlW0aFw1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:71:bc:74:35:84:27:7a:b5:56:69:09:b4:0b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=08fdc0a4cb4536fba2b3c60a2ded845ea0223392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:19:26:ab:8b:34:3c:5c:f1:17:b4:75:50:
07:42:3b:eb:7f:19:4e:46:da:1a:31:1e:ba:66:e8:
32:fe:a2:e7:25:46:60:6f:cb:09:69:c7:c9:22:fc:
a1:b1:9e:91:65:a3:4c:dd:c9:91:5c:f7:87:c0:58:
37:1a:8b:b1:e8:eb:d0:97:0a:2c:32:33:14:bd:42:
9b:60:de:34:f0:e3:96:1d:f6:25:2d:70:51:0e:83:
78:10:33:a3:ba:57:05:8c:1b:8d:6e:78:af:29:c2:
f0:37:ba:01:47:b6:46:3b:11:72:37:ff:e2:aa:a3:
bb:54:35:ef:d7:31:10:e0:71:a5:54:0d:79:8d:3c:
af:11:a1:a1:7e:1b:3b:0a:74:14:6b:bf:9c:18:1e:
1c:6e:b2:f0:22:17:41:ea:82:ce:56:5c:8f:1e:f4:
49:84:69:04:5e:b9:56:b7:43:41:47:ed:ea:bb:c4:
f2:94:22:f8:22:c5:94:7e:49:45:6d:b4:cb:70:60:
46:ff:ea:2a:db:1c:08:ac:4c:e4:af:0a:67:e4:4e:
6a:81:9e:0b:3a:68:ff:61:0d:15:38:a1:cc:42:76:
3d:d8:70:6c:3e:e1:5c:bc:de:5f:f1:f4:4e:68:c7:
c9:54:e4:2c:74:41:aa:6d:49:36:3f:6e:bf:a4:6b:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:C0:A4:CB:45:36:FB:A2:B3:C6:0A:2D:ED:84:5E:A0:22:33:92
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c0:4c:0d:40:fb:6f:a0:1d:79:94:1a:85:fb:e3:93:d5:c1:
cd:20:2f:4c:69:72:fa:f3:93:4c:43:40:dc:38:27:d2:08:4a:
97:1e:21:49:8f:60:91:43:bb:e7:43:25:18:d1:05:14:98:7a:
b1:f5:38:0e:88:5d:84:04:68:10:4a:61:39:74:0c:b6:76:c1:
7d:c2:ca:46:c0:97:84:40:2c:7b:a6:d4:af:c1:73:3b:c2:9f:
dc:8a:34:05:31:e8:e4:dd:6e:6e:3a:92:de:e3:94:07:2a:ba:
dc:16:72:fd:95:57:d9:dd:e4:d6:d0:63:fc:a0:a7:48:af:c8:
8e:eb:a4:30:73:46:7a:78:05:1d:09:c5:08:ab:06:c0:d0:5e:
28:c3:53:41:22:7a:d4:de:91:a2:b6:bb:e3:5d:5d:8b:eb:fb:
cb:ed:dd:02:1d:e1:3e:d9:c1:a1:ae:7d:bd:50:33:31:b2:e4:
7a:31:1f:cf:32:3f:f7:8d:49:e1:60:61:2b:24:2b:c6:94:5b:
f3:35:48:55:66:58:77:ad:fd:af:6e:56:6d:c4:bc:fe:91:f9:
39:1c:43:1f:99:a7:e1:10:20:20:f0:23:62:09:dc:cb:dd:af:
fe:94:9b:8f:97:2a:0a:36:2c:17:d2:ec:36:3a:87:54:31:13:
41:e4:ae:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXG8dDWEJ3q1VmkJtAv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNmRmYjRmN2UzZTM3NDU1ODBlOGM4ZmM0NzAyM2ZmYjFm
YTkxNmQwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
EygwOGZkYzBhNGNiNDUzNmZiYTJiM2M2MGEyZGVkODQ1ZWEwMjIzMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEAZJquLNDxc8Re0dVAHQjvrfxlO
RtoaMR66Zugy/qLnJUZgb8sJacfJIvyhsZ6RZaNM3cmRXPeHwFg3Goux6OvQlwos
MjMUvUKbYN408OOWHfYlLXBRDoN4EDOjulcFjBuNbnivKcLwN7oBR7ZGOxFyN//i
qqO7VDXv1zEQ4HGlVA15jTyvEaGhfhs7CnQUa7+cGB4cbrLwIhdB6oLOVlyPHvRJ
hGkEXrlWt0NBR+3qu8TylCL4IsWUfklFbbTLcGBG/+oq2xwIrEzkrwpn5E5qgZ4L
Omj/YQ0VOKHMQnY92HBsPuFcvN5f8fROaMfJVOQsdEGqbUk2P26/pGtSawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj9wKTLRTb7orPGCi3thF6gIjOSMB8GA1UdIwQY
MBaAFPBt+09+PjdFWA6Mj8RwI/+x+pFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQt
YjAzZjk0ODgwNGJlLzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82ZTFkZjgtNmViYy00YjJlLTkxYjQtYjAzZjk0ODgwNGJl
LzEvOEczN1QzNC1OMFZZRG95UHhIQWpfN0g2a1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsBMDUD7
b6AdeZQahfvjk9XBzSAvTGly+vOTTENA3Dgn0ghKlx4hSY9gkUO750MlGNEFFJh6
sfU4DohdhARoEEphOXQMtnbBfcLKRsCXhEAse6bUr8FzO8Kf3Io0BTHo5N1ubjqS
3uOUByq63BZy/ZVX2d3k1tBj/KCnSK/IjuukMHNGengFHQnFCKsGwNBeKMNTQSJ6
1N6Rora7411di+v7y+3dAh3hPtnBoa59vVAzMbLkejEfzzI/941J4WBhKyQrxpRb
8zVIVWZYd639r25WbcS8/pH5ORxDH5mn4RAgIPAjYgncy92v/pSbj5cqCjYsF9Ls
NjqHVDETQeSudQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:27 2026 by rpki-client