Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: BFAhrO+v1LYDdz9SNw06dSqFaYI50AzTtRqRTfsqtcM=
Subject key identifier: 69:30:D2:18:F6:E8:AB:E6:18:D5:FA:5F:20:7E:2E:9C:E6:7F:C1:9C
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 019D3A548F7043088BA1DDDF9B6D68913B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 16:01:53 +0000
Manifest this update: Sun 29 Mar 2026 16:01:53 +0000
Manifest next update: Mon 30 Mar 2026 16:01:53 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: 08u+kchnAB+iar+NkbZ+yzPrdCrH+oh1p+uGG8UrsUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:8f:70:43:08:8b:a1:dd:df:9b:6d:68:91:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Mar 29 16:01:53 2026 GMT
Not After : Mar 30 16:01:53 2026 GMT
Subject: CN=6930d218f6e8abe618d5fa5f207e2e9ce67fc19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:77:e2:4d:29:d0:2d:c5:ee:f6:7c:4c:63:
1b:2f:10:5b:06:40:0f:7a:66:ef:98:95:46:e2:fd:
89:70:8d:f5:47:23:74:25:a1:e9:f1:72:b0:ee:e0:
66:0e:b9:06:a3:36:01:99:18:bb:d5:1f:23:5e:22:
1f:2d:99:e5:a9:ae:58:b9:00:53:38:fd:69:22:01:
0b:e3:5c:7b:79:94:c7:3d:20:7f:a4:34:84:3a:45:
c5:cd:64:ae:58:2d:5e:e8:21:9b:f5:fb:5c:8f:d8:
66:64:02:b0:35:aa:85:48:b2:e4:c7:16:ef:db:5d:
56:be:7a:ec:43:50:08:00:13:1a:6c:4f:40:e1:6e:
99:49:75:ae:91:d9:8b:bc:2f:78:d7:e5:13:27:6a:
26:eb:66:91:73:3d:65:d3:aa:b1:68:9b:07:8f:64:
bd:ce:aa:13:97:2b:61:56:61:6b:09:9c:3b:a5:0e:
c0:c0:5d:f1:2c:f8:be:7f:04:e1:a4:05:60:b9:e7:
01:7d:7f:cc:b4:52:46:45:b6:11:5b:8a:2f:2c:bf:
7f:84:00:85:3c:9a:99:ed:05:dd:2b:29:3c:2b:0f:
c4:f7:91:e9:47:66:46:73:22:93:7c:74:c3:dc:03:
1c:99:89:ef:33:03:9f:b7:66:11:f1:67:ad:ff:b1:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:D2:18:F6:E8:AB:E6:18:D5:FA:5F:20:7E:2E:9C:E6:7F:C1:9C
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ba:3b:ac:7f:ca:1a:0a:e0:52:b7:e6:b6:82:12:59:d4:04:
cb:39:01:42:8d:ea:48:85:99:a7:c3:dc:d2:bc:d2:9a:ba:54:
56:8b:ff:18:f7:83:3d:76:ab:d9:05:94:ad:8f:74:4b:13:ec:
8d:11:89:85:d4:82:06:f4:1c:87:4c:a9:be:75:80:57:61:2f:
3b:19:b3:9f:86:05:91:a9:2e:8c:1f:38:38:22:59:db:92:0e:
d1:cc:74:66:0c:db:2b:d5:97:dd:06:7f:3e:e4:62:11:38:00:
31:01:09:80:e3:a1:b6:74:06:6a:72:83:b6:6c:20:eb:09:f8:
dc:ec:10:d1:dc:a0:88:7b:89:a1:c7:f0:15:27:fa:a3:4b:dc:
8e:51:c6:c2:46:e6:9c:15:0f:54:78:bb:92:3e:fd:a9:5f:42:
b8:08:b5:c7:af:6b:87:2a:ec:60:9d:75:38:a3:be:64:a5:2a:
8a:7a:17:dd:0b:56:30:02:59:49:11:57:56:c0:3c:62:07:48:
5b:4b:86:24:a6:2d:7d:4a:2a:3d:12:7e:87:58:33:ab:df:dc:
e3:a1:c4:6b:9b:b0:91:6f:d9:fd:7c:f3:ff:88:a4:56:07:d8:
12:86:4c:61:fe:7d:cf:69:13:46:5e:fc:a1:23:a6:e9:ef:86:
a0:23:db:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VI9wQwiLod3fm21okTshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2E4ZDZlMjIwOTkwYzczOGRiOGM4NGM2NmIyMTlmMDM0
NTU2MGMwHhcNMjYwMzI5MTYwMTUzWhcNMjYwMzMwMTYwMTUzWjAzMTEwLwYDVQQD
Eyg2OTMwZDIxOGY2ZThhYmU2MThkNWZhNWYyMDdlMmU5Y2U2N2ZjMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszJ34k0p0C3F7vZ8TGMbLxBbBkAP
embvmJVG4v2JcI31RyN0JaHp8XKw7uBmDrkGozYBmRi71R8jXiIfLZnlqa5YuQBT
OP1pIgEL41x7eZTHPSB/pDSEOkXFzWSuWC1e6CGb9ftcj9hmZAKwNaqFSLLkxxbv
211WvnrsQ1AIABMabE9A4W6ZSXWukdmLvC941+UTJ2om62aRcz1l06qxaJsHj2S9
zqoTlythVmFrCZw7pQ7AwF3xLPi+fwThpAVguecBfX/MtFJGRbYRW4ovLL9/hACF
PJqZ7QXdKyk8Kw/E95HpR2ZGcyKTfHTD3AMcmYnvMwOft2YR8Wet/7EWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkw0hj26KvmGNX6XyB+Lpzmf8GcMB8GA1UdIwQY
MBaAFL/KjW4iCZDHONuMhMZrIZ8DRVYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lNDMxOTQtYzM3Yi00ZTdhLTkxNTAt
MjBlMjdmODc5YWU3LzEvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lNDMxOTQtYzM3Yi00ZTdhLTkxNTAtMjBlMjdmODc5YWU3
LzEvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLo7rH/K
GgrgUrfmtoISWdQEyzkBQo3qSIWZp8Pc0rzSmrpUVov/GPeDPXar2QWUrY90SxPs
jRGJhdSCBvQch0ypvnWAV2EvOxmzn4YFkakujB84OCJZ25IO0cx0ZgzbK9WX3QZ/
PuRiETgAMQEJgOOhtnQGanKDtmwg6wn43OwQ0dygiHuJocfwFSf6o0vcjlHGwkbm
nBUPVHi7kj79qV9CuAi1x69rhyrsYJ11OKO+ZKUqinoX3QtWMAJZSRFXVsA8YgdI
W0uGJKYtfUoqPRJ+h1gzq9/c46HEa5uwkW/Z/Xzz/4ikVgfYEoZMYf59z2kTRl78
oSOm6e+GoCPbcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:33 2026 by rpki-client