Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: rQyNDFHKFTYCzHamsqxvavOUN7o3oVebZA1AZvV0AMI=
Subject key identifier: 1D:7E:7B:DE:8A:65:B8:E5:B6:45:87:42:01:32:64:E1:83:29:C0:E5
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 019D38D3C2F16763329A3F35212D3B55CF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 098F
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: zNK+upvU7/AheoBGLwei+xvf3h+vXCE8Tdn5cM+RvOg=)
2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
3: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c2:f1:67:63:32:9a:3f:35:21:2d:3b:55:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=1d7e7bde8a65b8e5b6458742013264e18329c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:c3:1e:2a:91:32:35:06:61:94:cf:c8:54:
c4:76:bf:c2:88:ff:9b:53:43:b5:45:fc:18:6a:0c:
a6:ea:9e:0c:01:16:13:7b:e7:04:24:5d:a3:13:5d:
3d:d7:c1:6b:7d:d8:4c:b6:9d:07:78:c1:1f:ae:8d:
da:2e:dd:4d:b5:aa:8e:2e:c4:53:82:ae:ef:d3:fb:
7f:1e:d6:ab:75:a5:66:6c:07:b5:d7:77:fb:4c:c9:
a1:e7:88:82:8d:a9:b5:b3:05:89:f8:df:f6:72:99:
0c:9d:e4:6a:c1:04:14:aa:c2:11:22:9f:d5:8c:f2:
d0:20:d0:0f:b3:c1:4a:a0:2e:fe:0f:38:d2:fe:3a:
5b:e3:ee:a5:d4:2d:b7:cf:50:f1:aa:96:19:2d:ab:
3a:55:6a:18:d0:fb:89:d4:0a:83:19:e6:8d:5e:00:
8b:ab:77:58:2d:6d:41:4d:ea:bb:c3:bf:72:68:c4:
78:0d:1c:98:c7:59:95:0c:50:0a:c0:ea:a8:b3:4c:
60:2e:9d:b6:00:88:c3:6b:e1:65:da:62:51:d7:c7:
a5:c4:f4:fa:86:9e:74:46:41:f4:f9:f9:40:e5:4a:
a8:32:da:68:fd:3f:7c:f7:bc:56:bc:07:0d:e0:00:
26:07:a2:8d:f3:0c:b9:3b:df:14:52:84:31:ea:69:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:7B:DE:8A:65:B8:E5:B6:45:87:42:01:32:64:E1:83:29:C0:E5
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4f:8c:62:88:2f:a3:4d:78:fa:b6:c9:6b:ad:4d:1f:36:c8:
bc:6d:39:36:b4:5b:8b:3c:e8:00:2d:0b:b9:66:65:25:bd:36:
98:ce:11:10:5b:84:10:c4:14:7e:9e:67:74:0f:0e:b5:ac:e8:
69:c5:99:c5:30:c6:a7:43:15:42:37:77:a8:da:f6:71:77:34:
34:b8:67:d3:6a:06:f0:66:12:4d:86:e0:97:82:3d:62:e1:39:
0b:24:aa:18:7f:6e:c4:3a:cb:1a:b7:10:bb:8d:3e:28:d7:8f:
e3:97:75:a7:fd:94:db:df:9f:8b:2f:68:4c:4e:24:ec:ee:2d:
c6:1d:bd:7a:a9:8c:c6:b0:ee:33:c0:ca:95:1b:ad:f3:5c:b7:
4a:42:c6:18:fa:c7:74:a6:ec:9a:4e:6f:4c:f2:f4:e0:94:2d:
73:0e:23:e9:c7:23:99:e3:e4:0d:02:37:28:1b:ed:b8:bb:ab:
5e:cc:dc:25:a9:a5:81:0c:28:19:f9:1b:a9:73:37:eb:f1:80:
e4:31:af:53:31:2f:a4:00:7d:b8:e7:67:bc:b9:8f:6b:a0:d5:
f4:22:f0:5f:66:d5:8c:be:93:44:fb:8a:0b:a1:ca:09:ac:98:
d2:6c:dc:5d:e3:38:0a:ed:c8:36:5e:89:1d:17:74:bd:b4:a4:
ba:b4:a2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408LxZ2Mymj81IS07Vc9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjYwMzI5MDkwMTM1WhcNMjYwMzMwMDkwMTM1WjAzMTEwLwYDVQQD
EygxZDdlN2JkZThhNjViOGU1YjY0NTg3NDIwMTMyNjRlMTgzMjljMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttnDHiqRMjUGYZTPyFTEdr/CiP+b
U0O1RfwYagym6p4MARYTe+cEJF2jE10918FrfdhMtp0HeMEfro3aLt1NtaqOLsRT
gq7v0/t/HtardaVmbAe113f7TMmh54iCjam1swWJ+N/2cpkMneRqwQQUqsIRIp/V
jPLQINAPs8FKoC7+DzjS/jpb4+6l1C23z1DxqpYZLas6VWoY0PuJ1AqDGeaNXgCL
q3dYLW1BTeq7w79yaMR4DRyYx1mVDFAKwOqos0xgLp22AIjDa+Fl2mJR18elxPT6
hp50RkH0+flA5UqoMtpo/T9897xWvAcN4AAmB6KN8wy5O98UUoQx6mntXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1+e96KZbjltkWHQgEyZOGDKcDlMB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASk+MYogv
o014+rbJa61NHzbIvG05NrRbizzoAC0LuWZlJb02mM4REFuEEMQUfp5ndA8Otazo
acWZxTDGp0MVQjd3qNr2cXc0NLhn02oG8GYSTYbgl4I9YuE5CySqGH9uxDrLGrcQ
u40+KNeP45d1p/2U29+fiy9oTE4k7O4txh29eqmMxrDuM8DKlRut81y3SkLGGPrH
dKbsmk5vTPL04JQtcw4j6ccjmePkDQI3KBvtuLurXszcJamlgQwoGfkbqXM36/GA
5DGvUzEvpAB9uOdnvLmPa6DV9CLwX2bVjL6TRPuKC6HKCayY0mzcXeM4Cu3INl6J
HRd0vbSkurSiVQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:54 2026 by rpki-client