Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: EiPnaOICZzDeaKntWZt5BhylayQtNWrRTF+b1PV81GE=
Subject key identifier: 69:81:E5:3A:42:AE:2A:D9:41:0C:62:D0:5E:31:05:4D:CB:60:29:76
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 019CABD8EFD8D15186F9E1395584E5D7ACFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 07DE
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: /e9HlmIOtyeRDPpGTQznkk3bDwfacrisrirYABO8AYU=)
2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ef:d8:d1:51:86:f9:e1:39:55:84:e5:d7:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=6981e53a42ae2ad9410c62d05e31054dcb602976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:56:60:b6:06:71:b5:30:94:51:f4:e7:f3:
90:d9:86:88:71:29:35:04:f2:e9:d1:97:a7:55:04:
73:7e:14:af:74:11:e6:2d:fb:b2:5d:b0:af:8c:89:
12:81:60:7f:64:91:ab:c4:4c:33:a3:3f:7d:83:83:
ce:1f:26:dd:81:ef:39:40:4f:88:40:a9:cb:06:ec:
e4:c2:00:22:ad:d0:2f:21:b1:4c:20:b6:fc:e0:0f:
66:1b:0f:c2:f0:2c:6e:42:75:8e:71:7d:a4:49:4b:
d7:0d:cc:f0:2d:60:2f:39:6c:ee:58:be:38:69:44:
c4:f8:25:c3:0b:36:e2:82:49:66:fd:7a:9f:82:0c:
ea:c6:51:89:f4:95:d4:71:fa:28:d6:a4:dd:99:d9:
7b:28:70:4c:f5:7c:c2:cf:7e:c6:ff:c9:eb:46:26:
6a:d2:85:a0:9d:c8:d3:00:7a:99:6c:81:0f:bf:57:
fb:e0:b9:96:82:0a:86:15:fd:0f:eb:92:38:a9:41:
b3:c3:3c:67:f1:75:69:d3:da:52:bd:d9:05:a1:13:
cc:1b:d9:6b:e4:a0:a5:47:74:88:23:3b:0e:9d:f2:
13:84:09:89:d9:a4:18:f0:0e:e8:f2:c1:5b:fe:ef:
27:5b:0b:5c:7f:58:60:16:72:9b:b6:7c:d4:be:43:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:E5:3A:42:AE:2A:D9:41:0C:62:D0:5E:31:05:4D:CB:60:29:76
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:58:bd:6a:1d:af:0d:e2:6a:8c:5d:5c:2b:a5:40:31:1d:
67:d2:06:d2:41:cd:12:94:b5:4e:07:bf:f4:9a:f3:99:ce:e0:
62:47:d9:39:88:28:b1:bc:45:da:99:59:c0:1e:dc:3d:c3:3c:
42:8f:27:f3:9a:9a:1f:48:3d:1c:55:b1:d2:91:9a:09:78:ac:
82:d4:a2:91:06:93:33:49:2b:a7:0b:24:fd:c7:15:ab:ae:c5:
71:31:bd:39:dd:ed:63:f6:6a:d5:48:d4:b7:4e:57:4b:1d:1a:
59:47:e5:f4:fc:31:f6:7b:c6:87:52:82:cf:47:e8:60:88:0f:
ad:09:05:d8:f4:94:d7:3a:d1:f0:ed:51:6d:61:73:39:1f:cf:
20:f2:85:15:bc:ba:8c:8f:14:6c:4f:0e:70:f5:e4:d0:4d:c8:
12:fa:55:31:32:a9:36:11:7b:44:5c:4d:4d:8f:ba:dc:68:c4:
e0:67:24:61:9f:2e:03:dc:36:34:b9:95:91:e9:f3:9a:cc:ba:
55:fd:5e:db:09:ef:24:57:03:73:e8:90:6e:65:1f:88:9b:bd:
13:e6:cb:a0:c6:ef:e8:28:90:22:72:dd:50:65:f6:7e:98:6c:
4a:8e:38:e5:ca:e0:09:be:b6:c9:42:36:d6:98:0b:30:39:cf:
63:e7:88:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2O/Y0VGG+eE5VYTl16z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3
OTM4ZDcwHhcNMjYwMzAyMDAwMDQ2WhcNMjYwMzAzMDAwMDQ2WjAzMTEwLwYDVQQD
Eyg2OTgxZTUzYTQyYWUyYWQ5NDEwYzYyZDA1ZTMxMDU0ZGNiNjAyOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwNWYLYGcbUwlFH05/OQ2YaIcSk1
BPLp0ZenVQRzfhSvdBHmLfuyXbCvjIkSgWB/ZJGrxEwzoz99g4POHybdge85QE+I
QKnLBuzkwgAirdAvIbFMILb84A9mGw/C8CxuQnWOcX2kSUvXDczwLWAvOWzuWL44
aUTE+CXDCzbigklm/XqfggzqxlGJ9JXUcfoo1qTdmdl7KHBM9XzCz37G/8nrRiZq
0oWgncjTAHqZbIEPv1f74LmWggqGFf0P65I4qUGzwzxn8XVp09pSvdkFoRPMG9lr
5KClR3SIIzsOnfIThAmJ2aQY8A7o8sFb/u8nWwtcf1hgFnKbtnzUvkPQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmB5TpCrirZQQxi0F4xBU3LYCl2MB8GA1UdIwQY
MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt
MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2
LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBhYvWod
rw3iaoxdXCulQDEdZ9IG0kHNEpS1Tge/9Jrzmc7gYkfZOYgosbxF2plZwB7cPcM8
Qo8n85qaH0g9HFWx0pGaCXisgtSikQaTM0krpwsk/ccVq67FcTG9Od3tY/Zq1UjU
t05XSx0aWUfl9Pwx9nvGh1KCz0foYIgPrQkF2PSU1zrR8O1RbWFzOR/PIPKFFby6
jI8UbE8OcPXk0E3IEvpVMTKpNhF7RFxNTY+63GjE4GckYZ8uA9w2NLmVkenzmsy6
Vf1e2wnvJFcDc+iQbmUfiJu9E+bLoMbv6CiQInLdUGX2fphsSo445crgCb62yUI2
1pgLMDnPY+eILA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:45 2026 by rpki-client