Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: XGLNbh4MujV7vnO3WpQgWosFyDCmgwtOLNgxrZecso0=
Subject key identifier: 46:81:A1:12:85:00:B2:CB:53:5A:A4:CB:52:25:05:50:21:43:31:93
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 019D3940F41F60A56BA4D89E829A7435996A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 1034
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: SSjRsIdx+xVerWlfmS4XKlhgwyatO/GPum60LRy1ULo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f4:1f:60:a5:6b:a4:d8:9e:82:9a:74:35:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=4681a1128500b2cb535aa4cb5225055021433193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:af:30:cb:b4:01:5e:38:21:b2:d4:6e:1b:
ed:4e:6b:24:b6:dd:30:25:a2:07:5e:e6:35:ba:8e:
aa:a5:d1:90:e6:00:ba:a3:7e:52:85:c6:a5:a3:4b:
07:1b:87:39:01:4d:a4:2c:a9:55:8b:07:b6:d9:87:
45:43:3b:82:ff:0a:74:b8:5b:00:25:c9:8d:be:22:
26:a1:81:9a:8d:11:7a:3c:fa:bc:e9:17:f9:f9:0d:
63:d3:8d:97:eb:93:c1:06:59:29:3d:11:e5:1a:75:
c1:be:25:6f:9e:91:4b:59:c0:b8:4c:5f:25:27:79:
15:c5:10:dc:a4:be:04:26:18:39:1b:0c:dc:5f:0e:
09:ed:86:bf:74:dd:c0:be:89:c2:6d:25:d3:ba:21:
bb:23:17:a6:ba:69:c1:cd:18:2b:47:23:f3:55:0c:
19:e1:84:1b:e0:aa:b9:dd:e2:c2:3e:6b:2e:ce:4f:
48:00:0f:0e:63:2b:8b:78:32:ec:87:a0:99:3a:30:
29:75:59:3a:4e:f7:90:94:58:00:e3:42:2d:99:23:
90:b8:b7:64:3c:c9:4f:9a:a5:f6:93:9b:84:50:d7:
0b:91:4b:12:97:02:e9:66:a2:03:a9:cc:71:91:2f:
2b:12:b2:f9:80:ee:69:f4:f8:cf:04:39:fa:d1:26:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:A1:12:85:00:B2:CB:53:5A:A4:CB:52:25:05:50:21:43:31:93
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:d7:72:6a:10:a5:32:51:60:fd:f3:a0:94:10:ea:9f:c3:
4c:61:6d:a2:23:73:6a:7e:bd:d2:16:ef:d2:51:64:1d:31:8f:
c1:59:ce:31:e9:b1:8c:7a:4d:fa:34:f4:e6:a8:b7:96:35:f6:
2f:94:92:4a:7b:98:95:db:d3:8f:45:79:41:0b:ec:e9:eb:74:
e3:17:7d:4d:1c:b2:61:de:ce:0b:bf:c6:45:90:1d:fe:7c:48:
22:52:e9:a8:21:9c:45:ad:c6:a7:2f:4e:60:17:4a:1a:ae:18:
e4:86:50:c4:19:0b:61:98:68:aa:85:e9:df:6e:84:38:04:72:
ca:58:2b:bc:20:2e:36:da:ce:5d:57:3b:49:fc:d1:4e:85:e7:
d5:df:c0:6a:e2:c3:b8:56:58:1b:4b:4e:47:57:18:27:b9:ed:
87:96:e2:8f:d9:20:c5:9b:0a:56:85:cd:b5:21:af:87:72:32:
47:d8:40:7b:14:b9:51:1d:ba:6b:5d:9b:1c:e4:18:a9:6a:01:
d1:d3:28:e4:88:94:3c:72:43:8f:e0:d0:4f:43:99:be:55:18:
d8:a3:16:be:4b:1b:7a:aa:b3:c8:b9:66:3d:9b:8c:c2:88:37:
7e:69:02:f7:c2:76:ee:e1:2d:c0:29:b1:00:d8:3c:3a:8d:db:
ce:47:11:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPQfYKVrpNiegpp0NZlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjYwMzI5MTEwMDUxWhcNMjYwMzMwMTEwMDUxWjAzMTEwLwYDVQQD
Eyg0NjgxYTExMjg1MDBiMmNiNTM1YWE0Y2I1MjI1MDU1MDIxNDMzMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UKvMMu0AV44IbLUbhvtTmsktt0w
JaIHXuY1uo6qpdGQ5gC6o35Shcalo0sHG4c5AU2kLKlViwe22YdFQzuC/wp0uFsA
JcmNviImoYGajRF6PPq86Rf5+Q1j042X65PBBlkpPRHlGnXBviVvnpFLWcC4TF8l
J3kVxRDcpL4EJhg5GwzcXw4J7Ya/dN3AvonCbSXTuiG7IxemumnBzRgrRyPzVQwZ
4YQb4Kq53eLCPmsuzk9IAA8OYyuLeDLsh6CZOjApdVk6TveQlFgA40ItmSOQuLdk
PMlPmqX2k5uEUNcLkUsSlwLpZqIDqcxxkS8rErL5gO5p9PjPBDn60SbvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaBoRKFALLLU1qky1IlBVAhQzGTMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxfXcmoQ
pTJRYP3zoJQQ6p/DTGFtoiNzan690hbv0lFkHTGPwVnOMemxjHpN+jT05qi3ljX2
L5SSSnuYldvTj0V5QQvs6et04xd9TRyyYd7OC7/GRZAd/nxIIlLpqCGcRa3Gpy9O
YBdKGq4Y5IZQxBkLYZhoqoXp326EOARyylgrvCAuNtrOXVc7SfzRToXn1d/AauLD
uFZYG0tOR1cYJ7nth5bij9kgxZsKVoXNtSGvh3IyR9hAexS5UR26a12bHOQYqWoB
0dMo5IiUPHJDj+DQT0OZvlUY2KMWvksbeqqzyLlmPZuMwog3fmkC98J27uEtwCmx
ANg8Oo3bzkcRdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:42 2026 by rpki-client