Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: worYGiftzf+nLRdq3KmQ4b3Drgu0pH6pp/EqJOWSlbY=
Subject key identifier: D8:75:15:8C:48:08:F8:23:93:37:BF:C0:A2:10:DE:C9:8A:93:81:5B
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 019D37F747C56DE05BAD863D95D6F2E85B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0F84
Signing time: Sun 29 Mar 2026 05:00:45 +0000
Manifest this update: Sun 29 Mar 2026 05:00:45 +0000
Manifest next update: Mon 30 Mar 2026 05:00:45 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: M2Aa0I8yk6jx7NdcE8t2Zj0HoMEU0/LF2fRnqF6abVo=)
2: LmCE4vBv57eU5WHq9fR2fqAFtRA.roa (hash: mnnr39ZVewAFhZkB5nyRtZi1LdwMDrlxlNTdJSgLeFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:47:c5:6d:e0:5b:ad:86:3d:95:d6:f2:e8:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Mar 29 05:00:45 2026 GMT
Not After : Mar 30 05:00:45 2026 GMT
Subject: CN=d875158c4808f8239337bfc0a210dec98a93815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:00:c4:59:ad:d2:46:4b:0d:cb:c6:37:99:
86:e1:04:fe:ae:1d:e2:3a:b0:98:a6:c3:61:9e:4d:
6c:0f:f3:dc:94:14:23:e8:51:37:4a:68:e4:ee:f3:
b2:29:d9:25:bb:ed:e0:9e:29:cf:bb:90:79:fa:64:
83:85:54:5f:1b:e8:62:df:34:9a:bb:51:04:cd:49:
27:a4:27:79:a3:05:2f:2d:cc:b1:f0:7c:9e:30:ff:
6a:6d:35:ef:f1:80:9c:8b:7f:36:c9:01:4d:67:92:
3f:64:03:5f:75:cf:d3:00:a4:46:00:85:8e:37:42:
30:e9:45:64:e4:43:d6:41:52:5a:36:82:84:1a:48:
d5:88:54:7b:c4:bd:bd:3b:bb:c4:f5:a8:68:8d:e8:
67:c4:64:cb:c8:14:de:6c:ee:41:b0:40:25:82:36:
c1:0a:51:f1:e9:a0:dd:ce:b2:19:d6:37:3d:49:ab:
3f:05:c4:97:5b:50:ab:85:bf:6d:8f:36:69:46:b8:
71:05:c0:68:17:41:9e:ce:a4:85:d7:34:48:b8:2e:
c6:bc:df:7f:e3:43:fd:92:23:23:dc:57:0b:0d:fe:
21:90:41:24:1b:da:b2:5c:bc:77:eb:02:5f:58:f1:
1f:fd:ba:26:55:2e:89:ef:fb:a3:2e:a3:22:1c:42:
49:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:15:8C:48:08:F8:23:93:37:BF:C0:A2:10:DE:C9:8A:93:81:5B
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:52:51:58:c3:45:1a:00:20:c9:b0:9a:a3:31:b3:ac:df:
f6:38:cf:55:78:e0:c9:cf:a7:b3:be:07:25:fa:74:9c:88:80:
b1:cc:b1:da:36:b5:d5:85:a2:58:0e:e9:05:28:19:9c:e7:1b:
ae:f9:a0:ef:3a:8d:4b:f2:45:cc:78:4c:7d:c4:24:15:90:64:
39:2b:8e:16:8e:f8:5a:81:05:90:66:c5:03:b1:82:8e:1a:5c:
ac:11:8d:55:a6:7f:10:33:39:8f:c5:8c:9e:6e:9a:dc:d4:99:
88:e9:ce:da:aa:ad:a2:a5:80:10:c6:b8:d3:32:54:96:5f:01:
e7:28:b7:b0:36:cc:40:c9:a8:af:61:1f:75:94:3a:ee:9d:e5:
7b:b4:c7:30:d3:3b:60:62:cc:8c:8a:3b:fc:34:ff:ac:12:27:
7a:0e:35:bb:ce:d9:f2:56:1b:22:64:eb:b6:5f:b3:0c:97:f3:
6f:c2:40:b8:48:23:2a:70:f5:24:8c:16:66:45:49:22:93:b2:
72:ba:cf:0f:f9:ff:41:e7:d5:11:8a:4b:61:b2:aa:96:c0:4d:
d4:a1:1c:51:09:41:24:e3:0e:2f:50:80:68:72:7c:80:09:51:
23:69:81:78:98:1a:1b:2f:bd:3e:53:bb:16:d7:6a:a4:b8:e8:
8c:b8:48:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390fFbeBbrYY9ldby6FsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh
MTJkODMwHhcNMjYwMzI5MDUwMDQ1WhcNMjYwMzMwMDUwMDQ1WjAzMTEwLwYDVQQD
EyhkODc1MTU4YzQ4MDhmODIzOTMzN2JmYzBhMjEwZGVjOThhOTM4MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpYAxFmt0kZLDcvGN5mG4QT+rh3i
OrCYpsNhnk1sD/PclBQj6FE3Smjk7vOyKdklu+3gninPu5B5+mSDhVRfG+hi3zSa
u1EEzUknpCd5owUvLcyx8HyeMP9qbTXv8YCci382yQFNZ5I/ZANfdc/TAKRGAIWO
N0Iw6UVk5EPWQVJaNoKEGkjViFR7xL29O7vE9ahojehnxGTLyBTebO5BsEAlgjbB
ClHx6aDdzrIZ1jc9Sas/BcSXW1Crhb9tjzZpRrhxBcBoF0GezqSF1zRIuC7GvN9/
40P9kiMj3FcLDf4hkEEkG9qyXLx36wJfWPEf/bomVS6J7/ujLqMiHEJJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNh1FYxICPgjkze/wKIQ3smKk4FbMB8GA1UdIwQY
MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt
Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx
LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMRSUVjD
RRoAIMmwmqMxs6zf9jjPVXjgyc+ns74HJfp0nIiAscyx2ja11YWiWA7pBSgZnOcb
rvmg7zqNS/JFzHhMfcQkFZBkOSuOFo74WoEFkGbFA7GCjhpcrBGNVaZ/EDM5j8WM
nm6a3NSZiOnO2qqtoqWAEMa40zJUll8B5yi3sDbMQMmor2EfdZQ67p3le7THMNM7
YGLMjIo7/DT/rBIneg41u87Z8lYbImTrtl+zDJfzb8JAuEgjKnD1JIwWZkVJIpOy
crrPD/n/QefVEYpLYbKqlsBN1KEcUQlBJOMOL1CAaHJ8gAlRI2mBeJgaGy+9PlO7
FtdqpLjojLhI3w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:15 2026 by rpki-client