Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
File: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft (raw, json)
Hash identifier: V+vZXJkcdgCxJ2Any66C5r7YPjv2Chwgv71l7c/GSAw=
Subject key identifier: 18:23:B2:52:2F:0D:A0:F7:5D:75:CF:2D:95:41:B7:8B:16:75:AA:88
Authority key identifier: BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
Certificate issuer: /CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Certificate serial: 019D37F77DF2F00FFF38163FD5C6E12AE633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
Manifest number: 58
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl (hash: j6ZGMTwJwDgubQEeTg3JtFGIyw/QjcCmMcs+Bt36Umw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7d:f2:f0:0f:ff:38:16:3f:d5:c6:e1:2a:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc1e6d59e8e0f12fc3361b17130adf53ce26872
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=1823b2522f0da0f75d75cf2d9541b78b1675aa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:10:08:1b:a8:01:6f:8e:bf:e6:7c:10:91:
90:83:ab:2d:3d:10:a9:7e:2b:34:26:b3:3d:f5:ad:
6c:94:bc:61:77:54:2d:14:73:d1:a9:83:0d:e6:8d:
69:09:49:29:81:14:9c:07:dc:03:cb:58:da:13:7d:
9f:3c:40:71:71:e0:e5:bd:3b:7f:a1:59:9b:e0:fd:
55:03:17:e7:51:71:b7:d1:9c:7a:7d:84:84:5a:6e:
56:a2:d8:f2:2a:0e:65:2b:ab:25:bf:37:c0:c5:7f:
fd:24:ad:78:e0:7e:e4:57:1a:be:dd:86:29:6b:e3:
e5:cf:3e:5d:df:3b:62:10:03:f2:78:39:78:fc:03:
a2:e4:11:1e:fe:cf:71:2f:5a:ce:e7:f9:42:2f:3d:
5d:69:fd:b2:ff:aa:14:96:2e:2b:08:b1:55:28:13:
0c:88:44:b2:02:d8:6b:80:e4:8d:d6:ee:4e:29:b6:
ce:1a:b2:f3:94:a3:3c:0a:54:80:0d:37:a4:80:9d:
56:44:00:f9:72:9a:db:1a:c3:d9:17:37:6d:5e:0f:
af:1e:69:0a:5b:fc:f3:35:24:0f:e3:9e:36:1e:c4:
16:eb:6c:88:f1:a1:a4:6c:80:04:c5:2d:2d:df:59:
80:8e:e4:18:9d:d0:56:c6:02:39:3c:13:87:27:3e:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:23:B2:52:2F:0D:A0:F7:5D:75:CF:2D:95:41:B7:8B:16:75:AA:88
X509v3 Authority Key Identifier:
keyid:BF:C1:E6:D5:9E:8E:0F:12:FC:33:61:B1:71:30:AD:F5:3C:E2:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0c0c6d-a9e6-48ed-84e2-42c3a1f304e0/1/v8Hm1Z6ODxL8M2GxcTCt9TziaHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a4:36:87:94:23:0a:dd:6f:cf:e5:58:14:26:b0:63:08:15:
14:5a:3a:08:b0:45:b6:78:89:04:34:90:08:de:db:cc:ab:bd:
57:d0:f9:46:96:06:54:4e:30:92:3c:bf:44:37:e6:a3:96:ac:
ef:91:61:29:f4:8a:59:6f:d7:4f:6c:b0:33:40:72:1a:c5:d9:
5f:30:3f:e7:45:a2:b5:38:48:7e:1a:17:50:ea:04:08:c6:59:
7d:fe:09:01:9e:3e:4b:57:c3:58:59:a4:7c:fa:bf:7e:26:c8:
dc:19:04:6a:e5:db:bf:7e:7e:a1:2f:f7:3f:ae:75:59:85:4f:
a5:a2:f9:59:d7:f8:f1:30:c2:ba:d6:a5:bc:0a:2c:b0:52:d6:
e2:ed:78:4b:e4:dd:23:a5:41:e7:1c:4c:ae:8a:88:93:67:5f:
ad:a2:1b:77:c1:84:76:62:e1:d4:98:ba:26:2f:1b:33:c7:5d:
3d:11:6b:f7:2a:23:ff:6f:99:56:11:b0:75:69:08:b0:6b:9b:
2f:73:56:fa:31:6b:29:53:48:40:3e:45:bd:e0:42:97:20:15:
4d:5e:b0:d5:d8:32:a7:49:76:1c:80:32:e7:b4:f1:c9:48:a0:
cd:33:bf:21:40:76:9e:fb:f1:2d:af:65:0b:ce:2d:77:31:3b:
4e:4e:d2:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03933y8A//OBY/1cbhKuYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzFlNmQ1OWU4ZTBmMTJmYzMzNjFiMTcxMzBhZGY1M2Nl
MjY4NzIwHhcNMjYwMzI5MDUwMDU5WhcNMjYwMzMwMDUwMDU5WjAzMTEwLwYDVQQD
EygxODIzYjI1MjJmMGRhMGY3NWQ3NWNmMmQ5NTQxYjc4YjE2NzVhYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZgQCBuoAW+Ov+Z8EJGQg6stPRCp
fis0JrM99a1slLxhd1QtFHPRqYMN5o1pCUkpgRScB9wDy1jaE32fPEBxceDlvTt/
oVmb4P1VAxfnUXG30Zx6fYSEWm5WotjyKg5lK6slvzfAxX/9JK144H7kVxq+3YYp
a+Plzz5d3ztiEAPyeDl4/AOi5BEe/s9xL1rO5/lCLz1daf2y/6oUli4rCLFVKBMM
iESyAthrgOSN1u5OKbbOGrLzlKM8ClSADTekgJ1WRAD5cprbGsPZFzdtXg+vHmkK
W/zzNSQP4542HsQW62yI8aGkbIAExS0t31mAjuQYndBWxgI5PBOHJz7kGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgjslIvDaD3XXXPLZVBt4sWdaqIMB8GA1UdIwQY
MBaAFL/B5tWejg8S/DNhsXEwrfU84mhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhIbTFaNk9EeEw4TTJHeGNUQ3Q5VHppYUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYzBjNmQtYTllNi00OGVkLTg0ZTIt
NDJjM2ExZjMwNGUwLzEvdjhIbTFaNk9EeEw4TTJHeGNUQ3Q5VHppYUhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8wYzBjNmQtYTllNi00OGVkLTg0ZTItNDJjM2ExZjMwNGUw
LzEvdjhIbTFaNk9EeEw4TTJHeGNUQ3Q5VHppYUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6Q2h5Qj
Ct1vz+VYFCawYwgVFFo6CLBFtniJBDSQCN7bzKu9V9D5RpYGVE4wkjy/RDfmo5as
75FhKfSKWW/XT2ywM0ByGsXZXzA/50WitThIfhoXUOoECMZZff4JAZ4+S1fDWFmk
fPq/fibI3BkEauXbv35+oS/3P651WYVPpaL5Wdf48TDCutalvAossFLW4u14S+Td
I6VB5xxMroqIk2dfraIbd8GEdmLh1Ji6Ji8bM8ddPRFr9yoj/2+ZVhGwdWkIsGub
L3NW+jFrKVNIQD5FveBClyAVTV6w1dgyp0l2HIAy57TxyUigzTO/IUB2nvvxLa9l
C84tdzE7Tk7Sjw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:44 2026 by rpki-client