Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: fTAveiYuSHcAFsJBzThPh69bj76Mhxp5tghpCDu5bnA=
Subject key identifier: 60:9F:37:5D:86:34:17:C6:04:BF:61:5A:E4:7E:BD:E5:AB:DB:25:21
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 019D37C05A7108F20D5329ADD62B343FC5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 032B
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: pnI/HXbtCx/cowxvL4gBLeuie/HQ2YOemYMosXkefjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5a:71:08:f2:0d:53:29:ad:d6:2b:34:3f:c5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=609f375d863417c604bf615ae47ebde5abdb2521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:30:e4:8f:c5:e1:7c:7a:94:38:07:39:ab:
8d:f8:30:7d:6f:a5:57:57:b6:a8:95:b7:80:29:ff:
74:eb:19:05:5d:6f:f9:47:86:12:a7:b7:89:98:32:
9e:25:d2:c0:57:7a:57:0e:bd:71:8d:40:27:0e:9a:
bc:ca:1b:96:09:ee:58:80:7a:b9:8e:36:5f:48:e4:
ac:ba:03:71:42:30:e2:c4:6f:6c:b7:e6:d5:34:f5:
da:4d:72:77:1e:89:ab:e0:62:50:d0:3b:09:c9:0b:
9d:27:ae:18:62:e1:36:95:2f:07:e1:d7:0e:de:f0:
4b:4d:ba:f7:e8:cc:a6:93:99:b8:d6:40:e9:68:a1:
4d:c3:5f:97:cc:c7:af:71:72:d8:8f:73:c7:6a:e5:
92:8e:1c:51:69:3f:1b:1c:f5:73:1d:af:c8:4c:4b:
9a:06:b3:6f:16:31:45:92:65:e2:13:35:2a:43:68:
7c:1f:1f:98:0e:44:94:4c:3f:85:d2:5c:03:7d:57:
07:90:65:7c:78:51:a3:2f:0d:bc:b5:20:00:ab:83:
25:95:5f:35:b1:fd:f2:b9:7c:ae:00:f5:a8:2a:e7:
a6:fb:e8:3f:f4:1e:f1:98:b4:94:74:14:da:7c:ab:
e4:44:38:b4:bb:f2:4b:c6:34:28:37:f6:58:0d:b4:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9F:37:5D:86:34:17:C6:04:BF:61:5A:E4:7E:BD:E5:AB:DB:25:21
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:82:f4:fa:40:e6:b5:d6:60:6f:93:18:c9:b5:04:30:1b:5e:
5f:51:21:bf:dc:3f:03:4c:04:f3:37:ed:4e:47:53:bb:03:e7:
d0:ea:8f:3b:27:21:4c:a0:3c:41:52:3c:b2:61:93:61:67:76:
e3:75:9a:b2:34:7e:ed:7f:0b:24:e7:b8:54:78:09:3b:b6:62:
8f:06:98:ee:7c:30:70:25:7f:20:0a:56:a7:39:77:e7:18:57:
82:8d:2d:01:78:62:55:3d:70:2f:65:99:54:bd:40:0b:7e:d0:
c5:74:d9:18:2e:45:27:0d:50:f5:ce:0a:01:82:c2:fd:37:1d:
ea:8b:74:f5:d4:c5:1c:55:17:8d:c5:5c:98:72:3d:42:95:32:
b0:13:77:e8:94:2c:90:55:df:9e:fc:ed:46:36:9b:e8:3f:38:
e7:8e:b5:7f:cf:c4:84:95:01:e4:23:ef:43:0e:ca:54:75:81:
27:17:4e:78:80:1e:9b:8e:2d:30:74:8a:3f:7b:9b:bd:9d:89:
86:ac:83:0e:07:ff:40:42:ff:16:26:d2:9b:d4:85:c1:b0:e1:
3c:63:26:5b:ee:56:a6:c2:f3:55:b0:7f:df:d8:02:3e:66:fa:
5c:cc:91:cb:b9:f9:1a:db:ae:2b:72:5a:28:45:2a:7a:02:53:
d4:f1:c7:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wFpxCPINUymt1is0P8XbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDQ1MzIwNDAzNzJhMWEwMWFjMDA4OTRiOWYwOGJkM2Zl
MWFkZTMwHhcNMjYwMzI5MDQwMDQ2WhcNMjYwMzMwMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg2MDlmMzc1ZDg2MzQxN2M2MDRiZjYxNWFlNDdlYmRlNWFiZGIyNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvgw5I/F4Xx6lDgHOauN+DB9b6VX
V7aolbeAKf906xkFXW/5R4YSp7eJmDKeJdLAV3pXDr1xjUAnDpq8yhuWCe5YgHq5
jjZfSOSsugNxQjDixG9st+bVNPXaTXJ3Homr4GJQ0DsJyQudJ64YYuE2lS8H4dcO
3vBLTbr36Mymk5m41kDpaKFNw1+XzMevcXLYj3PHauWSjhxRaT8bHPVzHa/ITEua
BrNvFjFFkmXiEzUqQ2h8Hx+YDkSUTD+F0lwDfVcHkGV8eFGjLw28tSAAq4MllV81
sf3yuXyuAPWoKuem++g/9B7xmLSUdBTafKvkRDi0u/JLxjQoN/ZYDbSeoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCfN12GNBfGBL9hWuR+veWr2yUhMB8GA1UdIwQY
MBaAFPIEUyBANyoaAawAiUufCL0/4a3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMt
MzQyNDllNjFhNDc0LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80N2EyNjUtM2ViYi00MTA1LWJjNDMtMzQyNDllNjFhNDc0
LzEvOGdSVElFQTNLaG9CckFDSlM1OEl2VF9ocmVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzYL0+kDm
tdZgb5MYybUEMBteX1Ehv9w/A0wE8zftTkdTuwPn0OqPOychTKA8QVI8smGTYWd2
43WasjR+7X8LJOe4VHgJO7ZijwaY7nwwcCV/IApWpzl35xhXgo0tAXhiVT1wL2WZ
VL1AC37QxXTZGC5FJw1Q9c4KAYLC/Tcd6ot09dTFHFUXjcVcmHI9QpUysBN36JQs
kFXfnvztRjab6D845461f8/EhJUB5CPvQw7KVHWBJxdOeIAem44tMHSKP3ubvZ2J
hqyDDgf/QEL/FibSm9SFwbDhPGMmW+5WpsLzVbB/39gCPmb6XMyRy7n5GtuuK3Ja
KEUqegJT1PHH6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:02 2026 by rpki-client