Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: oTxFq5GBWd6MRModMiuVshcnymMgFYzZh8VC2uClzC8=
Subject key identifier: 94:84:8B:B4:C1:86:04:20:46:F6:68:44:F5:56:3E:F9:09:88:2E:08
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 019D0CD72527CC7C4C617C92A89212F96171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 055B
Signing time: Fri 20 Mar 2026 20:01:59 +0000
Manifest this update: Fri 20 Mar 2026 20:01:59 +0000
Manifest next update: Sat 21 Mar 2026 20:01:59 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: hmg7Zurr/BgAYqgxAh9idqX/lGwhJXaUvFndrNjllqI=)
2: L__0IImxx17mcLd4F54xkQpwTiA.roa (hash: qZizn0ANyVYa2kNvNDiG/vr4PQkqJyC3jj8cfvISE4A=)
3: dO7YsL4styJWkEbyYnxj7svPmxc.roa (hash: 9b8H/NqCmB/GoG5NnV1WxRB8lUCVU1Wvz4lOYigLXt8=)
4: iGPhaDb4xjM65dn-oJGw074wQpw.roa (hash: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk=)
5: odt_2E36HJJB984srGHjv6qER2U.asa (hash: R8X7F+f+3wADu+sKhSukvo7cCZr57RXUSRSmArsF1fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 17:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:d7:25:27:cc:7c:4c:61:7c:92:a8:92:12:f9:61:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Mar 20 20:01:59 2026 GMT
Not After : Mar 21 20:01:59 2026 GMT
Subject: CN=94848bb4c186042046f66844f5563ef909882e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cc:bb:ba:03:53:ef:1b:1d:c7:10:63:0d:f2:
ea:1e:a2:b3:76:b1:77:86:9d:23:0f:86:2e:3d:f9:
84:e3:a2:63:cf:18:f4:e8:61:63:30:dc:27:4d:81:
1a:f1:20:97:34:37:c8:9b:ff:4b:db:19:fd:4b:8f:
0f:a6:8d:bb:7d:06:77:85:d5:97:ac:2e:71:46:76:
4e:b8:51:33:d3:a4:41:b7:f6:f2:7a:8c:23:f4:76:
4a:ed:18:75:58:f2:44:45:0c:77:11:56:93:09:84:
d7:a9:60:9c:0d:c6:ef:9a:d9:49:11:65:9e:cb:ed:
94:ac:c4:8b:a9:03:33:51:83:d1:f9:3d:98:af:98:
84:b3:a6:e3:92:ea:56:0f:7f:15:1a:80:d0:62:e4:
cc:5b:49:51:76:51:1f:30:a3:e1:4d:26:19:61:f2:
e4:29:95:24:a3:a5:9f:01:ac:28:be:df:4b:e2:f1:
73:da:02:08:7f:70:46:07:7c:4f:02:ff:10:ff:4c:
f7:2a:da:80:8b:b4:fa:2e:b5:0d:6a:21:22:3d:df:
9a:f0:44:05:eb:cc:33:d5:c5:04:63:53:59:f6:45:
d2:05:e6:91:90:80:ca:34:49:ad:21:c3:35:49:54:
7c:9c:c1:cb:b7:ea:19:9e:49:42:c1:e2:2d:4f:3e:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:8B:B4:C1:86:04:20:46:F6:68:44:F5:56:3E:F9:09:88:2E:08
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:e8:07:e4:f6:be:5c:6c:b5:88:cf:e3:8f:3f:da:da:b8:
80:da:53:5c:fe:56:4f:de:72:62:0d:12:b3:fe:2a:f1:d6:fc:
83:44:61:b6:fd:cc:63:b9:23:3b:17:cb:d0:87:69:93:a8:74:
e7:db:40:bb:a6:bd:db:54:ba:e8:95:ac:a5:22:c4:4a:47:4e:
0c:0f:f8:ca:2e:43:cc:5f:25:1c:aa:4d:9e:dc:20:9f:ec:b9:
e7:18:d1:95:9b:4f:fd:de:f4:a5:6a:f8:7b:83:d2:96:52:c7:
6b:7e:61:39:93:c3:7b:af:f1:b7:0b:01:5e:a6:c8:57:84:6f:
81:b3:4b:23:a9:2e:f7:41:d4:85:f2:93:d9:92:25:0c:48:5e:
9a:cc:b0:3d:27:5a:7a:5c:2e:db:5c:d0:25:a3:b0:c6:b1:49:
14:a2:d7:fe:7a:29:bb:39:0d:25:8c:47:55:57:10:d8:b9:31:
ec:0d:77:1a:72:57:b0:9c:5f:5a:3f:2f:00:d6:66:de:d9:e2:
cd:c7:fc:e2:52:af:29:7e:61:b7:6a:d5:81:a8:f7:08:23:21:
7e:8e:3c:b1:81:8a:70:b3:9e:35:fd:c6:40:a7:19:e2:d8:57:
61:0a:49:66:38:d1:58:f4:3f:25:e5:a5:ba:17:a2:63:79:1f:
d8:94:53:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0M1yUnzHxMYXySqJIS+WFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0
ZWE3YTUwHhcNMjYwMzIwMjAwMTU5WhcNMjYwMzIxMjAwMTU5WjAzMTEwLwYDVQQD
Eyg5NDg0OGJiNGMxODYwNDIwNDZmNjY4NDRmNTU2M2VmOTA5ODgyZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88y7ugNT7xsdxxBjDfLqHqKzdrF3
hp0jD4YuPfmE46Jjzxj06GFjMNwnTYEa8SCXNDfIm/9L2xn9S48Ppo27fQZ3hdWX
rC5xRnZOuFEz06RBt/byeowj9HZK7Rh1WPJERQx3EVaTCYTXqWCcDcbvmtlJEWWe
y+2UrMSLqQMzUYPR+T2Yr5iEs6bjkupWD38VGoDQYuTMW0lRdlEfMKPhTSYZYfLk
KZUko6WfAawovt9L4vFz2gIIf3BGB3xPAv8Q/0z3KtqAi7T6LrUNaiEiPd+a8EQF
68wz1cUEY1NZ9kXSBeaRkIDKNEmtIcM1SVR8nMHLt+oZnklCweItTz6cQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSEi7TBhgQgRvZoRPVWPvkJiC4IMB8GA1UdIwQY
MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt
YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm
LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpzoB+T2
vlxstYjP448/2tq4gNpTXP5WT95yYg0Ss/4q8db8g0Rhtv3MY7kjOxfL0Idpk6h0
59tAu6a921S66JWspSLESkdODA/4yi5DzF8lHKpNntwgn+y55xjRlZtP/d70pWr4
e4PSllLHa35hOZPDe6/xtwsBXqbIV4RvgbNLI6ku90HUhfKT2ZIlDEhemsywPSda
elwu21zQJaOwxrFJFKLX/nopuzkNJYxHVVcQ2Lkx7A13GnJXsJxfWj8vANZm3tni
zcf84lKvKX5ht2rVgaj3CCMhfo48sYGKcLOeNf3GQKcZ4thXYQpJZjjRWPQ/JeWl
uheiY3kf2JRTgg==
-----END CERTIFICATE-----
Generated at Fri Mar 20 23:38:15 2026 by rpki-client