Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
File: _zpsebd2C8TOC4xmtIGvrTCiV24.mft (raw, json)
Hash identifier: j+3YQWLBWoxAWw3PcE27q1ylyl8VHTv5HzL6QXMOCpk=
Subject key identifier: 4A:86:13:FB:EC:C0:46:B8:92:B3:97:6B:04:18:F1:13:81:47:9C:D2
Authority key identifier: FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E
Certificate issuer: /CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
Certificate serial: 019D39E5740F80D7B811F1DF02565555CE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
Manifest number: B8
Signing time: Sun 29 Mar 2026 14:00:31 +0000
Manifest this update: Sun 29 Mar 2026 14:00:31 +0000
Manifest next update: Mon 30 Mar 2026 14:00:31 +0000
Files and hashes: 1: _zpsebd2C8TOC4xmtIGvrTCiV24.crl (hash: Ue4pNANGR9NSileQsU3kV6Fi7KYLCtclFWuFFEzMQrw=)
2: wG6Wnqhubd9o-R1O0dE8qxtcv_Y.roa (hash: Xp/N+VxkIpYboMZ4WVUWp5X/q97QHWHWJohFZ9QOnDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:74:0f:80:d7:b8:11:f1:df:02:56:55:55:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3a6c79b7760bc4ce0b8c66b481afad30a2576e
Validity
Not Before: Mar 29 14:00:31 2026 GMT
Not After : Mar 30 14:00:31 2026 GMT
Subject: CN=4a8613fbecc046b892b3976b0418f11381479cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:ff:6d:53:b7:2f:9d:86:2f:09:41:36:99:
a3:4d:b0:14:a6:f4:2e:66:5f:05:79:22:7f:6e:b5:
93:9c:fe:74:51:e2:66:73:aa:45:c2:7f:6a:0f:79:
b0:d1:66:1b:54:ee:f8:5f:5a:a9:e2:42:2b:50:73:
df:4d:43:e3:0d:57:6d:dd:02:c8:3c:68:1b:ad:89:
c3:42:67:34:07:5b:4b:0f:36:23:4a:22:24:c0:24:
33:df:90:98:35:06:e2:7f:20:18:a7:95:d7:a9:9e:
23:6d:9f:8e:5d:1a:f0:c5:b0:4e:9b:a8:e4:17:ac:
d3:f0:ab:b7:df:39:3a:19:65:63:54:75:10:5c:56:
58:90:b5:e4:b6:15:9d:7e:15:59:87:4e:2e:2f:d8:
b8:91:ea:62:0b:dc:a8:ef:d7:26:92:95:5a:d5:92:
37:64:c1:97:71:56:a7:65:82:39:03:d0:cf:c1:4a:
b9:7c:8c:7e:29:03:cb:13:c2:46:6e:f5:5c:78:5a:
7d:5f:57:35:2b:14:c1:19:6b:b9:9c:2f:e4:9e:1a:
5f:a2:5a:61:5b:c2:d7:fb:22:fb:ef:41:23:a8:d4:
8e:97:21:8e:b8:62:fd:26:64:c3:48:d3:48:14:99:
d1:69:11:44:cf:91:1b:0d:88:a4:4f:3d:6d:f7:88:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:13:FB:EC:C0:46:B8:92:B3:97:6B:04:18:F1:13:81:47:9C:D2
X509v3 Authority Key Identifier:
keyid:FF:3A:6C:79:B7:76:0B:C4:CE:0B:8C:66:B4:81:AF:AD:30:A2:57:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zpsebd2C8TOC4xmtIGvrTCiV24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/01205b-62e2-4569-b971-d5ae10bd5bf0/1/_zpsebd2C8TOC4xmtIGvrTCiV24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:b9:1f:1a:50:69:ca:03:43:38:6a:7e:5a:96:9e:bf:5d:
