Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File: 8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier: Vlq0BSnL4Ya7MzY18q3x+u5jYTu6T2XXKEWWdc8S5Ts=
Subject key identifier: 24:87:D7:7E:78:7E:29:1D:A3:FF:04:3F:19:F7:7E:1B:3B:61:F3:00
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019D3A1D1146E1F24B596A125C14C18DC53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:16 +0000
Manifest this update: Sun 29 Mar 2026 15:01:16 +0000
Manifest next update: Mon 30 Mar 2026 15:01:16 +0000
Files and hashes: 1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: n9U6fM3zUdKB84zONJWkOaIt6Bk9cO/DXU2XyW7hQJ4=)
2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:11:46:e1:f2:4b:59:6a:12:5c:14:c1:8d:c5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Mar 29 15:01:16 2026 GMT
Not After : Mar 30 15:01:16 2026 GMT
Subject: CN=2487d77e787e291da3ff043f19f77e1b3b61f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:b7:bf:64:6f:99:2c:99:3d:9d:21:ef:00:
1f:55:e6:2f:36:e4:f0:c8:c5:11:b4:4f:68:24:36:
f9:10:fa:95:be:0c:26:8e:64:4b:1c:59:ea:4f:95:
0e:ef:00:c2:f6:0d:9b:37:be:4c:1a:e7:44:a3:9f:
50:db:46:80:5b:c2:42:64:83:47:ad:50:fa:6f:72:
2b:69:99:f3:2f:7a:08:a3:70:d9:02:30:7d:9e:f0:
17:04:c9:70:14:a4:b5:06:3a:9e:86:32:14:9a:0f:
c3:26:62:9f:b5:5b:03:95:d0:00:aa:6d:37:3e:74:
84:48:3a:75:e3:79:20:e5:ce:10:4e:d7:c5:01:78:
cf:da:5c:62:88:82:38:61:b4:44:c1:c7:a4:9e:7a:
e2:6e:23:56:4e:b6:f7:8f:48:e1:24:55:93:45:3c:
95:22:c0:72:b6:fb:22:ba:bd:c0:ff:91:30:ce:83:
4c:18:ae:35:48:04:60:77:28:9f:c0:77:3e:7d:74:
76:4f:b4:dc:57:41:ea:0d:91:37:f6:2a:a3:69:0c:
9c:32:3e:de:bd:27:06:a2:16:bb:00:91:27:b2:25:
00:9a:98:7c:a4:06:79:7d:3a:79:56:6c:34:43:b5:
6c:72:49:82:14:b5:1e:f5:a4:4e:42:2d:b6:22:2b:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:D7:7E:78:7E:29:1D:A3:FF:04:3F:19:F7:7E:1B:3B:61:F3:00
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:25:f0:46:83:c5:49:5d:fa:19:02:0d:ac:02:fc:74:84:
44:93:c1:c2:70:ce:8d:4c:4a:64:fe:d0:4e:5b:5a:ed:55:d0:
14:78:a0:14:0c:6c:3f:22:16:f5:f8:27:cb:d0:9e:6d:bb:76:
6a:19:95:ff:71:c8:c5:ea:75:c1:84:13:8a:99:48:e4:8e:c6:
84:06:bc:c4:ee:97:6f:b9:ae:1f:e4:5a:62:83:8e:63:61:13:
5b:a6:1a:9d:e0:be:df:4f:fe:d0:96:08:85:ec:46:e4:0c:ba:
23:9e:25:43:96:e3:06:93:0a:a8:03:df:fb:6c:c7:21:c5:fa:
e7:66:55:6d:3d:9e:53:4e:48:b5:56:a0:b8:e5:f1:fb:54:5c:
06:1a:ae:46:fe:27:87:81:62:04:48:7d:21:c7:a9:b6:7b:e8:
73:49:a3:fa:7f:9f:21:08:fd:1f:b5:de:58:64:40:80:40:a0:
ee:77:48:cc:d2:18:c6:3b:e7:4b:aa:51:fb:b3:fb:18:d4:4e:
94:e6:c8:b8:ab:bf:4b:45:31:2e:3d:e1:ce:cc:05:0b:5d:90:
c5:82:39:b4:cd:22:bb:f2:90:50:f2:b0:02:00:f1:97:ab:19:
0a:a5:d0:23:c3:75:70:5b:e9:96:9b:6b:28:df:47:05:25:a5:
54:f7:1d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HRFG4fJLWWoSXBTBjcU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjYwMzI5MTUwMTE2WhcNMjYwMzMwMTUwMTE2WjAzMTEwLwYDVQQD
EygyNDg3ZDc3ZTc4N2UyOTFkYTNmZjA0M2YxOWY3N2UxYjNiNjFmMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJO3v2RvmSyZPZ0h7wAfVeYvNuTw
yMURtE9oJDb5EPqVvgwmjmRLHFnqT5UO7wDC9g2bN75MGudEo59Q20aAW8JCZINH
rVD6b3IraZnzL3oIo3DZAjB9nvAXBMlwFKS1BjqehjIUmg/DJmKftVsDldAAqm03
PnSESDp143kg5c4QTtfFAXjP2lxiiII4YbREwceknnribiNWTrb3j0jhJFWTRTyV
IsBytvsiur3A/5EwzoNMGK41SARgdyifwHc+fXR2T7TcV0HqDZE39iqjaQycMj7e
vScGoha7AJEnsiUAmph8pAZ5fTp5Vmw0Q7VsckmCFLUe9aROQi22Iiv8QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSH1354fikdo/8EPxn3fhs7YfMAMB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt0l8EaD
xUld+hkCDawC/HSERJPBwnDOjUxKZP7QTlta7VXQFHigFAxsPyIW9fgny9Cebbt2
ahmV/3HIxep1wYQTiplI5I7GhAa8xO6Xb7muH+RaYoOOY2ETW6YaneC+30/+0JYI
hexG5Ay6I54lQ5bjBpMKqAPf+2zHIcX652ZVbT2eU05ItVaguOXx+1RcBhquRv4n
h4FiBEh9Iceptnvoc0mj+n+fIQj9H7XeWGRAgECg7ndIzNIYxjvnS6pR+7P7GNRO
lObIuKu/S0UxLj3hzswFC12QxYI5tM0iu/KQUPKwAgDxl6sZCqXQI8N1cFvplptr
KN9HBSWlVPcdeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:33 2026 by rpki-client