Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: CCwGvQ8pz3AF+xmTaoWU0Q4iPURnQdNE9GZNMU7+obY=
Subject key identifier: AB:2E:9A:B8:3F:5A:92:E0:DF:6E:22:88:14:02:4B:B9:1C:70:BA:0A
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 019D37F7883A5DF8A3F872A2627F3399E442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1339
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: ZFXtGyrBsAGnzgx4FhNvxYYro6LlGQ2DXhEP6kbQCj8=)
2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:88:3a:5d:f8:a3:f8:72:a2:62:7f:33:99:e4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=ab2e9ab83f5a92e0df6e228814024bb91c70ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:e9:09:d9:19:57:9f:bd:ef:46:76:ef:13:
bd:b5:a9:ea:9d:9e:90:75:d4:d7:47:c1:7c:e6:79:
8f:5a:ad:98:b1:50:4e:3d:2a:c3:bd:b7:0b:f3:5a:
9f:a1:9b:bf:be:5d:72:3a:27:69:e5:c4:24:67:cf:
cd:d0:b0:45:6d:ad:e3:4d:74:39:38:ba:e9:32:24:
9e:cb:aa:6c:d2:b5:d1:d1:34:b7:76:17:19:fe:11:
c0:a5:d5:45:22:45:c2:de:a8:d9:f4:71:ed:f4:1c:
ca:2e:71:60:d0:3c:12:7a:db:99:26:29:3b:47:76:
74:f6:87:c4:03:df:ba:9b:cb:67:99:3c:00:47:f6:
34:f8:b5:b9:66:36:59:8c:38:99:cd:89:dc:84:ad:
48:5e:08:a9:e6:42:58:16:7c:0b:87:22:88:47:84:
fb:76:ad:c7:1a:58:6c:0d:a3:5e:cc:f6:c1:63:67:
65:53:d5:33:8d:e1:c2:8a:41:67:63:fd:ba:fe:b2:
09:a1:41:cb:96:8e:3c:42:a9:65:c8:56:65:0f:69:
36:10:8c:a5:75:74:2a:61:63:c2:75:b2:ec:85:8e:
97:24:25:ba:30:54:e1:8e:b7:d6:60:b9:2c:bf:ee:
4a:f3:c1:65:6c:5a:24:49:f6:dc:79:18:ce:78:39:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:9A:B8:3F:5A:92:E0:DF:6E:22:88:14:02:4B:B9:1C:70:BA:0A
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:71:f9:bb:78:1d:a0:ea:33:35:90:10:e0:ed:a8:ba:5a:8c:
23:05:d9:0b:7c:42:7c:8f:dc:5b:30:0c:a9:da:17:96:47:47:
ed:58:cf:0e:64:83:be:7d:bf:b4:bb:e5:0a:32:41:55:c0:c6:
c0:39:2c:b8:03:06:6d:2b:ff:72:7e:9c:24:c3:21:30:d5:34:
38:17:69:ec:b6:67:4c:85:cf:3b:7e:2f:91:f7:ba:e8:8e:77:
28:e0:1b:58:70:20:74:cd:0b:19:a6:26:e5:fd:35:e0:b0:ef:
2b:76:69:ea:21:61:55:05:cd:ed:13:13:85:85:84:f9:c3:c2:
ba:d3:d8:27:b4:79:f5:61:0d:e7:f7:9f:8e:92:ac:25:c9:77:
53:ec:b8:68:27:cd:f6:ee:55:ee:4b:c3:9c:f1:16:6d:fc:70:
af:73:2d:a0:18:cc:07:6f:66:10:fe:0b:0e:39:67:e7:8e:3b:
a6:f4:d9:dd:09:f8:6f:d9:0b:51:a7:69:24:bc:7d:2d:78:9c:
71:0a:c0:c5:10:82:cc:ca:40:72:2c:7a:da:41:ae:80:41:63:
21:87:25:26:93:dc:45:36:14:3b:f5:c0:b6:b0:f2:95:55:f7:
6a:df:01:0b:eb:83:57:c8:5c:e5:ad:03:6d:a5:02:66:ea:80:
63:c6:6c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0394g6Xfij+HKiYn8zmeRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOGUwYjc1OGJlNzNhMWRkYmZiNTE3ZWU4YjVlNGY4NjNh
MjFmOWUwHhcNMjYwMzI5MDUwMTAyWhcNMjYwMzMwMDUwMTAyWjAzMTEwLwYDVQQD
EyhhYjJlOWFiODNmNWE5MmUwZGY2ZTIyODgxNDAyNGJiOTFjNzBiYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjbpCdkZV5+970Z27xO9tanqnZ6Q
ddTXR8F85nmPWq2YsVBOPSrDvbcL81qfoZu/vl1yOidp5cQkZ8/N0LBFba3jTXQ5
OLrpMiSey6ps0rXR0TS3dhcZ/hHApdVFIkXC3qjZ9HHt9BzKLnFg0DwSetuZJik7
R3Z09ofEA9+6m8tnmTwAR/Y0+LW5ZjZZjDiZzYnchK1IXgip5kJYFnwLhyKIR4T7
dq3HGlhsDaNezPbBY2dlU9UzjeHCikFnY/26/rIJoUHLlo48QqllyFZlD2k2EIyl
dXQqYWPCdbLshY6XJCW6MFThjrfWYLksv+5K88FlbFokSfbceRjOeDnxXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsumrg/WpLg324iiBQCS7kccLoKMB8GA1UdIwQY
MBaAFPKOC3WL5zod2/tRfui15Phjoh+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUt
NjllM2QwODY2ZWY2LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wODEyOGEtNjkwYS00ZjA4LTg4NjUtNjllM2QwODY2ZWY2
LzEvOG80TGRZdm5PaDNiLTFGLTZMWGstR09pSDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXH5u3gd
oOozNZAQ4O2oulqMIwXZC3xCfI/cWzAMqdoXlkdH7VjPDmSDvn2/tLvlCjJBVcDG
wDksuAMGbSv/cn6cJMMhMNU0OBdp7LZnTIXPO34vkfe66I53KOAbWHAgdM0LGaYm
5f014LDvK3Zp6iFhVQXN7RMThYWE+cPCutPYJ7R59WEN5/efjpKsJcl3U+y4aCfN
9u5V7kvDnPEWbfxwr3MtoBjMB29mEP4LDjln5447pvTZ3Qn4b9kLUadpJLx9LXic
cQrAxRCCzMpAcix62kGugEFjIYclJpPcRTYUO/XAtrDylVX3at8BC+uDV8hc5a0D
baUCZuqAY8ZsiA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:39 2026 by rpki-client