Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: /xzl0uKgJO4aDVhdoJnYJnIU7rVj9G9JF5pkEhpN9sk=
Subject key identifier: D2:22:E0:BD:C7:44:2B:41:A4:64:96:CF:70:FE:00:47:A2:28:0E:EF
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019CB280446AC88EE2722C0809CBCDD09E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 135F
Signing time: Tue 03 Mar 2026 07:01:16 +0000
Manifest this update: Tue 03 Mar 2026 07:01:16 +0000
Manifest next update: Wed 04 Mar 2026 07:01:16 +0000
Files and hashes: 1: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (hash: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ=)
2: 6PhblOAO9xa7zmIjxvlxnMtK7uQ.roa (hash: NWDITDoerQYCt5AOvDev1r+3TmGT8RmUVJIwjMd0YRE=)
3: FtNNeWImNsRtEKSUkKACM6lSmvc.roa (hash: 1b2HDz6Lo28/yROcDiHE0/pvPJHPVJCUsiCcT/vyD5E=)
4: H_IwdjQek-TxkIwNQc7QdhJFGTY.roa (hash: jds0yEe3zRWI3cu0lRDYUFLph76il4rNQy+a1D0VpZk=)
5: LiIvmL2jPb5CXm2fcW48pwl6IHs.roa (hash: nIYaySFJM8B7djJy1Ih3Y/KEycQQlbGH8uUci8K6W9k=)
6: fjWmsnTuw0Jy6MrhqYJr2902xYw.roa (hash: EbbXPkLE6w+CuqoWFnM8NOi9yq48EFyTEgcSWpqKxTw=)
7: rTQMpwKCtdAUeKgHOzQABtMHsGI.roa (hash: NFKvVLShqUI7IOwsmc2G6/b+0920aDWMbWSkjC2hmss=)
8: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: nl2dRVB6mOi45Ng9nC5EWjJ/KiwJesyWiofgYeZ0kCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:80:44:6a:c8:8e:e2:72:2c:08:09:cb:cd:d0:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Mar 3 07:01:16 2026 GMT
Not After : Mar 4 07:01:16 2026 GMT
Subject: CN=d222e0bdc7442b41a46496cf70fe0047a2280eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:ab:91:fb:81:e2:0f:d5:db:84:e0:57:e9:
8f:07:62:0c:1a:4c:b3:80:4f:ad:34:02:4c:a9:63:
bb:68:f0:04:97:10:00:a0:45:03:b9:4e:1c:54:b8:
c0:98:81:fe:e3:50:59:c3:19:ac:5e:f4:c0:82:39:
32:fa:62:04:5a:34:c2:af:7a:0d:9c:2d:2e:65:cb:
ca:a9:5a:c2:28:6c:8d:a8:74:88:0a:86:91:d9:e5:
ae:5f:ec:83:40:21:0c:ce:69:d4:e5:6e:33:73:ce:
ec:58:d4:a5:b3:cb:9b:bc:f3:e9:e2:57:e0:21:93:
cf:ff:48:c1:37:ac:6d:a1:07:88:e4:6d:65:bb:00:
3f:ea:75:f9:d0:f2:61:70:0c:01:94:2c:5a:63:a5:
ae:b5:62:2b:b0:e5:0e:50:62:ca:8f:fb:2c:df:73:
43:76:58:14:d5:d9:9b:b3:b9:a6:a8:74:36:09:43:
cf:1d:12:dd:37:8f:50:00:bc:b9:c0:53:60:b9:91:
61:23:d3:57:ee:95:42:43:6d:d5:8a:27:a5:3e:83:
96:95:2f:ec:a7:5a:e7:83:7f:f6:eb:10:42:d2:35:
