Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 8m0XcIrTgOBZmwU+4sKJN4dNTugM41z3PqUzs4924Ho=
Subject key identifier: 64:5C:34:A2:AC:C2:38:EC:5F:14:B1:A3:A6:FA:C2:27:F5:00:84:AF
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019CAA8F9289A9E97FA668AF03AAC1007D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0C9F
Signing time: Sun 01 Mar 2026 18:01:01 +0000
Manifest this update: Sun 01 Mar 2026 18:01:01 +0000
Manifest next update: Mon 02 Mar 2026 18:01:01 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 5x/fL8Za2UV3Va8wk1ti57XuXgT3yP8HhjcIv2iLRlU=)
2: ke5BBmP9uJ5If3ItewQloGu8EQA.roa (hash: sg4mup0G5eaNuuse6GfgbbBnUv1YkDhld8yTzOiPKE4=)
3: wmiyGteEO918b1PMxNCpgfoVaDs.roa (hash: ZPhGNaDbDb+DbDzUXj55AFIPAg+DVhgaYwBguflVQCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:92:89:a9:e9:7f:a6:68:af:03:aa:c1:00:7d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Mar 1 18:01:01 2026 GMT
Not After : Mar 2 18:01:01 2026 GMT
Subject: CN=645c34a2acc238ec5f14b1a3a6fac227f50084af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:72:b4:b4:16:9d:13:ed:a2:4a:39:82:ad:
15:5f:99:63:2a:b9:f6:80:9a:be:43:8b:6e:73:c2:
9d:85:a1:60:9a:93:7a:f2:de:12:b0:05:7c:32:97:
d1:27:ef:95:5e:11:2d:20:e9:ba:19:08:1f:35:c3:
b1:47:a1:82:c7:64:58:dd:11:60:1a:0a:82:10:a2:
60:90:72:0c:61:3b:fe:ce:10:c6:23:c3:d2:13:9e:
c6:03:5c:c9:a1:2b:59:d4:70:9a:4e:e2:d5:a3:48:
3a:3a:91:41:e6:e4:9d:47:e6:5a:7a:60:74:3e:ad:
1e:23:73:5e:e3:aa:85:5c:8c:bc:74:8d:1e:01:b4:
87:64:5e:dc:43:e3:64:70:ab:0f:85:1d:1c:8c:80:
79:29:54:7f:59:d5:08:4b:66:d0:63:5a:b7:de:bb:
ce:9d:83:88:bf:ee:22:ec:95:34:13:ac:43:18:93:
74:04:bf:fb:4a:3c:ed:c1:5d:ca:3f:f7:84:be:03:
c4:ba:11:61:c6:af:fa:13:9b:18:34:58:0d:f6:64:
9c:3c:74:39:c4:91:09:6b:cd:45:15:7b:9e:fe:de:
b6:5f:63:5a:14:52:b8:45:60:07:41:b8:51:1f:bb:
e0:0a:f2:be:bb:79:ad:40:6a:4c:d3:38:30:e0:b0:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:34:A2:AC:C2:38:EC:5F:14:B1:A3:A6:FA:C2:27:F5:00:84:AF
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f1:5e:dc:0d:78:2c:56:43:8b:51:a0:a6:31:18:75:67:8a:
1e:b0:e1:0b:c1:8d:52:7f:f3:5b:ed:cb:70:75:37:d6:d3:d3:
90:99:12:2b:48:60:8f:f5:3c:2b:bb:9a:47:ae:b0:6c:da:bf:
78:8c:ac:ef:2d:93:f7:e7:b9:dd:db:71:7d:c2:34:45:9d:7e:
ea:d6:fb:a0:0a:48:41:64:6a:64:21:d4:b6:db:a7:ba:d4:74:
c0:d7:64:0c:db:08:99:cd:e5:26:63:16:f3:4a:75:4c:a4:4a:
df:2b:36:08:be:1b:80:f4:f9:71:c1:68:f5:b8:34:5d:57:d5:
33:54:e2:70:f9:6e:7f:10:68:09:ed:ef:f7:e5:96:4f:23:2c:
38:2e:f8:55:9a:9b:40:94:f3:d3:5e:f2:db:75:6c:f6:85:0f:
06:85:30:e4:a5:86:42:f6:16:8d:c6:b4:50:67:a1:a2:b2:c4:
5b:f0:2d:e6:89:67:61:c0:bd:0a:c4:e1:72:7e:a2:64:32:dd:
c5:ae:99:d5:ca:a3:d7:db:bc:da:22:9a:31:e6:6c:82:6c:a4:
3a:89:0b:d6:63:58:2b:98:22:8a:50:8e:d7:24:6a:25:84:6b:
ef:1b:e8:1f:c9:18:f3:a6:f2:3d:3c:16:77:5a:2f:4c:b3:52:
3b:70:c2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj5KJqel/pmivA6rBAH02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjYwMzAxMTgwMTAxWhcNMjYwMzAyMTgwMTAxWjAzMTEwLwYDVQQD
Eyg2NDVjMzRhMmFjYzIzOGVjNWYxNGIxYTNhNmZhYzIyN2Y1MDA4NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEtytLQWnRPtoko5gq0VX5ljKrn2
gJq+Q4tuc8KdhaFgmpN68t4SsAV8MpfRJ++VXhEtIOm6GQgfNcOxR6GCx2RY3RFg
GgqCEKJgkHIMYTv+zhDGI8PSE57GA1zJoStZ1HCaTuLVo0g6OpFB5uSdR+ZaemB0
Pq0eI3Ne46qFXIy8dI0eAbSHZF7cQ+NkcKsPhR0cjIB5KVR/WdUIS2bQY1q33rvO
nYOIv+4i7JU0E6xDGJN0BL/7SjztwV3KP/eEvgPEuhFhxq/6E5sYNFgN9mScPHQ5
xJEJa81FFXue/t62X2NaFFK4RWAHQbhRH7vgCvK+u3mtQGpM0zgw4LAGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRcNKKswjjsXxSxo6b6wif1AISvMB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/Fe3A14
LFZDi1GgpjEYdWeKHrDhC8GNUn/zW+3LcHU31tPTkJkSK0hgj/U8K7uaR66wbNq/
eIys7y2T9+e53dtxfcI0RZ1+6tb7oApIQWRqZCHUttunutR0wNdkDNsImc3lJmMW
80p1TKRK3ys2CL4bgPT5ccFo9bg0XVfVM1TicPlufxBoCe3v9+WWTyMsOC74VZqb
QJTz017y23Vs9oUPBoUw5KWGQvYWjca0UGehorLEW/At5olnYcC9CsThcn6iZDLd
xa6Z1cqj19u82iKaMeZsgmykOokL1mNYK5giilCO1yRqJYRr7xvoH8kY86byPTwW
d1ovTLNSO3DCow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:06 2026 by rpki-client