Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: +TZmmO0G7CffLMzYNEZt4d2r/vjgBEGXLTK0tM5WQUk=
Subject key identifier: C8:B9:5F:FF:D3:F4:62:56:57:64:59:97:A1:80:76:6B:62:1C:B6:26
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 019D389BE21C87FE36E4FE3339B02C0A6D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 178A
Signing time: Sun 29 Mar 2026 08:00:33 +0000
Manifest this update: Sun 29 Mar 2026 08:00:33 +0000
Manifest next update: Mon 30 Mar 2026 08:00:33 +0000
Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=)
2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: rVDhDk/e5Ob49Av9QZU10WPA5NBYlpMUM8Jfn8dvG1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e2:1c:87:fe:36:e4:fe:33:39:b0:2c:0a:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Mar 29 08:00:33 2026 GMT
Not After : Mar 30 08:00:33 2026 GMT
Subject: CN=c8b95fffd3f4625657645997a180766b621cb626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:2e:1d:1d:f8:fb:9e:c3:4d:fb:34:0d:ec:
c7:6d:0b:9f:a0:47:f4:4e:5a:7c:c7:79:db:98:10:
a3:c5:a1:0c:8f:6b:3d:23:e7:e8:2a:ac:7c:6b:54:
0c:bc:b0:72:42:6d:99:d6:57:d1:61:6b:00:03:68:
6e:3a:6f:b8:7d:57:e6:99:a2:f5:ba:0e:0d:b2:67:
65:ea:84:e9:64:5a:fe:e6:9d:29:60:c7:06:d0:f4:
17:a6:69:52:04:a7:e8:9d:a1:4d:09:cd:84:1c:a7:
49:54:92:76:5e:55:0c:fd:07:ea:e7:fe:d6:5f:cd:
0d:53:7b:72:f4:69:4b:b7:ed:9c:b2:62:bd:ca:46:
34:49:7b:64:88:71:06:64:4b:23:82:49:c8:05:ac:
a4:64:d0:f3:c8:04:7f:26:5b:23:79:7a:08:b6:7e:
33:81:de:3a:22:39:98:83:f9:6b:76:e5:85:65:55:
ac:96:56:bd:4e:72:26:56:17:32:d7:d3:a9:4e:2c:
bf:75:21:04:42:f3:5e:ad:a2:72:f3:98:a5:e6:50:
ce:0a:ca:9c:c0:c7:3c:07:09:c3:bc:bf:85:ce:6f:
0b:df:bf:be:01:53:74:5e:46:12:ee:3c:7b:cf:e9:
ec:00:b4:23:9d:f3:0e:96:3f:98:38:55:97:a3:70:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:5F:FF:D3:F4:62:56:57:64:59:97:A1:80:76:6B:62:1C:B6:26
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:75:5e:b1:9a:5a:c3:5f:59:77:96:c0:48:3d:48:f5:32:be:
f5:a0:97:4b:38:ce:9a:c4:2f:0a:d6:7d:e6:5c:b8:e6:02:5c:
31:91:92:46:68:2b:77:7a:dd:53:70:64:47:f3:07:32:6d:94:
d1:97:fc:b5:f6:6a:32:0f:cb:ae:cd:83:d4:48:5b:da:24:99:
5b:36:92:62:e4:58:f6:09:40:32:aa:20:95:a3:f5:95:fa:aa:
76:ce:66:9c:61:e4:8c:12:11:c0:c2:82:e6:0d:c3:b8:0c:e0:
2e:ab:2c:c4:cc:ca:75:aa:df:42:cd:a5:b2:e5:07:34:02:a5:
75:d3:54:ef:d0:29:86:a0:6b:5e:79:3f:3c:64:a5:2f:1f:8d:
91:f5:71:b4:f8:fd:67:50:45:6b:e2:12:2e:08:92:23:fb:70:
64:50:3e:50:d8:2a:2d:4a:6e:0c:7b:85:2d:48:99:82:4e:9b:
87:04:8a:f3:15:75:65:a1:c6:17:2b:7c:cd:27:3c:ab:e6:a7:
26:81:4b:64:5c:b9:8f:33:0d:fb:a6:a4:b3:9f:fa:5a:15:8c:
59:73:20:6e:42:43:44:f7:f1:5a:01:fb:f3:19:b1:29:ba:c3:
f1:d0:a6:4d:37:d4:c4:30:99:bf:a4:ce:b2:ce:99:86:13:88:
cf:5d:48:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+Ich/425P4zObAsCm13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1
NWMzZmIwHhcNMjYwMzI5MDgwMDMzWhcNMjYwMzMwMDgwMDMzWjAzMTEwLwYDVQQD
EyhjOGI5NWZmZmQzZjQ2MjU2NTc2NDU5OTdhMTgwNzY2YjYyMWNiNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FouHR34+57DTfs0DezHbQufoEf0
Tlp8x3nbmBCjxaEMj2s9I+foKqx8a1QMvLByQm2Z1lfRYWsAA2huOm+4fVfmmaL1
ug4Nsmdl6oTpZFr+5p0pYMcG0PQXpmlSBKfonaFNCc2EHKdJVJJ2XlUM/Qfq5/7W
X80NU3ty9GlLt+2csmK9ykY0SXtkiHEGZEsjgknIBaykZNDzyAR/JlsjeXoItn4z
gd46IjmYg/lrduWFZVWslla9TnImVhcy19OpTiy/dSEEQvNeraJy85il5lDOCsqc
wMc8BwnDvL+Fzm8L37++AVN0XkYS7jx7z+nsALQjnfMOlj+YOFWXo3DOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi5X//T9GJWV2RZl6GAdmtiHLYmMB8GA1UdIwQY
MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt
YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2
LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHVesZpa
w19Zd5bASD1I9TK+9aCXSzjOmsQvCtZ95ly45gJcMZGSRmgrd3rdU3BkR/MHMm2U
0Zf8tfZqMg/Lrs2D1Ehb2iSZWzaSYuRY9glAMqoglaP1lfqqds5mnGHkjBIRwMKC
5g3DuAzgLqssxMzKdarfQs2lsuUHNAKlddNU79AphqBrXnk/PGSlLx+NkfVxtPj9
Z1BFa+ISLgiSI/twZFA+UNgqLUpuDHuFLUiZgk6bhwSK8xV1ZaHGFyt8zSc8q+an
JoFLZFy5jzMN+6aks5/6WhWMWXMgbkJDRPfxWgH78xmxKbrD8dCmTTfUxDCZv6TO
ss6ZhhOIz11IKw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:54 2026 by rpki-client