Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: RXktVCyw6OZok89+NC23EszET1r30I3JqvqcBe4/VkU=
Subject key identifier: 69:B9:F0:61:A9:92:8E:23:14:0C:97:95:5A:1A:E5:AF:C7:09:EB:B9
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019CAF48B2F77DB2A67570CDDB3BBC6B4D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 157E
Signing time: Mon 02 Mar 2026 16:01:43 +0000
Manifest this update: Mon 02 Mar 2026 16:01:43 +0000
Manifest next update: Tue 03 Mar 2026 16:01:43 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: DhkNYAQN22C6itdrN+OzUuNWtkYJ9xj8REtqJ9OkRUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:b2:f7:7d:b2:a6:75:70:cd:db:3b:bc:6b:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Mar 2 16:01:43 2026 GMT
Not After : Mar 3 16:01:43 2026 GMT
Subject: CN=69b9f061a9928e23140c97955a1ae5afc709ebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:df:2d:8e:c6:eb:59:a4:25:8e:67:71:e8:
5d:03:61:93:ce:6c:74:b1:a1:df:74:75:a0:5c:13:
1a:98:80:1e:6c:7f:3b:9e:73:90:9f:eb:96:6f:ea:
c0:e1:6d:c5:7d:10:90:06:3a:f5:09:a2:39:7a:9a:
57:d0:ce:84:0d:86:cc:8c:49:87:1c:59:ee:e9:29:
d3:87:8d:b2:3b:77:63:ee:08:66:3a:a8:e9:4e:83:
e7:3c:91:26:a2:a4:12:6a:ae:9f:4e:4e:9b:90:c3:
61:a5:88:09:6f:cc:b5:c0:2d:a6:33:f6:b2:d9:a3:
53:f5:7d:c0:09:3e:90:8f:7a:c9:e4:9e:4f:c3:e7:
7b:be:6d:97:7b:80:82:77:61:e5:61:5c:84:2b:14:
42:ff:7a:88:13:83:25:5b:91:99:24:0a:fc:ca:3e:
36:68:85:03:c1:da:52:7c:2c:66:26:ad:99:de:9d:
33:71:61:67:88:44:3a:ae:4b:da:fe:27:c2:bf:dd:
35:91:32:b3:6f:be:67:a4:3b:f5:68:03:6c:ec:ec:
2e:a2:17:0c:1e:a4:95:fe:0e:0a:da:76:98:b8:dc:
42:eb:fe:27:24:aa:19:98:ea:53:d9:0c:01:03:cd:
e9:8c:02:2f:a2:c9:86:88:41:62:34:08:b2:4a:9a:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:F0:61:A9:92:8E:23:14:0C:97:95:5A:1A:E5:AF:C7:09:EB:B9
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1b:d9:62:87:f5:7d:c6:c3:c8:33:b6:1c:30:3c:c3:6d:d3:
04:68:75:b9:af:a3:e0:a5:f1:5c:7d:3b:ab:42:53:be:c2:ca:
05:bc:66:21:b0:44:3a:6b:fb:f0:21:d5:3d:0d:44:d6:49:f6:
39:ad:4a:c1:96:85:0c:f3:5c:6b:d1:32:d2:dd:ab:b5:39:e3:
d3:28:0d:82:bb:f0:c7:9e:d2:3c:0e:df:05:4c:2d:62:fe:73:
a1:a7:a9:38:03:46:a8:39:1a:bf:bb:24:92:04:f2:0b:63:8b:
e4:09:1b:0d:dd:04:b0:6c:df:6e:05:bc:d2:b0:75:43:12:22:
ce:73:7f:b2:93:a2:d9:a1:df:7a:e7:c6:aa:41:7e:9e:9a:21:
44:fe:06:0b:c1:0b:4f:3b:28:3f:64:81:58:97:01:6b:10:6e:
25:a9:11:23:ee:c2:0f:20:b4:34:8c:29:05:d9:00:94:3d:5b:
1d:cd:f4:e5:52:55:53:44:c4:98:7f:da:5f:3e:1f:c2:ad:54:
1e:ce:bc:ff:8f:c5:58:22:ab:d4:81:a5:a8:7d:52:3e:ff:fc:
24:ed:1f:55:d4:39:58:d2:cd:08:5f:a2:6d:8c:6c:6a:37:c5:
90:9c:8c:02:8e:09:84:d5:bd:ea:bb:eb:cc:86:06:76:b2:7b:
42:73:5a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvSLL3fbKmdXDN2zu8a02VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjYwMzAyMTYwMTQzWhcNMjYwMzAzMTYwMTQzWjAzMTEwLwYDVQQD
Eyg2OWI5ZjA2MWE5OTI4ZTIzMTQwYzk3OTU1YTFhZTVhZmM3MDllYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dzfLY7G61mkJY5ncehdA2GTzmx0
saHfdHWgXBMamIAebH87nnOQn+uWb+rA4W3FfRCQBjr1CaI5eppX0M6EDYbMjEmH
HFnu6SnTh42yO3dj7ghmOqjpToPnPJEmoqQSaq6fTk6bkMNhpYgJb8y1wC2mM/ay
2aNT9X3ACT6Qj3rJ5J5Pw+d7vm2Xe4CCd2HlYVyEKxRC/3qIE4MlW5GZJAr8yj42
aIUDwdpSfCxmJq2Z3p0zcWFniEQ6rkva/ifCv901kTKzb75npDv1aANs7OwuohcM
HqSV/g4K2naYuNxC6/4nJKoZmOpT2QwBA83pjAIvosmGiEFiNAiySppmOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm58GGpko4jFAyXlVoa5a/HCeu5MB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhvZYof1
fcbDyDO2HDA8w23TBGh1ua+j4KXxXH07q0JTvsLKBbxmIbBEOmv78CHVPQ1E1kn2
Oa1KwZaFDPNca9Ey0t2rtTnj0ygNgrvwx57SPA7fBUwtYv5zoaepOANGqDkav7sk
kgTyC2OL5AkbDd0EsGzfbgW80rB1QxIiznN/spOi2aHfeufGqkF+npohRP4GC8EL
TzsoP2SBWJcBaxBuJakRI+7CDyC0NIwpBdkAlD1bHc305VJVU0TEmH/aXz4fwq1U
Hs68/4/FWCKr1IGlqH1SPv/8JO0fVdQ5WNLNCF+ibYxsajfFkJyMAo4JhNW96rvr
zIYGdrJ7QnNaWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:05 2026 by rpki-client