ce:9f:01:7b:ef:69:5f:ec:7b:d9:a1:5c:11:98:f4:99:03:09:
61:67:76:ab:6a:ab:c2:40:3c:d7:63:1e:b1:56:4b:9a:fa:30:
9a:df:48:83:5b:06:4d:de:ff:65:fd:d2:cc:c2:f6:73:59:1f:
7e:b6:d7:b1:8b:6f:eb:56:e1:ba:68:a9:d4:61:24:6a:43:95:
75:0c:88:e8:dc:81:90:ea:cb:13:1f:37:e4:bd:6a:0a:f1:27:
b8:c2:07:d2:6a:cc:17:be:9b:a8:38:4b:ce:6e:06:6b:84:59:
33:be:a0:1c:c7:31:1f:40:37:65:77:b5:f8:e3:4d:e1:7b:df:
01:63:82:cd:1a:65:f1:24:c0:9e:79:84:10:0d:79:c3:07:55:
60:8c:16:dc:74:20:a4:20:a4:75:92:7f:8d:7a:60:fc:8e:c3:
46:db:fd:0b:7f:ee:52:aa:b3:5a:d5:be:96:f2:af:ce:f6:4e:
22:f2:a2:55:02:1f:91:c5:69:5f:08:a5:9a:d0:cf:af:24:fd:
01:eb:b3:fc:96:4a:54:c6:9f:cb:90:5d:9a:c1:c0:f8:8e:a9:
fe:57:1f:3c:c6:44:d4:2e:ca:cd:1a:7c:33:30:7e:55:5c:e8:
b8:d8:69:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055XQPgNe4EfHfAlZVVc4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2E2Yzc5Yjc3NjBiYzRjZTBiOGM2NmI0ODFhZmFkMzBh
MjU3NmUwHhcNMjYwMzI5MTQwMDMxWhcNMjYwMzMwMTQwMDMxWjAzMTEwLwYDVQQD
Eyg0YTg2MTNmYmVjYzA0NmI4OTJiMzk3NmIwNDE4ZjExMzgxNDc5Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslD/bVO3L52GLwlBNpmjTbAUpvQu
Zl8FeSJ/brWTnP50UeJmc6pFwn9qD3mw0WYbVO74X1qp4kIrUHPfTUPjDVdt3QLI
PGgbrYnDQmc0B1tLDzYjSiIkwCQz35CYNQbifyAYp5XXqZ4jbZ+OXRrwxbBOm6jk
F6zT8Ku33zk6GWVjVHUQXFZYkLXkthWdfhVZh04uL9i4kepiC9yo79cmkpVa1ZI3
ZMGXcVanZYI5A9DPwUq5fIx+KQPLE8JGbvVceFp9X1c1KxTBGWu5nC/knhpfolph
W8LX+yL770EjqNSOlyGOuGL9JmTDSNNIFJnRaRFEz5EbDYikTz1t94gPRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqGE/vswEa4krOXawQY8ROBR5zSMB8GA1UdIwQY
MBaAFP86bHm3dgvEzguMZrSBr60wolduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pwc2ViZDJDOFRPQzR4bXRJR3ZyVENpVjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wMTIwNWItNjJlMi00NTY5LWI5NzEt
ZDVhZTEwYmQ1YmYwLzEvX3pwc2ViZDJDOFRPQzR4bXRJR3ZyVENpVjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wMTIwNWItNjJlMi00NTY5LWI5NzEtZDVhZTEwYmQ1YmYw
LzEvX3pwc2ViZDJDOFRPQzR4bXRJR3ZyVENpVjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLO5HxpQ
acoDQzhqflqWnr9dzp8Be+9pX+x72aFcEZj0mQMJYWd2q2qrwkA812MesVZLmvow
mt9Ig1sGTd7/Zf3SzML2c1kffrbXsYtv61bhumip1GEkakOVdQyI6NyBkOrLEx83
5L1qCvEnuMIH0mrMF76bqDhLzm4Ga4RZM76gHMcxH0A3ZXe1+ONN4XvfAWOCzRpl
8STAnnmEEA15wwdVYIwW3HQgpCCkdZJ/jXpg/I7DRtv9C3/uUqqzWtW+lvKvzvZO
IvKiVQIfkcVpXwilmtDPryT9Aeuz/JZKVMafy5BdmsHA+I6p/lcfPMZE1C7KzRp8
MzB+VVzouNhpbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:59 2026 by rpki-client