Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier: AWCRaHcE54lxX+cqm1w77uw3pizsj3NCCIUAo9VqERY=
Subject key identifier: C4:E7:4B:E6:36:9B:88:20:6C:38:2A:C7:41:E3:D5:FF:85:B8:4A:89
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer: /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial: 019D3909910F34A81646E43DD17CF24991E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number: 0870
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: gxHs9gQCmLaU0J8njs1znXx3Svc8XOg3a8mL8gIR9C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:0f:34:a8:16:46:e4:3d:d1:7c:f2:49:91:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bffa2742563265037029a78f9317339053009c
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=c4e74be6369b88206c382ac741e3d5ff85b84a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:71:e3:64:ca:9b:a1:f7:36:68:83:f7:96:
cc:b6:49:27:45:7a:64:e1:ce:f3:a0:b9:2e:51:14:
21:ce:d1:63:0e:48:ea:ac:09:97:9a:ae:db:f7:a1:
48:e1:4f:fc:93:3f:64:80:4a:57:da:4d:22:67:14:
e3:47:cf:8a:f6:78:8c:c9:dd:7d:f2:27:0a:7e:9b:
be:dc:76:c3:ad:8d:95:e2:60:36:d4:5a:22:19:86:
76:cc:b4:96:19:46:79:da:b5:1e:9a:ca:2f:f8:c1:
81:5e:b4:51:e3:77:b1:63:25:8a:22:ba:e4:16:9e:
c8:da:04:38:65:e8:8b:03:8b:e4:8f:00:21:72:c6:
f0:db:be:87:74:6e:0b:8b:05:e5:11:ba:7d:af:54:
7c:ab:ed:34:4c:d3:96:4e:72:2c:a6:93:ed:29:bd:
33:df:67:d1:62:df:4e:1a:e6:d6:94:85:95:99:d8:
9f:71:40:fe:ab:a2:3d:85:bd:e4:bf:f4:70:2c:2e:
d2:76:46:de:16:64:11:3c:41:4b:bd:16:7b:d5:2d:
c2:c3:5d:89:6a:4c:91:bb:8e:b9:42:f4:2d:44:21:
d4:1a:ba:22:c8:0e:8f:f9:bb:01:4d:da:c7:7e:bd:
68:81:ee:ea:da:21:d9:79:04:ee:73:0e:49:ff:2b:
7a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:4B:E6:36:9B:88:20:6C:38:2A:C7:41:E3:D5:FF:85:B8:4A:89
X509v3 Authority Key Identifier:
keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:a5:49:13:69:9f:c4:f7:0c:e8:95:e2:97:c8:3d:3b:1b:
3b:2b:46:49:98:9a:b9:d7:b8:ab:70:ed:02:78:cb:dd:60:58:
a9:75:d2:5f:dd:c3:6d:bc:03:3c:7f:33:e1:ad:26:34:7b:8e:
28:04:b4:d8:87:13:95:57:48:1f:68:94:4a:0e:26:3d:f8:19:
82:c5:8d:d7:f1:3a:3a:73:dc:18:6d:33:11:a9:bb:fe:f4:74:
9f:6a:02:10:3f:e4:7c:b0:bc:a2:e0:73:e8:29:db:6f:d3:28:
fd:60:5c:7d:be:70:41:18:2d:06:23:47:aa:c8:79:8e:b0:a8:
f6:87:86:2b:7d:ac:d7:15:a4:7e:96:a1:d1:3f:d0:4d:a5:94:
c6:49:0b:46:ef:b2:46:a4:4d:0f:58:14:40:d7:b6:53:e2:7d:
fc:34:88:3f:75:c8:78:c8:84:79:e2:2d:70:d0:a5:9f:0d:db:
66:7b:61:8c:bc:cb:0e:3e:ed:eb:a6:0b:a7:f2:a1:9b:5a:9d:
c6:d4:23:1d:79:3c:5e:22:62:8b:6a:6c:eb:b5:07:31:5d:53:
0f:18:91:65:52:c8:44:cc:30:2c:5b:e8:1b:49:41:fc:ab:62:
4b:e0:3c:e7:ef:d6:34:38:54:e1:1c:af:50:41:d3:ce:8e:24:
04:fb:78:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZEPNKgWRuQ90XzySZHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmZmYTI3NDI1NjMyNjUwMzcwMjlhNzhmOTMxNzMzOTA1
MzAwOWMwHhcNMjYwMzI5MTAwMDIxWhcNMjYwMzMwMTAwMDIxWjAzMTEwLwYDVQQD
EyhjNGU3NGJlNjM2OWI4ODIwNmMzODJhYzc0MWUzZDVmZjg1Yjg0YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qpx42TKm6H3NmiD95bMtkknRXpk
4c7zoLkuURQhztFjDkjqrAmXmq7b96FI4U/8kz9kgEpX2k0iZxTjR8+K9niMyd19
8icKfpu+3HbDrY2V4mA21FoiGYZ2zLSWGUZ52rUemsov+MGBXrRR43exYyWKIrrk
Fp7I2gQ4ZeiLA4vkjwAhcsbw276HdG4LiwXlEbp9r1R8q+00TNOWTnIsppPtKb0z
32fRYt9OGubWlIWVmdifcUD+q6I9hb3kv/RwLC7SdkbeFmQRPEFLvRZ71S3Cw12J
akyRu465QvQtRCHUGroiyA6P+bsBTdrHfr1oge7q2iHZeQTucw5J/yt6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTnS+Y2m4ggbDgqx0Hj1f+FuEqJMB8GA1UdIwQY
MBaAFPK/+idCVjJlA3App4+TFzOQUwCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2Yt
ZGU4NjZmYjA2NmQ3LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NWNjZWItMTkyOC00MTY2LThjN2YtZGU4NjZmYjA2NmQ3
LzEvOHJfNkowSldNbVVEY0Ntbmo1TVhNNUJUQUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZ2lSRNp
n8T3DOiV4pfIPTsbOytGSZiaude4q3DtAnjL3WBYqXXSX93DbbwDPH8z4a0mNHuO
KAS02IcTlVdIH2iUSg4mPfgZgsWN1/E6OnPcGG0zEam7/vR0n2oCED/kfLC8ouBz
6Cnbb9Mo/WBcfb5wQRgtBiNHqsh5jrCo9oeGK32s1xWkfpah0T/QTaWUxkkLRu+y
RqRND1gUQNe2U+J9/DSIP3XIeMiEeeItcNClnw3bZnthjLzLDj7t66YLp/Khm1qd
xtQjHXk8XiJii2ps67UHMV1TDxiRZVLIRMwwLFvoG0lB/KtiS+A85+/WNDhU4Ryv
UEHTzo4kBPt4yw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client