Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: IANKD9JtPatWXeXTqEb0Pe+qkE9jEjchHJ6n3hh/LdQ=
Subject key identifier: 08:49:20:19:D3:99:4A:CC:96:4E:8E:D7:1F:69:73:EF:2E:F4:0E:23
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 019CABA24FD4A455F281EC1FA5AF04478E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 125A
Signing time: Sun 01 Mar 2026 23:01:07 +0000
Manifest this update: Sun 01 Mar 2026 23:01:07 +0000
Manifest next update: Mon 02 Mar 2026 23:01:07 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: 8wRhaEkwb1M8MoStTz6AoahgXZ/kv4OCHVV6PsycbFs=)
2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4f:d4:a4:55:f2:81:ec:1f:a5:af:04:47:8e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Mar 1 23:01:07 2026 GMT
Not After : Mar 2 23:01:07 2026 GMT
Subject: CN=08492019d3994acc964e8ed71f6973ef2ef40e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:7c:64:46:97:cf:7b:ff:7a:44:99:9c:34:
73:7f:c2:75:6c:7a:0f:35:82:51:56:e2:4d:84:22:
16:00:df:00:0f:5c:95:55:cd:70:63:6e:67:f0:04:
71:b2:5e:71:27:38:cd:0b:67:6c:2e:cd:52:81:9e:
6c:7b:27:a3:cd:c7:85:0b:3e:e2:8a:18:01:88:24:
e9:03:48:16:1e:b9:9f:78:53:bc:43:1c:36:b9:25:
79:f5:04:a9:9e:60:91:02:b5:33:83:9c:d8:6e:46:
04:99:de:79:e2:4c:95:fe:dc:d7:72:20:d7:39:ae:
c4:58:e8:45:a3:e2:22:e1:7d:9c:c9:78:15:60:c2:
30:34:3d:76:c3:10:34:fd:d9:ad:71:61:6b:3b:d6:
31:d9:d0:82:a6:f3:40:47:93:96:b1:50:00:ed:06:
59:41:0d:b0:99:cd:5a:60:5c:c3:bd:cf:06:9e:2f:
b3:b7:17:48:93:e9:47:95:49:da:92:5f:e7:26:31:
ea:82:15:df:24:81:44:7a:d0:f7:90:6c:0a:e9:f9:
ec:6e:94:05:3c:ea:ce:e6:9c:b7:cc:9d:04:4b:e0:
c9:97:ba:02:28:59:9b:02:a2:0a:f9:79:cf:47:13:
de:c9:bc:99:be:eb:b1:3e:57:81:17:17:22:cb:6c:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:20:19:D3:99:4A:CC:96:4E:8E:D7:1F:69:73:EF:2E:F4:0E:23
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:3f:d5:5b:74:31:c6:e6:70:90:e9:81:f9:ba:8a:80:d9:
89:94:97:94:61:f7:ac:85:00:8f:25:75:85:a7:3b:7a:ba:d3:
b4:cd:b3:54:53:f0:34:97:06:41:29:e2:64:aa:d1:c1:be:6e:
72:b5:74:2f:9a:31:30:1c:44:4c:e0:2a:93:e0:1d:c9:57:16:
eb:29:eb:cd:89:7e:b2:2a:3c:cf:68:25:bd:a6:07:d5:21:b8:
c6:a3:41:f1:a9:b4:77:cd:ca:04:5a:ff:55:0e:61:29:e6:b6:
a4:e4:c6:85:dc:f7:49:72:f3:aa:b8:61:a3:16:f0:d8:f5:4b:
67:1c:20:2c:11:b9:98:77:9b:2b:0b:17:40:92:ca:fd:16:0e:
18:78:ec:58:e4:df:46:95:97:3e:96:d0:e6:9c:5e:ed:e8:f6:
5a:2d:8c:e4:be:65:7e:13:5f:3e:6a:ab:b1:24:23:6b:37:c7:
8d:4f:da:84:10:92:df:f1:e5:6b:be:43:90:c5:e4:af:a3:7f:
5d:45:2b:41:92:a7:6a:52:c7:08:03:f9:e1:83:45:0b:52:ce:
6a:ba:ab:e2:82:01:ab:14:0d:af:af:99:a0:82:48:0f:67:8d:
63:26:0e:fd:0a:08:83:bc:98:36:9b:b3:c5:b8:d1:85:9d:6a:
21:24:2f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrok/UpFXygewfpa8ER44HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjYwMzAxMjMwMTA3WhcNMjYwMzAyMjMwMTA3WjAzMTEwLwYDVQQD
EygwODQ5MjAxOWQzOTk0YWNjOTY0ZThlZDcxZjY5NzNlZjJlZjQwZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/t8ZEaXz3v/ekSZnDRzf8J1bHoP
NYJRVuJNhCIWAN8AD1yVVc1wY25n8ARxsl5xJzjNC2dsLs1SgZ5seyejzceFCz7i
ihgBiCTpA0gWHrmfeFO8Qxw2uSV59QSpnmCRArUzg5zYbkYEmd554kyV/tzXciDX
Oa7EWOhFo+Ii4X2cyXgVYMIwND12wxA0/dmtcWFrO9Yx2dCCpvNAR5OWsVAA7QZZ
QQ2wmc1aYFzDvc8Gni+ztxdIk+lHlUnakl/nJjHqghXfJIFEetD3kGwK6fnsbpQF
POrO5py3zJ0ES+DJl7oCKFmbAqIK+XnPRxPeybyZvuuxPleBFxciy2yB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhJIBnTmUrMlk6O1x9pc+8u9A4jMB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYM/1Vt0
McbmcJDpgfm6ioDZiZSXlGH3rIUAjyV1hac7errTtM2zVFPwNJcGQSniZKrRwb5u
crV0L5oxMBxETOAqk+AdyVcW6ynrzYl+sio8z2glvaYH1SG4xqNB8am0d83KBFr/
VQ5hKea2pOTGhdz3SXLzqrhhoxbw2PVLZxwgLBG5mHebKwsXQJLK/RYOGHjsWOTf
RpWXPpbQ5pxe7ej2Wi2M5L5lfhNfPmqrsSQjazfHjU/ahBCS3/Hla75DkMXkr6N/
XUUrQZKnalLHCAP54YNFC1LOarqr4oIBqxQNr6+ZoIJID2eNYyYO/QoIg7yYNpuz
xbjRhZ1qISQv3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:52 2026 by rpki-client