Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: spPSbhOpxsyB7h3kIJ4nqKRCmsgclkP3eU2L/qzpUhg=
Subject key identifier: 8C:A0:4E:52:F0:DB:05:4E:33:DB:3F:E2:B0:41:99:40:A1:3E:0A:24
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 019D37F73E2287FE2A34618A9B813D14EB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: YEuCs3PvhYrp+b8EC6xH+ZksmBfiyCo/7OkqF4LD9jc=)
2: kMUpaCiTkh2kJr0mhaoFnVyiC30.roa (hash: SYX4r9LuobOamN0k+QFcLKBI8j/NR9w+wByXAqgbr74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3e:22:87:fe:2a:34:61:8a:9b:81:3d:14:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=8ca04e52f0db054e33db3fe2b0419940a13e0a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:5c:cb:af:a5:00:61:91:ce:fd:05:5b:27:
5d:55:a5:3c:88:1c:77:8c:b9:b3:82:73:df:1c:9e:
c9:7c:5e:9a:63:c3:4b:d2:ec:f9:83:10:fc:2a:fc:
c3:17:55:e9:54:40:c0:e6:f1:b3:19:59:19:d6:47:
18:78:1a:03:32:c1:cc:40:57:f4:21:27:0e:30:8c:
57:91:62:48:15:02:95:f9:15:01:57:da:85:3e:c5:
7b:a7:a5:26:02:5b:2c:bf:63:33:c1:95:3e:ad:85:
e4:37:41:84:3c:e2:cc:e7:ab:a6:a4:a6:40:33:1c:
e1:53:b6:aa:2b:55:84:76:34:0c:71:79:8b:e3:b9:
ac:0c:b9:8c:0c:1d:c1:c9:d5:bc:89:d5:d6:17:0a:
fd:aa:2a:83:fe:fc:d6:0c:6f:7b:b7:aa:77:7b:95:
85:1d:44:5d:ae:e1:2c:d8:97:b4:e2:07:7a:ab:52:
c7:cd:e4:4d:63:f0:a3:48:7b:9c:8e:ef:df:5d:4d:
8d:53:9f:23:53:f6:2b:2a:4e:5c:29:64:c3:d6:2d:
09:90:33:59:25:2f:50:fa:2b:44:c6:ec:6a:a8:d8:
e0:57:a5:d9:90:84:39:e7:08:bc:d0:ae:23:15:fa:
68:60:2a:3e:ef:ac:a0:20:6d:d1:e3:d4:11:c5:86:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:4E:52:F0:DB:05:4E:33:DB:3F:E2:B0:41:99:40:A1:3E:0A:24
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:76:4e:00:27:1c:be:f4:18:0b:e6:55:34:fb:12:01:51:
24:c8:d3:3e:87:b2:5d:7e:a0:0e:80:85:3b:9a:8a:88:a6:2c:
3b:4d:6e:30:a1:bc:bc:1f:4f:d9:c4:ee:9d:35:80:7e:de:43:
e6:71:1f:8d:ac:57:7a:89:5d:96:36:d1:3e:13:55:f6:fd:e6:
06:d6:fc:d6:da:16:1f:8f:81:6e:86:0f:29:7d:57:43:6a:d0:
36:41:ad:1a:80:27:51:e1:29:e2:d8:8c:30:f6:ce:82:f6:1e:
93:2f:c4:78:ab:b6:16:dd:67:9c:ab:61:3c:f2:56:06:d5:1b:
f1:3c:98:af:33:3e:a4:a5:a1:13:23:f9:5f:58:93:9d:b1:aa:
26:9d:90:7a:a3:07:5f:d0:e9:fb:86:6f:4d:c9:e8:f4:62:85:
d9:0b:bf:79:67:ae:d1:a5:56:2d:de:87:a8:cb:9a:01:6e:63:
eb:88:c7:fd:59:7b:43:6b:14:2b:d5:08:05:ac:7a:69:b2:28:
a0:c6:67:0b:5d:19:15:22:6d:38:22:e5:f6:4e:3f:f5:b8:fb:
5e:f8:c3:58:90:06:bf:f4:aa:db:dc:02:c9:3f:5d:1f:4e:28:
57:c8:a8:c9:b1:45:7d:ce:7e:6e:31:35:24:35:c3:9c:83:75:
7d:12:50:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039z4ih/4qNGGKm4E9FOtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2
MmU3YTQwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
Eyg4Y2EwNGU1MmYwZGIwNTRlMzNkYjNmZTJiMDQxOTk0MGExM2UwYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUpcy6+lAGGRzv0FWyddVaU8iBx3
jLmzgnPfHJ7JfF6aY8NL0uz5gxD8KvzDF1XpVEDA5vGzGVkZ1kcYeBoDMsHMQFf0
IScOMIxXkWJIFQKV+RUBV9qFPsV7p6UmAlssv2MzwZU+rYXkN0GEPOLM56umpKZA
MxzhU7aqK1WEdjQMcXmL47msDLmMDB3BydW8idXWFwr9qiqD/vzWDG97t6p3e5WF
HURdruEs2Je04gd6q1LHzeRNY/CjSHucju/fXU2NU58jU/YrKk5cKWTD1i0JkDNZ
JS9Q+itExuxqqNjgV6XZkIQ55wi80K4jFfpoYCo+76ygIG3R49QRxYailwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIygTlLw2wVOM9s/4rBBmUChPgokMB8GA1UdIwQY
MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt
NjViODZhMDM1YTA4LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4
LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea52TgAn
HL70GAvmVTT7EgFRJMjTPoeyXX6gDoCFO5qKiKYsO01uMKG8vB9P2cTunTWAft5D
5nEfjaxXeoldljbRPhNV9v3mBtb81toWH4+BboYPKX1XQ2rQNkGtGoAnUeEp4tiM
MPbOgvYeky/EeKu2Ft1nnKthPPJWBtUb8TyYrzM+pKWhEyP5X1iTnbGqJp2QeqMH
X9Dp+4ZvTcno9GKF2Qu/eWeu0aVWLd6HqMuaAW5j64jH/Vl7Q2sUK9UIBax6abIo
oMZnC10ZFSJtOCLl9k4/9bj7XvjDWJAGv/Sq29wCyT9dH04oV8ioybFFfc5+bjE1
JDXDnIN1fRJQRw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:30 2026 by rpki-client