Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: u15iy+1YSS9W2l/hzr+dy6HUoEA0Q2mB37S92AGGFCM=
Subject key identifier: 5E:06:08:C5:9A:0F:00:3E:72:20:E7:80:88:C5:71:AF:2E:E1:E5:6A
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019D37F6F6397EC53EB62A63951FB50002A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0A01
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: cgBxccCscgg7ciUNJNxZ8h2gNG/Zr4FXF+Wr7suGXZE=)
2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f6:39:7e:c5:3e:b6:2a:63:95:1f:b5:00:02:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=5e0608c59a0f003e7220e78088c571af2ee1e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:05:90:cc:3c:be:86:13:d7:59:17:64:99:
2e:5d:ef:3d:4e:0b:ad:13:40:cb:38:ff:ba:1e:8f:
bd:51:25:b7:d9:26:aa:ca:a1:37:eb:b4:d2:90:ab:
57:3e:d2:b0:9a:38:58:c9:74:f8:55:4d:a9:39:fe:
5f:4c:6a:01:ff:33:29:40:28:d3:1e:c6:ec:87:a1:
d9:f1:aa:01:34:14:f9:f2:0b:f1:9b:ac:8e:39:6a:
7f:6c:f8:a5:43:5f:c5:70:5d:83:2a:bf:c8:ac:a3:
87:d0:07:8b:03:6e:ae:57:7f:a2:41:21:56:35:5f:
f0:8e:c9:59:98:9b:45:de:32:08:e8:aa:35:b9:3f:
2c:e6:ca:d0:c7:c8:68:91:cc:17:78:91:d4:1d:e7:
72:ba:af:b3:59:78:6e:f2:ba:d0:62:4e:7f:e2:20:
bf:2b:2a:86:3a:6a:a5:d3:4f:63:8f:9c:8a:1b:0b:
97:19:1e:c6:d5:7b:e1:09:ea:df:8e:26:96:43:04:
de:e7:2b:69:d4:64:e1:f6:74:48:6d:e0:72:62:58:
a5:10:fc:15:d9:e7:9d:fb:23:34:f2:55:19:57:fe:
cc:d9:3f:1a:03:4f:9e:f2:10:92:5e:54:87:7e:f7:
1d:75:6f:5a:52:39:82:58:9c:0d:49:64:d9:02:5e:
70:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:08:C5:9A:0F:00:3E:72:20:E7:80:88:C5:71:AF:2E:E1:E5:6A
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d6:25:2f:5a:7c:b4:73:6f:f5:3e:53:a4:c6:ec:48:04:ce:
0a:c1:46:02:e4:29:bd:8e:ca:95:1c:0b:0d:f6:93:24:2e:46:
b3:42:d7:5c:fd:1e:01:b8:28:b6:24:0b:de:c4:a1:81:b3:9a:
aa:b3:89:c8:9e:4c:64:31:e3:e2:af:fc:0d:d7:b6:ec:a7:4a:
50:16:89:6c:53:7d:23:53:bd:0d:17:5e:ef:ff:87:78:1b:64:
f1:0f:d2:7e:69:59:00:33:da:ce:2f:d3:cf:a8:6f:14:47:4b:
3c:29:ff:cf:01:15:28:52:98:23:d9:c3:4f:d4:83:91:6f:82:
88:14:ad:c1:d3:b0:4b:fa:21:74:63:0c:60:52:a1:5f:1b:18:
4f:78:f5:40:cc:78:ec:28:68:37:c0:28:c9:a4:58:32:63:ae:
bf:9b:87:0d:fa:a3:9a:0c:02:dd:dd:40:04:c2:cf:39:2d:01:
c7:42:9b:66:97:ab:85:de:d7:f7:10:8b:3f:4f:7e:db:9f:8e:
2d:bc:92:84:32:6d:29:6c:46:7e:bc:6d:31:68:66:f0:64:48:
ac:06:6e:66:55:f9:c7:da:b1:d8:ad:84:d9:cf:0c:8b:4b:0e:
ed:81:97:c8:5d:73:47:09:cd:2b:e6:65:c5:fa:89:01:d3:e4:
3b:0c:e3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vY5fsU+tipjlR+1AAKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx
ZjU5MjYwHhcNMjYwMzI5MDUwMDI0WhcNMjYwMzMwMDUwMDI0WjAzMTEwLwYDVQQD
Eyg1ZTA2MDhjNTlhMGYwMDNlNzIyMGU3ODA4OGM1NzFhZjJlZTFlNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rcFkMw8voYT11kXZJkuXe89Tgut
E0DLOP+6Ho+9USW32SaqyqE367TSkKtXPtKwmjhYyXT4VU2pOf5fTGoB/zMpQCjT
Hsbsh6HZ8aoBNBT58gvxm6yOOWp/bPilQ1/FcF2DKr/IrKOH0AeLA26uV3+iQSFW
NV/wjslZmJtF3jII6Ko1uT8s5srQx8hokcwXeJHUHedyuq+zWXhu8rrQYk5/4iC/
KyqGOmql009jj5yKGwuXGR7G1XvhCerfjiaWQwTe5ytp1GTh9nRIbeByYlilEPwV
2eed+yM08lUZV/7M2T8aA0+e8hCSXlSHfvcddW9aUjmCWJwNSWTZAl5wJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4GCMWaDwA+ciDngIjFca8u4eVqMB8GA1UdIwQY
MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct
YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh
LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNYlL1p8
tHNv9T5TpMbsSATOCsFGAuQpvY7KlRwLDfaTJC5Gs0LXXP0eAbgotiQL3sShgbOa
qrOJyJ5MZDHj4q/8Dde27KdKUBaJbFN9I1O9DRde7/+HeBtk8Q/SfmlZADPazi/T
z6hvFEdLPCn/zwEVKFKYI9nDT9SDkW+CiBStwdOwS/ohdGMMYFKhXxsYT3j1QMx4
7ChoN8AoyaRYMmOuv5uHDfqjmgwC3d1ABMLPOS0Bx0KbZperhd7X9xCLP09+25+O
LbyShDJtKWxGfrxtMWhm8GRIrAZuZlX5x9qx2K2E2c8Mi0sO7YGXyF1zRwnNK+Zl
xfqJAdPkOwzj0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:40 2026 by rpki-client