Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: gcxm+IOTpGwV8pJ0hhWEHL2ZSNUsUy6i0wvzqT3f21U=
Subject key identifier: 39:46:79:99:0E:58:A2:AA:9A:9A:3F:48:76:BB:B0:01:D8:9A:EB:C3
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 019D3940DAB5CC2858DBDF331AF41EEC16ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 083B
Signing time: Sun 29 Mar 2026 11:00:44 +0000
Manifest this update: Sun 29 Mar 2026 11:00:44 +0000
Manifest next update: Mon 30 Mar 2026 11:00:44 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: 2DTP2UrUt8rRDVU1dPNOGIb/cV5Jt+BJIaIpaY5D0ew=)
2: wiI82FzKN8vwB6F4isg7_RvCxHg.roa (hash: riiq1OTIvoc7oa6B3EfI2fFnF1gD9CxZmEkDu3QsQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:da:b5:cc:28:58:db:df:33:1a:f4:1e:ec:16:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Mar 29 11:00:44 2026 GMT
Not After : Mar 30 11:00:44 2026 GMT
Subject: CN=394679990e58a2aa9a9a3f4876bbb001d89aebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:c9:26:be:ae:74:f3:d0:9d:42:6c:49:e4:
9c:72:e8:9d:79:28:69:75:89:8f:6b:a7:00:c3:d8:
46:ae:b9:07:e9:91:94:c9:e8:26:48:aa:79:1d:bc:
97:82:d4:d3:4d:58:af:d9:39:ef:5a:92:ee:80:6e:
21:25:ae:ba:0f:a8:40:de:75:36:2e:af:00:9f:5b:
16:82:36:99:41:7b:4a:f3:37:dc:1a:62:c2:f8:93:
1f:03:1d:7a:d1:ca:f0:23:c3:e7:5c:1e:6b:cf:5b:
09:d3:15:e9:de:53:1c:95:fe:f1:08:51:1b:48:43:
d6:9e:bd:2b:f2:98:a1:51:56:bd:be:ad:b9:c2:63:
4d:52:e9:98:36:0e:bc:6e:d6:38:d8:68:75:92:52:
80:8a:40:19:d7:1d:25:17:08:cb:d0:13:e8:98:57:
99:4a:f8:5d:5b:92:96:50:70:d9:01:fb:22:54:4c:
e9:d6:fd:68:96:96:d2:cb:cc:be:f6:2c:69:db:05:
15:90:f5:dc:4b:ca:da:8d:e2:a7:0f:48:f8:24:e7:
4d:a9:ca:64:d0:6a:a7:ac:ec:f0:2b:b3:dc:30:60:
61:ed:fd:b3:73:b1:be:e4:f0:23:87:7a:5d:94:82:
9f:93:17:4f:d5:ce:b2:b5:d0:4a:33:98:50:35:2d:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:79:99:0E:58:A2:AA:9A:9A:3F:48:76:BB:B0:01:D8:9A:EB:C3
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:27:67:7b:14:ad:4f:3f:06:cd:82:8d:73:ae:1a:55:75:
82:38:79:ed:be:11:8b:df:2c:e9:5e:d8:fc:e2:78:d4:88:d7:
63:6b:5e:ad:e3:92:23:da:96:c1:00:59:02:83:59:7c:cf:16:
ab:7f:87:a3:ee:68:b7:7d:30:af:63:cd:a3:c1:bb:17:ca:96:
c7:0d:b4:5c:e5:4d:14:c9:63:c6:95:a9:ae:e9:5e:ca:b2:75:
97:76:33:6e:0f:cc:7f:52:ac:eb:c0:97:4e:06:55:16:bb:74:
d2:a2:1e:01:d6:43:f1:f5:f2:97:6e:72:e4:fe:5f:85:f5:77:
5e:a3:1e:4e:ef:84:48:99:6b:32:4f:99:bf:0f:84:83:8f:7c:
b0:b3:9f:15:68:52:46:ff:76:63:89:22:ca:7c:27:f6:35:5b:
9c:32:24:e1:32:b6:d4:a4:00:5a:c1:2d:90:eb:c9:07:b0:ea:
13:0e:1a:aa:90:f5:a4:0d:7c:30:ed:a2:5e:c2:63:f7:68:b1:
18:16:58:1b:7d:89:ab:fc:a8:71:9f:1f:c3:5a:9b:1b:37:93:
b4:d7:d3:f2:18:d2:19:39:ec:f1:5a:80:2d:4f:a7:56:de:1d:
3a:e4:47:5f:f3:a3:ca:30:f9:d2:72:13:62:44:df:72:6f:4a:
92:58:77:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNq1zChY298zGvQe7BbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm
ODRkZDMwHhcNMjYwMzI5MTEwMDQ0WhcNMjYwMzMwMTEwMDQ0WjAzMTEwLwYDVQQD
EygzOTQ2Nzk5OTBlNThhMmFhOWE5YTNmNDg3NmJiYjAwMWQ4OWFlYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37rJJr6udPPQnUJsSeSccuideShp
dYmPa6cAw9hGrrkH6ZGUyegmSKp5HbyXgtTTTViv2TnvWpLugG4hJa66D6hA3nU2
Lq8An1sWgjaZQXtK8zfcGmLC+JMfAx160crwI8PnXB5rz1sJ0xXp3lMclf7xCFEb
SEPWnr0r8pihUVa9vq25wmNNUumYNg68btY42Gh1klKAikAZ1x0lFwjL0BPomFeZ
SvhdW5KWUHDZAfsiVEzp1v1olpbSy8y+9ixp2wUVkPXcS8rajeKnD0j4JOdNqcpk
0GqnrOzwK7PcMGBh7f2zc7G+5PAjh3pdlIKfkxdP1c6ytdBKM5hQNS0BPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlGeZkOWKKqmpo/SHa7sAHYmuvDMB8GA1UdIwQY
MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt
NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0
LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJUnZ3sU
rU8/Bs2CjXOuGlV1gjh57b4Ri98s6V7Y/OJ41IjXY2tereOSI9qWwQBZAoNZfM8W
q3+Ho+5ot30wr2PNo8G7F8qWxw20XOVNFMljxpWpruleyrJ1l3Yzbg/Mf1Ks68CX
TgZVFrt00qIeAdZD8fXyl25y5P5fhfV3XqMeTu+ESJlrMk+Zvw+Eg498sLOfFWhS
Rv92Y4kiynwn9jVbnDIk4TK21KQAWsEtkOvJB7DqEw4aqpD1pA18MO2iXsJj92ix
GBZYG32Jq/yocZ8fw1qbGzeTtNfT8hjSGTns8VqALU+nVt4dOuRHX/OjyjD50nIT
YkTfcm9Kklh3Mw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:14 2026 by rpki-client