02:0a:25:97:d0:7d:84:64:bc:d1:28:75:42:4e:1f:
98:a7:ff:7c:df:23:bc:49:0e:58:61:97:9e:f6:46:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:22:E0:BD:C7:44:2B:41:A4:64:96:CF:70:FE:00:47:A2:28:0E:EF
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6d:e4:d0:9f:03:85:1e:da:29:24:d2:fe:0f:2f:e1:12:bb:
1c:01:7c:4e:f1:e5:61:6c:74:8c:b9:52:c5:4c:44:fe:03:81:
70:c8:56:a5:43:8c:72:4a:06:70:4d:4e:ec:65:86:ef:e5:69:
5b:95:f3:9c:80:89:34:45:cc:10:78:7d:b0:f3:04:3b:f1:e7:
8e:1c:be:ae:00:d8:5c:c7:db:2f:e8:50:c3:c9:66:2c:50:89:
57:ba:a1:a1:ab:71:00:a4:9d:52:94:3d:2c:44:a2:e5:cc:47:
92:05:15:aa:50:d4:9d:31:c1:5a:76:6e:ba:3f:22:82:1c:49:
ec:92:b2:8b:f6:3c:cc:87:da:de:a3:19:2e:f7:04:9a:e1:48:
03:b7:69:41:17:bc:cb:52:28:94:73:4e:9e:a1:d1:18:c7:0f:
78:c0:a7:87:7b:ca:da:1b:d5:f4:84:85:1a:ba:13:a7:54:97:
e0:25:4f:f9:e2:c0:6b:86:43:c2:f5:9b:83:5e:12:e4:df:db:
c7:db:18:25:e9:88:52:1d:a1:cc:d2:87:d8:84:35:d1:36:02:
64:80:d2:08:1b:69:4a:27:cd:df:dd:5f:93:40:f0:7b:66:36:
7c:5e:42:f5:d1:fd:fc:23:5d:0d:ea:ec:9a:e6:e5:60:55:b0:
f6:03:b4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyygERqyI7iciwICcvN0J6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjYwMzAzMDcwMTE2WhcNMjYwMzA0MDcwMTE2WjAzMTEwLwYDVQQD
EyhkMjIyZTBiZGM3NDQyYjQxYTQ2NDk2Y2Y3MGZlMDA0N2EyMjgwZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0irkfuB4g/V24TgV+mPB2IMGkyz
gE+tNAJMqWO7aPAElxAAoEUDuU4cVLjAmIH+41BZwxmsXvTAgjky+mIEWjTCr3oN
nC0uZcvKqVrCKGyNqHSICoaR2eWuX+yDQCEMzmnU5W4zc87sWNSls8ubvPPp4lfg
IZPP/0jBN6xtoQeI5G1luwA/6nX50PJhcAwBlCxaY6WutWIrsOUOUGLKj/ss33ND
dlgU1dmbs7mmqHQ2CUPPHRLdN49QALy5wFNguZFhI9NX7pVCQ23ViielPoOWlS/s
p1rng3/26xBC0jUCCiWX0H2EZLzRKHVCTh+Yp/983yO8SQ5YYZee9kZQWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIi4L3HRCtBpGSWz3D+AEeiKA7vMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU23k0J8D
hR7aKSTS/g8v4RK7HAF8TvHlYWx0jLlSxUxE/gOBcMhWpUOMckoGcE1O7GWG7+Vp
W5XznICJNEXMEHh9sPMEO/Hnjhy+rgDYXMfbL+hQw8lmLFCJV7qhoatxAKSdUpQ9
LESi5cxHkgUVqlDUnTHBWnZuuj8ighxJ7JKyi/Y8zIfa3qMZLvcEmuFIA7dpQRe8
y1IolHNOnqHRGMcPeMCnh3vK2hvV9ISFGroTp1SX4CVP+eLAa4ZDwvWbg14S5N/b
x9sYJemIUh2hzNKH2IQ10TYCZIDSCBtpSifN391fk0Dwe2Y2fF5C9dH9/CNdDers
mublYFWw9gO0ug==
-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:19 2026 by rpki-client