Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
File: i8qzttz8va_XYxEPhmqCgV3qRGM.mft (raw, json)
Hash identifier: c52aUVBxwLg2/BZhPY1LmqEqbrRmTDUDX67UnL0Svog=
Subject key identifier: C0:F3:E2:F4:75:8A:60:58:59:A3:11:A5:FD:8A:DC:1A:22:73:19:60
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 019D3A542CEB527A2F0802A6D99427E757AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
Manifest number: 0504
Signing time: Sun 29 Mar 2026 16:01:28 +0000
Manifest this update: Sun 29 Mar 2026 16:01:28 +0000
Manifest next update: Mon 30 Mar 2026 16:01:28 +0000
Files and hashes: 1: i8qzttz8va_XYxEPhmqCgV3qRGM.crl (hash: v424/YewDnT4eC2BfpemEAfPF6EFwJdIq248Vz6dMdE=)
2: zGEr5fEqz6RkjKnWIEcvCDq3-IQ.roa (hash: kIqOQiOgFlHvbyCS3PuGJtN+6np/Op863FpjkLwsVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:2c:eb:52:7a:2f:08:02:a6:d9:94:27:e7:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Mar 29 16:01:28 2026 GMT
Not After : Mar 30 16:01:28 2026 GMT
Subject: CN=c0f3e2f4758a605859a311a5fd8adc1a22731960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:91:ce:17:d8:20:0b:9e:6f:e7:e9:1d:63:
a1:35:19:ae:5c:5b:5f:5a:c8:25:5e:97:d3:68:a8:
7c:19:26:c4:84:c5:f5:0e:e1:d6:40:16:e6:33:92:
af:ef:f6:9d:cd:89:39:42:5a:48:0c:1b:fa:b2:ac:
ac:ff:23:d5:56:ea:22:71:c2:d3:63:f3:73:d7:2a:
39:1a:5c:10:cc:19:4d:5d:a3:8c:f6:85:5e:e7:e5:
dc:60:ef:f9:0f:69:f0:f6:0d:0f:2e:a4:e6:bc:14:
06:ce:eb:db:87:32:ce:9f:5a:5c:20:03:c1:e1:7b:
30:c6:d3:a3:0a:27:2d:96:2a:44:5e:64:a4:7b:36:
27:6b:f6:8d:c2:a3:76:99:8a:05:cf:72:9b:f7:6c:
12:0b:c8:f3:9f:39:80:e3:44:af:c7:58:45:1a:ba:
48:10:47:e4:55:c1:61:88:ad:c1:3c:d3:28:b3:d3:
b5:18:98:24:16:53:64:b1:3c:75:4a:b8:93:07:8a:
1f:b3:c2:0f:6e:89:07:b2:7a:b7:5a:54:4b:96:ae:
35:f4:7d:c2:d0:fd:19:c3:c8:01:1d:c2:f4:5a:7c:
8c:b1:25:69:ae:65:f2:cc:60:1b:cb:fe:c2:ac:4a:
88:af:ea:d9:97:7f:a1:33:12:30:10:a6:b0:e0:f8:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F3:E2:F4:75:8A:60:58:59:A3:11:A5:FD:8A:DC:1A:22:73:19:60
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b2:54:13:72:6f:a8:4d:8a:b8:ad:91:59:00:79:85:82:6f:
d9:56:c8:1b:fa:b2:bf:28:5d:6d:75:af:8e:88:0a:97:f6:f7:
7e:0f:fe:78:0c:45:70:a4:52:76:f2:d5:2d:09:d2:b2:17:a4:
f0:fb:ef:b4:af:35:84:15:71:d4:b7:5a:21:91:a3:6b:dc:cd:
02:48:a2:84:c2:e6:2c:f6:6f:2b:d4:b7:cb:4b:71:ca:d1:00:
89:8e:46:8b:f2:9f:3a:4f:03:b8:17:43:ef:85:a0:df:97:d6:
de:38:29:35:3a:bf:5d:ac:2b:ee:c4:6f:4c:b0:05:ab:62:7f:
8e:dc:45:ec:7c:db:6f:22:fc:43:a8:d2:30:ce:ac:86:02:de:
92:b8:65:24:98:7b:53:b2:60:f7:d0:7b:9b:c7:4e:ec:6b:6b:
59:00:0a:82:e7:ba:eb:fe:03:66:7e:1d:71:f4:19:ba:48:4d:
d5:13:61:4d:1e:65:41:8c:80:37:5e:0d:45:ee:33:5b:41:52:
c2:20:1e:0b:f1:36:79:15:16:ff:62:4b:a2:f1:7b:77:a8:ec:
3d:c7:00:f4:29:51:49:6a:40:9f:69:99:c4:35:73:98:2d:40:
4f:50:73:f2:fb:4f:16:a3:8f:07:37:bb:ab:67:dd:49:9d:fe:
f7:8c:2d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VCzrUnovCAKm2ZQn51erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl
YTQ0NjMwHhcNMjYwMzI5MTYwMTI4WhcNMjYwMzMwMTYwMTI4WjAzMTEwLwYDVQQD
EyhjMGYzZTJmNDc1OGE2MDU4NTlhMzExYTVmZDhhZGMxYTIyNzMxOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqSRzhfYIAueb+fpHWOhNRmuXFtf
WsglXpfTaKh8GSbEhMX1DuHWQBbmM5Kv7/adzYk5QlpIDBv6sqys/yPVVuoiccLT
Y/Nz1yo5GlwQzBlNXaOM9oVe5+XcYO/5D2nw9g0PLqTmvBQGzuvbhzLOn1pcIAPB
4XswxtOjCictlipEXmSkezYna/aNwqN2mYoFz3Kb92wSC8jznzmA40Svx1hFGrpI
EEfkVcFhiK3BPNMos9O1GJgkFlNksTx1SriTB4ofs8IPbokHsnq3WlRLlq419H3C
0P0Zw8gBHcL0WnyMsSVprmXyzGAby/7CrEqIr+rZl3+hMxIwEKaw4PhJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDz4vR1imBYWaMRpf2K3BoicxlgMB8GA1UdIwQY
MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt
ZjJjODkyYzJkYzdkLzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk
LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarJUE3Jv
qE2KuK2RWQB5hYJv2VbIG/qyvyhdbXWvjogKl/b3fg/+eAxFcKRSdvLVLQnSshek
8PvvtK81hBVx1LdaIZGja9zNAkiihMLmLPZvK9S3y0txytEAiY5Gi/KfOk8DuBdD
74Wg35fW3jgpNTq/Xawr7sRvTLAFq2J/jtxF7HzbbyL8Q6jSMM6shgLekrhlJJh7
U7Jg99B7m8dO7GtrWQAKgue66/4DZn4dcfQZukhN1RNhTR5lQYyAN14NRe4zW0FS
wiAeC/E2eRUW/2JLovF7d6jsPccA9ClRSWpAn2mZxDVzmC1AT1Bz8vtPFqOPBze7
q2fdSZ3+94wtdA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:18 2026 by rpki-client