Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
File: 8zXtZqwB15F1zk149nKh_kcgN4A.mft (raw, json)
Hash identifier: TzBIiPOLb+ZFKIoMkvhcOgUflzVI2rPlPZsudt0FsCY=
Subject key identifier: 1A:D4:93:6D:DA:3F:32:17:1A:2F:A8:12:C4:21:72:D9:D8:B1:C4:F5
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Certificate issuer: /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial: 019D382E53C4B58476600CEDFE9E6D2476B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
Manifest number: 0254
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: 8zXtZqwB15F1zk149nKh_kcgN4A.crl (hash: 6lrHM6gerWY1edH6i4m78slD1ULn4KQZ2KGbwfKKW6A=)
2: VpiFwK0hsjfTbGKdlZz4M450A4o.roa (hash: 7nG4whDnBMU971FoyHXyhGJf7PxhrWgEoIfy9EmmD2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:53:c4:b5:84:76:60:0c:ed:fe:9e:6d:24:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=1ad4936dda3f32171a2fa812c42172d9d8b1c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:0a:63:4c:9c:c6:9a:1c:a8:69:fc:f2:60:
23:d2:ce:e1:48:84:03:a9:bf:56:f2:86:4f:ce:a5:
c1:fe:f0:82:9d:f0:f8:a5:9a:d5:49:11:bf:cb:cd:
0f:b6:00:1e:c4:28:eb:ce:b8:64:ba:ed:24:a0:ca:
11:15:be:22:b6:5f:60:69:55:f2:be:a2:85:ba:83:
e3:7d:64:48:7d:26:c7:d7:d9:fd:2e:39:b2:e2:9b:
4d:40:91:cd:2c:f9:68:e3:e4:6b:a8:8c:b5:03:15:
17:4b:8a:a4:7e:ed:16:9d:49:64:cf:05:db:6e:53:
ce:f0:09:88:72:5f:a2:e4:83:b6:33:bb:ed:92:90:
8d:50:72:85:89:ce:cf:72:d5:53:b2:09:0e:04:20:
a5:e2:39:68:0f:1c:9b:67:7c:04:af:5e:0a:fa:99:
05:ba:54:eb:ce:65:8f:b6:a8:cf:66:30:64:ad:1c:
04:30:9c:14:a0:72:7d:fe:92:32:39:bc:6f:1a:94:
2d:bb:11:cc:14:2b:20:65:dd:c3:d1:fd:d1:1a:0f:
b8:42:f4:29:37:64:0a:33:55:32:30:f0:b7:01:00:
87:57:05:ca:b0:ca:a6:17:16:e3:f5:88:2c:42:6c:
9c:e1:63:21:d2:72:13:86:82:18:9d:40:a7:ac:79:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:93:6D:DA:3F:32:17:1A:2F:A8:12:C4:21:72:D9:D8:B1:C4:F5
X509v3 Authority Key Identifier:
keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:88:a7:e3:16:0d:4d:d4:20:01:e7:76:5c:4f:97:45:8f:4e:
76:9c:28:3b:e5:8e:25:6b:9c:e2:30:df:e0:f4:22:82:07:4b:
b2:ff:2b:e7:31:07:69:72:3a:f1:56:fa:f6:a2:61:bc:e7:e7:
b5:90:d6:46:7b:40:a7:ab:a2:2a:a7:2d:d2:eb:9f:fb:25:91:
d2:1a:12:cd:10:91:57:a3:d0:b2:77:61:a8:80:f0:24:d3:20:
c3:6c:44:18:90:79:d7:7d:e9:37:cf:1f:dc:e3:d6:90:50:3e:
3a:91:26:bc:68:5a:5e:32:7f:a8:3f:f3:83:3c:75:dd:b1:11:
af:07:58:12:be:68:a3:a3:3a:cc:84:a2:06:ab:5b:b7:25:39:
1c:88:5a:c7:04:4a:70:6c:64:b4:9d:14:64:4c:2f:c2:a7:9a:
84:6f:0b:a2:2a:d6:95:f9:fb:76:16:d8:44:f0:23:87:25:09:
2a:a2:99:3a:60:4c:45:44:64:34:97:2c:40:9d:54:08:d6:e4:
c0:c0:1a:d7:9f:00:2b:b8:c2:7c:67:a4:df:f7:96:11:fe:83:
4a:34:b9:a5:f6:d7:f2:4d:2c:bd:52:f0:f4:0f:1f:24:21:c1:
37:b9:ee:8d:79:a3:09:2d:1f:0a:66:24:4e:e4:27:73:c4:e4:
90:ac:be:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlPEtYR2YAzt/p5tJHa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMzVlZDY2YWMwMWQ3OTE3NWNlNGQ3OGY2NzJhMWZlNDcy
MDM3ODAwHhcNMjYwMzI5MDYwMDUzWhcNMjYwMzMwMDYwMDUzWjAzMTEwLwYDVQQD
EygxYWQ0OTM2ZGRhM2YzMjE3MWEyZmE4MTJjNDIxNzJkOWQ4YjFjNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYAKY0ycxpocqGn88mAj0s7hSIQD
qb9W8oZPzqXB/vCCnfD4pZrVSRG/y80PtgAexCjrzrhkuu0koMoRFb4itl9gaVXy
vqKFuoPjfWRIfSbH19n9Ljmy4ptNQJHNLPlo4+RrqIy1AxUXS4qkfu0WnUlkzwXb
blPO8AmIcl+i5IO2M7vtkpCNUHKFic7PctVTsgkOBCCl4jloDxybZ3wEr14K+pkF
ulTrzmWPtqjPZjBkrRwEMJwUoHJ9/pIyObxvGpQtuxHMFCsgZd3D0f3RGg+4QvQp
N2QKM1UyMPC3AQCHVwXKsMqmFxbj9YgsQmyc4WMh0nIThoIYnUCnrHlH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrUk23aPzIXGi+oEsQhctnYscT1MB8GA1UdIwQY
MBaAFPM17WasAdeRdc5NePZyof5HIDeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEt
NTBhY2JhZWVjN2NhLzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83OTg4ODktMjlkNC00ZjUzLWEwNDEtNTBhY2JhZWVjN2Nh
LzEvOHpYdFpxd0IxNUYxemsxNDluS2hfa2NnTjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIin4xYN
TdQgAed2XE+XRY9OdpwoO+WOJWuc4jDf4PQiggdLsv8r5zEHaXI68Vb69qJhvOfn
tZDWRntAp6uiKqct0uuf+yWR0hoSzRCRV6PQsndhqIDwJNMgw2xEGJB5133pN88f
3OPWkFA+OpEmvGhaXjJ/qD/zgzx13bERrwdYEr5oo6M6zISiBqtbtyU5HIhaxwRK
cGxktJ0UZEwvwqeahG8LoirWlfn7dhbYRPAjhyUJKqKZOmBMRURkNJcsQJ1UCNbk
wMAa158AK7jCfGek3/eWEf6DSjS5pfbX8k0svVLw9A8fJCHBN7nujXmjCS0fCmYk
TuQnc8TkkKy+Iw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:41 2026 by rpki-client