Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: D1sG+VrDGCvwIeXo53VNqkLy0GbUzEw00m8CDOlDpmI=
Subject key identifier: 8A:B5:B2:7F:B1:C3:3D:1A:9C:39:0F:BD:04:A9:1E:E7:D6:7C:7D:23
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 019CAC4704547F8DF56662185DC1F836881C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0F3F
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=)
2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: NI5eA74reD7RVRP9fOp9LneLAapnQDvDFkgr2lCZaMk=)
3: 8aaF_ED1YXjZ6qQ3NJHXz5B9BUY.roa (hash: mTseP7q6/nR/9V/iIGk93m++hqbKLlMKnztgon+RN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:04:54:7f:8d:f5:66:62:18:5d:c1:f8:36:88:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=8ab5b27fb1c33d1a9c390fbd04a91ee7d67c7d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:1a:7a:9d:91:7f:06:d1:5c:ef:ba:b3:74:
9e:7b:91:ce:4d:36:0b:4d:51:6c:11:e5:3e:d4:cf:
69:85:63:62:6e:04:22:b2:68:f0:87:56:3a:67:4b:
89:4a:e1:34:5d:0a:09:63:73:4b:93:0b:c3:36:c9:
c2:2b:e5:57:80:04:71:5f:87:e9:13:66:52:6e:c9:
66:31:e0:b4:d5:39:9e:f9:7d:2d:21:bf:66:be:3e:
88:83:a6:a4:10:49:a5:f4:32:5a:f3:b1:6b:2a:b3:
68:b6:f5:7c:07:b4:5f:f4:1c:b6:50:e5:d8:f1:ee:
a6:6c:30:b3:15:ac:e0:10:13:20:cd:f9:0b:9a:6b:
d2:f2:7b:1e:28:7c:02:8f:1e:64:c4:f3:79:ab:a8:
37:2b:da:51:8e:38:8c:62:55:7f:e2:de:5c:ca:c8:
11:9f:29:f3:13:bc:3e:79:0b:a2:f9:32:59:49:0a:
60:71:dd:72:f3:8a:81:24:9a:04:5b:ec:a9:d3:00:
69:5a:27:3a:80:c8:84:93:eb:aa:ec:d8:9e:29:be:
22:0e:ac:c6:4e:8b:2b:67:ab:99:27:e3:9a:0d:d0:
62:f9:72:73:fa:2e:07:29:b9:05:2f:9c:98:fb:76:
a6:2a:d4:a6:b9:1e:c9:1f:4d:f5:9e:21:03:47:84:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:B2:7F:B1:C3:3D:1A:9C:39:0F:BD:04:A9:1E:E7:D6:7C:7D:23
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:39:c6:80:e5:be:86:ad:21:fe:13:5d:f1:29:3e:99:e9:00:
a9:fa:58:55:5a:a3:4e:fa:55:71:d0:60:ff:f0:14:63:3d:f5:
a4:6e:47:10:e2:01:f6:8c:be:7c:ad:d1:7f:8b:c2:5f:22:35:
3e:d4:a7:e7:e1:f4:9d:ac:45:6a:92:1d:3d:27:f5:f0:b9:a9:
70:84:da:01:fc:4b:93:db:f5:f6:5b:6b:87:2f:f2:6a:2e:4e:
d4:9c:3a:1c:1a:67:38:63:7e:08:03:f8:32:3a:3d:bf:23:12:
ee:9b:16:18:0a:3a:12:fe:9f:60:0b:4b:ae:e7:82:a2:a1:00:
cf:9c:c9:cd:42:4b:60:0f:8c:35:a7:eb:fa:18:42:dc:9b:d1:
45:9e:41:d6:5a:b4:7d:9c:b0:af:77:58:b5:21:58:a3:aa:8e:
69:e9:a6:48:2c:b4:40:8c:65:e8:4c:c4:bd:47:71:58:48:9d:
34:69:a1:5b:18:7f:3f:87:eb:5a:43:f6:7c:ca:d4:2f:e4:82:
a3:d5:b7:24:34:4c:b8:56:84:07:59:d0:36:18:94:99:19:03:
46:18:7b:20:ce:82:9c:a7:1d:87:2d:fb:d8:82:19:ef:1e:c4:
71:ba:ad:35:03:e5:17:0a:77:04:57:a4:fc:dd:a3:22:b0:db:
65:ca:5b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwRUf431ZmIYXcH4NogcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjYwMzAyMDIwMTAxWhcNMjYwMzAzMDIwMTAxWjAzMTEwLwYDVQQD
Eyg4YWI1YjI3ZmIxYzMzZDFhOWMzOTBmYmQwNGE5MWVlN2Q2N2M3ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88Maep2RfwbRXO+6s3See5HOTTYL
TVFsEeU+1M9phWNibgQismjwh1Y6Z0uJSuE0XQoJY3NLkwvDNsnCK+VXgARxX4fp
E2ZSbslmMeC01Tme+X0tIb9mvj6Ig6akEEml9DJa87FrKrNotvV8B7Rf9By2UOXY
8e6mbDCzFazgEBMgzfkLmmvS8nseKHwCjx5kxPN5q6g3K9pRjjiMYlV/4t5cysgR
nynzE7w+eQui+TJZSQpgcd1y84qBJJoEW+yp0wBpWic6gMiEk+uq7NieKb4iDqzG
TosrZ6uZJ+OaDdBi+XJz+i4HKbkFL5yY+3amKtSmuR7JH031niEDR4QEVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq1sn+xwz0anDkPvQSpHufWfH0jMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjnGgOW+
hq0h/hNd8Sk+mekAqfpYVVqjTvpVcdBg//AUYz31pG5HEOIB9oy+fK3Rf4vCXyI1
PtSn5+H0naxFapIdPSf18LmpcITaAfxLk9v19ltrhy/yai5O1Jw6HBpnOGN+CAP4
Mjo9vyMS7psWGAo6Ev6fYAtLrueCoqEAz5zJzUJLYA+MNafr+hhC3JvRRZ5B1lq0
fZywr3dYtSFYo6qOaemmSCy0QIxl6EzEvUdxWEidNGmhWxh/P4frWkP2fMrUL+SC
o9W3JDRMuFaEB1nQNhiUmRkDRhh7IM6CnKcdhy372IIZ7x7EcbqtNQPlFwp3BFek
/N2jIrDbZcpb/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:04 2026 by rpki-client