Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: ZUzQS+ccEaheRFPXU9eCgJ0+aEykIylO0iNVl96TJK0=
Subject key identifier: A8:A2:03:7F:F8:7B:7B:4D:D8:68:28:42:AD:5B:C0:11:E3:70:41:50
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 019CE6A4284CD6FC93278749201C3272446E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 17F8
Signing time: Fri 13 Mar 2026 10:00:43 +0000
Manifest this update: Fri 13 Mar 2026 10:00:43 +0000
Manifest next update: Sat 14 Mar 2026 10:00:43 +0000
Files and hashes: 1: YFuXlkN-MljNRVYZCMihnQz4RoU.roa (hash: ZnDgTtky6cYn6D0/F0mae8ReoG9f3tqFA2qYPiw3SoE=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: 4rk8NVcvy9ZM9EhvaQ860FFOi35HTE4EtSz0ODadoIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:28:4c:d6:fc:93:27:87:49:20:1c:32:72:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Mar 13 10:00:43 2026 GMT
Not After : Mar 14 10:00:43 2026 GMT
Subject: CN=a8a2037ff87b7b4dd8682842ad5bc011e3704150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:28:f7:34:1d:7e:e2:61:00:87:18:72:e0:
59:67:60:ea:5f:16:b9:b3:32:8f:60:8f:87:e7:3e:
f4:15:68:79:ad:c5:43:4e:ff:a6:10:41:f7:46:c9:
2a:81:1a:dd:1d:15:e5:da:10:a1:b7:ec:20:73:c5:
d7:b0:2b:eb:15:0e:f1:48:1d:ef:24:dc:cb:82:1f:
6c:8f:9d:e3:3d:72:b1:2d:2b:ba:a1:5e:06:00:d3:
f2:b4:67:b3:bc:54:34:89:25:e8:bc:0d:88:c8:18:
9e:86:d2:06:41:ec:41:ec:da:85:d5:40:2d:4d:6c:
80:33:72:eb:7f:bb:1e:b4:d2:59:3e:9e:41:57:7a:
42:d4:14:e3:51:10:ce:ca:e8:98:7c:5e:3b:ea:bf:
1e:83:3f:ea:66:b1:44:7e:29:22:d4:8d:d1:a8:9d:
25:f4:b4:a9:79:7a:c8:25:d2:8e:e7:79:0c:30:34:
58:c8:80:bc:65:6e:84:b8:bd:4d:6a:5f:a5:b3:5e:
6b:23:68:e4:ee:01:19:f5:7a:41:c4:c8:f3:1b:b0:
ed:64:ff:b3:85:06:62:23:5c:e7:ab:12:8e:60:f0:
81:17:e0:d8:63:61:83:52:13:ea:6e:3d:2f:0f:5e:
1b:0b:7c:45:00:fd:a4:16:50:b7:45:4a:f9:d0:55:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:03:7F:F8:7B:7B:4D:D8:68:28:42:AD:5B:C0:11:E3:70:41:50
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:09:8c:bb:35:b2:6b:7a:e1:84:bf:06:72:b5:98:c7:3c:
28:56:59:97:74:42:84:7b:27:6c:98:31:a3:e7:1b:6c:93:88:
a7:9d:a7:96:a8:86:cd:1a:5c:80:1f:63:2d:26:2c:87:0d:bf:
f2:3d:3b:f3:aa:5e:20:6d:e6:f8:4c:db:08:bf:0a:24:03:8e:
dc:a2:c7:28:08:22:0a:58:48:11:b2:9e:6e:f6:d5:bf:b6:79:
ea:74:e7:87:83:3b:3d:55:44:78:2d:a7:ab:b6:e1:d1:cc:33:
7b:91:79:87:bf:b1:eb:f5:99:bd:ae:da:b2:9a:d5:07:0d:e5:
9f:15:72:e9:15:07:d9:e9:c4:21:a0:f0:ac:0c:8b:6d:9e:d0:
04:ca:90:e7:15:53:13:37:2c:40:e1:52:88:74:18:6f:5d:67:
a6:37:d3:1a:81:67:96:91:42:f0:04:d9:c7:18:94:be:a0:4a:
f0:87:8a:12:75:7a:43:2e:94:1f:58:a9:a5:47:45:d5:22:1d:
e2:63:ac:0d:9e:00:d2:8e:5c:d3:ef:11:8b:26:b4:a8:cf:3e:
9e:22:91:cd:69:4a:b1:e8:a4:7a:df:25:83:b5:36:da:22:07:
02:f0:2a:56:83:a4:2a:ed:0c:22:3b:7c:43:4d:72:ed:ee:63:
92:c4:e1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpChM1vyTJ4dJIBwyckRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjYwMzEzMTAwMDQzWhcNMjYwMzE0MTAwMDQzWjAzMTEwLwYDVQQD
EyhhOGEyMDM3ZmY4N2I3YjRkZDg2ODI4NDJhZDViYzAxMWUzNzA0MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSEo9zQdfuJhAIcYcuBZZ2DqXxa5
szKPYI+H5z70FWh5rcVDTv+mEEH3RskqgRrdHRXl2hCht+wgc8XXsCvrFQ7xSB3v
JNzLgh9sj53jPXKxLSu6oV4GANPytGezvFQ0iSXovA2IyBiehtIGQexB7NqF1UAt
TWyAM3Lrf7setNJZPp5BV3pC1BTjURDOyuiYfF476r8egz/qZrFEfiki1I3RqJ0l
9LSpeXrIJdKO53kMMDRYyIC8ZW6EuL1Nal+ls15rI2jk7gEZ9XpBxMjzG7DtZP+z
hQZiI1znqxKOYPCBF+DYY2GDUhPqbj0vD14bC3xFAP2kFlC3RUr50FVoFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiiA3/4e3tN2GgoQq1bwBHjcEFQMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1cJjLs1
smt64YS/BnK1mMc8KFZZl3RChHsnbJgxo+cbbJOIp52nlqiGzRpcgB9jLSYshw2/
8j0786peIG3m+EzbCL8KJAOO3KLHKAgiClhIEbKebvbVv7Z56nTnh4M7PVVEeC2n
q7bh0cwze5F5h7+x6/WZva7asprVBw3lnxVy6RUH2enEIaDwrAyLbZ7QBMqQ5xVT
EzcsQOFSiHQYb11npjfTGoFnlpFC8ATZxxiUvqBK8IeKEnV6Qy6UH1ippUdF1SId
4mOsDZ4A0o5c0+8Riya0qM8+niKRzWlKseiket8lg7U22iIHAvAqVoOkKu0MIjt8
Q01y7e5jksThZg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:58:41 2026 by rpki-client